|
Plagegeister aller Art und deren Bekämpfung: GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniertWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
12.07.2013, 06:42 | #1 |
| GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert Hallo liebe Community, ich bin neu hier also verzeiht, falls ich Fehler mache Mein Vater hat es geschafft, den Vista-Laptop meiner Mutter zu schrotten, indem er auf Malware-Seiten war und sie nun den 2.07er GVU-Trojaner hat. Wir haben es schon mit Hitman versucht - ein Mal kam ich bis zum Programm, dann war der Laptop leer, bei neuen Versuchen kam ich erst gar nicht so weit. Ich habe alle Modi ausprobiert und nichts passierte außer, dass der Laptop startete und dann zur GVU-Seite kam oder sich direkt wieder herunter fuhr (mit der Anzeige 'Herunterfahren..'). Mein zweiter Versuch war die Methode von Alex Ken via youtube. Ich habe mit 'Rufus' einen Hiren's Boot USB Stick erstellt, bin auch gut durchgekommen, habe allerdings versehentlich, anstatt die Dateien durch Zusatz der Endung 'bak' umzubenennen, die eindeutigen Malware-Dateien gelöscht. Nach dem Neustart startete dann eine cmd.exe und sagte mir, dass eben diese, von mir als eindeutige Malware-Datei erkannte Datei, falsch geschrieben ist oder nicht gefunden wurde. Momentan bin ich dabei einen OTLPE-Stick zu erstellen! Die Schwierigkeit ist, dass auf dem befallenen Laptop Vista ist, mein Rechner ein Macbook ist und das Netbook, dass ich noch nutzen kann, Windows 7 hat Ich hoffe, ihr könnt mir helfen! Dankeschön |
12.07.2013, 06:47 | #2 |
/// the machine /// TB-Ausbilder | GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert Hi,
__________________Lass OTLPE weg. Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8) Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)
__________________ |
12.07.2013, 07:10 | #3 |
| GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert Hallo schrauber,
__________________danke für die schnelle Antwort. Nach einigen Problemen hat es jetzt über die CD geklappt! FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-07-2013 01 Ran by SYSTEM on 12-07-2013 08:41:28 Running from F:\ Windows Vista (TM) Home Premium Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Recovery The current controlset is ControlSet001 ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and Addition.txt log. ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] - %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [LMgrOSD] - "C:\Program Files\Launch Manager\OSDCtrl.exe" [241664 2006-08-29] () HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon [1637496 2011-08-04] (CANON INC.) HKLM\...\Run: [avgnt] - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-07-01] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s [11672208 2012-08-31] (Realtek Semiconductor) HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [141848 2009-09-23] (Intel Corporation) HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [173592 2009-09-23] (Intel Corporation) HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [150552 2009-09-23] (Intel Corporation) HKLM\...\Runonce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [x] HKU\Anna\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\Anna\AppData\Local\Temp\cesexmuolejicawli.exe [x] <===== ATTENTION HKU\Anna\...\Winlogon: [Shell] cmd.exe [ 2008-01-21] (Microsoft Corporation) <==== ATTENTION HKU\Anna\...\Command Processor: "C:\Users\Anna\AppData\Local\Temp\cesexmuolejicawli.exe" <===== ATTENTION! HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation) HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation) Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.) Startup: C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ========================== Services (Whitelisted) ================= S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG) S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG) S2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [140456 2011-09-06] () S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.) S3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [113152 2009-03-04] (Wistron Corp.) ==================== Drivers (Whitelisted) ==================== S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-03-27] (Avira Operations GmbH & Co. KG) S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-03-27] (Avira Operations GmbH & Co. KG) S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-27] (Avira Operations GmbH & Co. KG) S1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH) S1 HWiNFO32; \??\F:\DIAG\HWINFO32\HWiNFO32.SYS [x] S3 IpInIp; system32\DRIVERS\ipinip.sys [x] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x] S3 USBAAPL; System32\Drivers\usbaapl.sys [x] S3 uxddrv; \??\F:\uxddrv86.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-12 08:41 - 2013-07-12 08:41 - 00000000 ____D C:\FRST 2013-07-11 19:27 - 2013-07-11 19:28 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp 2013-07-11 19:22 - 2013-07-11 19:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp 2013-07-11 18:29 - 2013-07-11 19:27 - 193362412 _____ C:\Windows\MEMORY.DMP 2013-07-11 18:29 - 2013-07-11 19:27 - 00000000 ____D C:\Windows\Minidump 2013-07-11 18:29 - 2013-07-11 18:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp 2013-07-11 18:22 - 2013-07-11 18:22 - 00000000 ____D C:\ProgramData\HitmanPro 2013-07-11 05:22 - 2013-05-29 02:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-07-11 05:22 - 2013-05-29 02:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-07-11 05:22 - 2013-05-29 02:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-07-11 05:22 - 2013-05-29 02:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2013-07-11 05:22 - 2013-05-29 02:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-07-11 05:22 - 2013-05-29 02:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-07-11 05:22 - 2013-05-29 02:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\System32\url.dll 2013-07-11 05:22 - 2013-05-29 02:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-07-11 05:22 - 2013-05-29 02:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2013-07-11 05:22 - 2013-05-29 02:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll 2013-07-11 05:22 - 2013-05-29 02:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-07-11 05:22 - 2013-05-29 02:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-07-11 05:22 - 2013-05-29 02:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-07-11 05:22 - 2013-05-29 02:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-07-11 05:22 - 2013-05-29 02:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2013-07-11 05:22 - 2013-05-29 02:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-07-10 10:17 - 2013-06-04 02:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys 2013-07-10 10:17 - 2013-06-01 05:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll 2013-07-10 10:17 - 2013-05-08 05:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL 2013-07-10 10:17 - 2013-04-17 12:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\System32\d3d10.dll 2013-07-10 10:17 - 2013-04-17 12:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll 2013-07-10 10:17 - 2013-04-17 12:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\System32\d3d10core.dll 2013-07-10 10:17 - 2013-04-17 12:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll 2013-07-10 10:17 - 2013-04-17 11:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll 2013-07-10 10:17 - 2013-04-17 11:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll 2013-07-10 10:17 - 2013-04-17 11:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\System32\d2d1.dll 2013-07-10 10:17 - 2013-04-17 11:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll 2013-07-10 10:17 - 2013-04-17 11:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\System32\FntCache.dll 2013-07-10 08:56 - 2013-07-10 08:56 - 00000000 ____D C:\Users\Anna\AppData\Local\{4D4C01C9-758E-4287-BC78-525110F96E28} 2013-07-09 12:05 - 2013-07-09 12:05 - 00000000 ____D C:\Users\Anna\AppData\Local\{972D5C66-ABBE-4299-BEC2-0AB1697EDFCA} 2013-07-08 10:17 - 2013-07-08 10:17 - 00000000 ____D C:\Users\Anna\AppData\Local\{76AA8DA7-A0CA-4B64-8161-5F70E9314C52} 2013-07-07 20:13 - 2013-07-07 20:14 - 00000000 ____D C:\Users\Anna\AppData\Local\{052E06E5-BB70-423F-BCD6-CE10447904D6} 2013-07-05 11:07 - 2013-07-05 11:07 - 00000000 ____D C:\Users\Anna\AppData\Local\{5E8BAA18-B059-4DFC-B145-9F953F9BA906} 2013-07-04 19:49 - 2013-07-04 19:49 - 00000000 ____D C:\Users\Anna\AppData\Local\{350F4CE9-E1AF-4E8D-8222-12F57D801274} 2013-07-03 16:10 - 2013-07-03 16:10 - 00000000 ____D C:\Users\Anna\AppData\Local\{9E7E6922-CD5E-4DF0-99CF-B1577E87F527} 2013-07-02 19:30 - 2013-07-02 19:30 - 00000000 ____D C:\Users\Anna\AppData\Local\{107D0085-EDCD-4028-B27A-921164322B23} 2013-07-01 11:50 - 2013-07-01 11:50 - 00000000 ____D C:\Users\Anna\AppData\Local\{C50E8972-0969-443D-9617-574BB869F1E5} 2013-06-30 16:32 - 2013-06-30 16:32 - 00000000 ____D C:\Users\Anna\AppData\Local\{9FB6E802-C0B9-4CC0-A303-0E7DFEC18093} 2013-06-29 14:23 - 2013-06-29 14:23 - 00000000 ____D C:\Users\Anna\AppData\Local\{74CA5688-C18F-4E53-B329-926648ABE73E} 2013-06-28 16:22 - 2013-06-28 16:22 - 00000000 ____D C:\Users\Anna\AppData\Local\{00A83E1D-9BAB-4DE4-8409-8188E70B61FA} 2013-06-27 08:55 - 2013-06-27 08:55 - 00000000 ____D C:\Users\Anna\AppData\Local\{743A058F-28BD-44D7-BFFD-C17A24F3A10E} 2013-06-26 09:21 - 2013-06-26 09:21 - 00000000 ____D C:\Users\Anna\AppData\Local\{E17C377E-CF89-49FF-B3B9-E7E0DB3416CB} 2013-06-25 16:12 - 2013-06-25 16:12 - 00000000 ____D C:\Users\Anna\AppData\Local\{8482F556-00F6-480B-8297-274C3203DE36} 2013-06-22 09:56 - 2013-06-22 09:56 - 00000000 ____D C:\Users\Anna\AppData\Local\{12344D84-56C5-4004-B0CF-212C0E69EF24} 2013-06-21 20:56 - 2013-06-21 20:56 - 00000000 ____D C:\ProgramData\WindowsSearch 2013-06-21 10:37 - 2013-06-21 10:37 - 00000000 ____D C:\Users\Anna\AppData\Local\{0EF8A2A7-1DBD-4D75-853F-3E96BE4B1424} 2013-06-20 20:49 - 2013-06-20 20:49 - 00000000 ____D C:\Users\Anna\AppData\Local\{909E8661-CC35-4DA3-89BE-DD129DF598DE} 2013-06-20 08:48 - 2013-06-20 08:49 - 00000000 ____D C:\Users\Anna\AppData\Local\{15C01E4F-D9D9-4815-BE5F-676CBE54C1D7} 2013-06-19 20:48 - 2013-06-19 20:48 - 00000000 ____D C:\Users\Anna\AppData\Local\{1D11C49D-7022-4916-AFD2-1FAE11A49B68} 2013-06-19 08:43 - 2013-06-19 08:43 - 00000000 ____D C:\Users\Anna\AppData\Local\{E99D4311-99A0-4DA7-AD2D-62EB8C9C5C37} 2013-06-18 14:06 - 2013-06-18 14:06 - 00000000 ____D C:\Users\Anna\AppData\Local\{19CEE134-AEA9-4C14-BA98-EDE6B9E5B5C0} 2013-06-17 11:38 - 2013-06-17 11:39 - 00000000 ____D C:\Users\Anna\AppData\Local\{D6909C70-8889-4071-9A82-1635D51368D4} 2013-06-17 11:36 - 2013-05-08 05:37 - 00905576 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys 2013-06-17 11:36 - 2013-05-02 05:04 - 00443904 _____ (Microsoft Corporation) C:\Windows\System32\win32spl.dll 2013-06-17 11:36 - 2013-05-02 05:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\System32\printcom.dll 2013-06-17 07:57 - 2013-06-17 07:57 - 00000000 ____D C:\Users\Anna\AppData\Local\{9E07B48F-B698-42AC-8E46-29CCD7DBA172} 2013-06-16 17:50 - 2013-06-16 17:50 - 00000000 ____D C:\Users\Anna\AppData\Local\{9309CCC7-9461-40B0-8CC9-26C7264EA563} 2013-06-15 20:29 - 2013-06-15 20:29 - 00000000 ____D C:\Users\Anna\AppData\Local\{CCE2FE15-730D-4146-9D75-362B7AEE2284} 2013-06-14 21:32 - 2013-06-14 21:32 - 00000000 ____D C:\Users\Anna\AppData\Local\{B082B4B9-0852-4BAE-9922-ECFF38558CF8} 2013-06-14 08:57 - 2013-06-14 08:57 - 00000000 ____D C:\Users\Anna\AppData\Local\{2C323536-3B91-4D3E-9806-F8E867075601} 2013-06-13 20:56 - 2013-06-13 20:57 - 00000000 ____D C:\Users\Anna\AppData\Local\{15D73CE6-A362-4D22-BEE6-40518B9335E3} 2013-06-13 08:56 - 2013-06-13 08:56 - 00000000 ____D C:\Users\Anna\AppData\Local\{E0B6B397-7077-4DDE-82CD-A312E477517E} 2013-06-13 04:54 - 2013-06-13 04:54 - 00000000 ____D C:\30269cb3e1045cd9ca 2013-06-12 20:34 - 2013-06-12 20:35 - 00000000 ____D C:\Users\Anna\AppData\Local\{56379DE9-17D3-4272-86F3-CA02494654BD} 2013-06-12 08:38 - 2013-05-02 23:03 - 03603832 _____ (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe 2013-06-12 08:38 - 2013-05-02 23:03 - 03551096 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe 2013-06-12 08:38 - 2013-04-24 05:00 - 00985600 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2013-06-12 08:38 - 2013-04-24 05:00 - 00133120 _____ (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll 2013-06-12 08:38 - 2013-04-24 05:00 - 00098304 _____ (Microsoft Corporation) C:\Windows\System32\cryptnet.dll 2013-06-12 08:38 - 2013-04-24 05:00 - 00041984 _____ (Microsoft Corporation) C:\Windows\System32\certenc.dll 2013-06-12 08:38 - 2013-04-24 02:46 - 00812544 _____ (Microsoft Corporation) C:\Windows\System32\certutil.exe 2013-06-12 08:38 - 2013-04-17 13:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll 2013-06-12 08:34 - 2013-06-12 08:34 - 00000000 ____D C:\Users\Anna\AppData\Local\{D424C3F1-EBFB-4106-BEFC-DF54D91231AF} ==================== One Month Modified Files and Folders ======= 2013-07-12 08:41 - 2013-07-12 08:41 - 00000000 ____D C:\FRST 2013-07-12 07:26 - 2008-01-21 08:16 - 01445546 _____ C:\Windows\System32\PerfStringBackup.INI 2013-07-12 07:26 - 2008-01-21 02:35 - 01685413 _____ C:\Windows\WindowsUpdate.log 2013-07-12 07:26 - 2006-11-02 13:47 - 00003712 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-12 07:26 - 2006-11-02 13:47 - 00003712 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-11 22:54 - 2012-12-03 22:10 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-07-11 22:44 - 2011-07-30 18:53 - 00000000 ____D C:\users\Anna 2013-07-11 21:22 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET 2013-07-11 20:32 - 2006-11-02 11:22 - 19398656 _____ C:\Windows\System32\config\SYSTEM.BAK 2013-07-11 19:28 - 2013-07-11 19:27 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp 2013-07-11 19:27 - 2013-07-11 18:29 - 193362412 _____ C:\Windows\MEMORY.DMP 2013-07-11 19:27 - 2013-07-11 18:29 - 00000000 ____D C:\Windows\Minidump 2013-07-11 19:22 - 2013-07-11 19:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp 2013-07-11 18:29 - 2013-07-11 18:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp 2013-07-11 18:22 - 2013-07-11 18:22 - 00000000 ____D C:\ProgramData\HitmanPro 2013-07-11 05:35 - 2006-11-02 13:47 - 00372168 _____ C:\Windows\System32\FNTCACHE.DAT 2013-07-11 05:33 - 2011-08-25 17:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-07-11 05:32 - 2006-11-02 13:37 - 00000000 ____D C:\Windows\System32\XPSViewer 2013-07-11 05:24 - 2006-11-02 11:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\System32\mrt.exe 2013-07-11 05:13 - 2006-11-02 13:37 - 00000000 ____D C:\Program Files\Windows Journal 2013-07-10 08:56 - 2013-07-10 08:56 - 00000000 ____D C:\Users\Anna\AppData\Local\{4D4C01C9-758E-4287-BC78-525110F96E28} 2013-07-09 12:05 - 2013-07-09 12:05 - 00000000 ____D C:\Users\Anna\AppData\Local\{972D5C66-ABBE-4299-BEC2-0AB1697EDFCA} 2013-07-08 10:17 - 2013-07-08 10:17 - 00000000 ____D C:\Users\Anna\AppData\Local\{76AA8DA7-A0CA-4B64-8161-5F70E9314C52} 2013-07-07 20:14 - 2013-07-07 20:13 - 00000000 ____D C:\Users\Anna\AppData\Local\{052E06E5-BB70-423F-BCD6-CE10447904D6} 2013-07-05 11:07 - 2013-07-05 11:07 - 00000000 ____D C:\Users\Anna\AppData\Local\{5E8BAA18-B059-4DFC-B145-9F953F9BA906} 2013-07-04 19:49 - 2013-07-04 19:49 - 00000000 ____D C:\Users\Anna\AppData\Local\{350F4CE9-E1AF-4E8D-8222-12F57D801274} 2013-07-03 16:10 - 2013-07-03 16:10 - 00000000 ____D C:\Users\Anna\AppData\Local\{9E7E6922-CD5E-4DF0-99CF-B1577E87F527} 2013-07-02 19:30 - 2013-07-02 19:30 - 00000000 ____D C:\Users\Anna\AppData\Local\{107D0085-EDCD-4028-B27A-921164322B23} 2013-07-01 12:09 - 2012-08-30 11:03 - 00000000 ____D C:\ProgramData\CanonIJPLM 2013-07-01 11:50 - 2013-07-01 11:50 - 00000000 ____D C:\Users\Anna\AppData\Local\{C50E8972-0969-443D-9617-574BB869F1E5} 2013-06-30 16:32 - 2013-06-30 16:32 - 00000000 ____D C:\Users\Anna\AppData\Local\{9FB6E802-C0B9-4CC0-A303-0E7DFEC18093} 2013-06-29 14:23 - 2013-06-29 14:23 - 00000000 ____D C:\Users\Anna\AppData\Local\{74CA5688-C18F-4E53-B329-926648ABE73E} 2013-06-28 16:22 - 2013-06-28 16:22 - 00000000 ____D C:\Users\Anna\AppData\Local\{00A83E1D-9BAB-4DE4-8409-8188E70B61FA} 2013-06-27 08:55 - 2013-06-27 08:55 - 00000000 ____D C:\Users\Anna\AppData\Local\{743A058F-28BD-44D7-BFFD-C17A24F3A10E} 2013-06-26 15:18 - 2012-09-20 14:33 - 00000000 ____D C:\Users\Anna\Desktop\Noah 2013-06-26 09:21 - 2013-06-26 09:21 - 00000000 ____D C:\Users\Anna\AppData\Local\{E17C377E-CF89-49FF-B3B9-E7E0DB3416CB} 2013-06-25 16:12 - 2013-06-25 16:12 - 00000000 ____D C:\Users\Anna\AppData\Local\{8482F556-00F6-480B-8297-274C3203DE36} 2013-06-22 10:09 - 2013-05-29 12:43 - 00000000 ____D C:\Users\Anna\Desktop\Dzemo in Ostfriesland 2013-06-22 09:56 - 2013-06-22 09:56 - 00000000 ____D C:\Users\Anna\AppData\Local\{12344D84-56C5-4004-B0CF-212C0E69EF24} 2013-06-21 20:56 - 2013-06-21 20:56 - 00000000 ____D C:\ProgramData\WindowsSearch 2013-06-21 10:37 - 2013-06-21 10:37 - 00000000 ____D C:\Users\Anna\AppData\Local\{0EF8A2A7-1DBD-4D75-853F-3E96BE4B1424} 2013-06-20 20:49 - 2013-06-20 20:49 - 00000000 ____D C:\Users\Anna\AppData\Local\{909E8661-CC35-4DA3-89BE-DD129DF598DE} 2013-06-20 08:49 - 2013-06-20 08:48 - 00000000 ____D C:\Users\Anna\AppData\Local\{15C01E4F-D9D9-4815-BE5F-676CBE54C1D7} 2013-06-19 20:48 - 2013-06-19 20:48 - 00000000 ____D C:\Users\Anna\AppData\Local\{1D11C49D-7022-4916-AFD2-1FAE11A49B68} 2013-06-19 08:43 - 2013-06-19 08:43 - 00000000 ____D C:\Users\Anna\AppData\Local\{E99D4311-99A0-4DA7-AD2D-62EB8C9C5C37} 2013-06-18 20:16 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache 2013-06-18 14:06 - 2013-06-18 14:06 - 00000000 ____D C:\Users\Anna\AppData\Local\{19CEE134-AEA9-4C14-BA98-EDE6B9E5B5C0} 2013-06-17 11:39 - 2013-06-17 11:38 - 00000000 ____D C:\Users\Anna\AppData\Local\{D6909C70-8889-4071-9A82-1635D51368D4} 2013-06-17 11:22 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\System32\Msdtc 2013-06-17 11:05 - 2006-11-02 11:22 - 41418752 _____ C:\Windows\System32\config\software_previous 2013-06-17 11:05 - 2006-11-02 11:22 - 19398656 _____ C:\Windows\System32\config\system_previous 2013-06-17 11:04 - 2006-11-02 12:18 - 00000000 __RSD C:\Windows\Media 2013-06-17 11:04 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\System32\spool 2013-06-17 11:03 - 2011-07-31 13:21 - 00000000 ____D C:\ProgramData\McAfee Security Scan 2013-06-17 11:03 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\registration 2013-06-17 10:59 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\System32\config\default_previous 2013-06-17 10:58 - 2006-11-02 11:22 - 36438016 _____ C:\Windows\System32\config\components_previous 2013-06-17 10:14 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\System32\config\security_previous 2013-06-17 10:13 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\System32\config\sam_previous 2013-06-17 07:57 - 2013-06-17 07:57 - 00000000 ____D C:\Users\Anna\AppData\Local\{9E07B48F-B698-42AC-8E46-29CCD7DBA172} 2013-06-16 17:50 - 2013-06-16 17:50 - 00000000 ____D C:\Users\Anna\AppData\Local\{9309CCC7-9461-40B0-8CC9-26C7264EA563} 2013-06-15 20:29 - 2013-06-15 20:29 - 00000000 ____D C:\Users\Anna\AppData\Local\{CCE2FE15-730D-4146-9D75-362B7AEE2284} 2013-06-14 21:32 - 2013-06-14 21:32 - 00000000 ____D C:\Users\Anna\AppData\Local\{B082B4B9-0852-4BAE-9922-ECFF38558CF8} 2013-06-14 12:29 - 2013-01-01 16:25 - 00000000 ____D C:\Users\Anna\Desktop\Neuer Ordner 2013-06-14 08:57 - 2013-06-14 08:57 - 00000000 ____D C:\Users\Anna\AppData\Local\{2C323536-3B91-4D3E-9806-F8E867075601} 2013-06-13 20:57 - 2013-06-13 20:56 - 00000000 ____D C:\Users\Anna\AppData\Local\{15D73CE6-A362-4D22-BEE6-40518B9335E3} 2013-06-13 08:56 - 2013-06-13 08:56 - 00000000 ____D C:\Users\Anna\AppData\Local\{E0B6B397-7077-4DDE-82CD-A312E477517E} 2013-06-13 04:56 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\System32\de-DE 2013-06-13 04:54 - 2013-06-13 04:54 - 00000000 ____D C:\30269cb3e1045cd9ca 2013-06-12 20:35 - 2013-06-12 20:34 - 00000000 ____D C:\Users\Anna\AppData\Local\{56379DE9-17D3-4272-86F3-CA02494654BD} 2013-06-12 08:34 - 2013-06-12 08:34 - 00000000 ____D C:\Users\Anna\AppData\Local\{D424C3F1-EBFB-4106-BEFC-DF54D91231AF} ==================== Known DLLs (Whitelisted) ============ ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points ========================= Restore point made on: 2013-05-16 08:21:49 Restore point made on: 2013-05-17 12:38:37 Restore point made on: 2013-05-20 15:45:55 Restore point made on: 2013-05-21 18:10:39 Restore point made on: 2013-05-23 09:36:52 Restore point made on: 2013-05-25 09:06:35 Restore point made on: 2013-05-31 08:15:57 Restore point made on: 2013-06-04 08:58:18 Restore point made on: 2013-06-07 14:41:03 Restore point made on: 2013-06-09 15:25:20 Restore point made on: 2013-06-11 07:58:44 Restore point made on: 2013-06-12 13:17:12 Restore point made on: 2013-06-13 04:52:24 Restore point made on: 2013-06-13 07:29:44 Restore point made on: 2013-06-17 10:27:31 Restore point made on: 2013-06-17 10:58:16 Restore point made on: 2013-06-17 11:36:54 Restore point made on: 2013-06-17 11:41:06 Restore point made on: 2013-06-21 10:42:34 Restore point made on: 2013-06-25 16:10:31 Restore point made on: 2013-06-29 14:23:45 Restore point made on: 2013-07-03 16:15:20 Restore point made on: 2013-07-09 12:40:53 Restore point made on: 2013-07-10 09:14:52 Restore point made on: 2013-07-11 05:12:07 ==================== Memory info =========================== Percentage of memory in use: 11% Total physical RAM: 4085.5 MB Available physical RAM: 3614.41 MB Total Pagefile: 3826.14 MB Available Pagefile: 3663.87 MB Total Virtual: 2047.88 MB Available Virtual: 1963.1 MB ==================== Drives ================================ Drive c: (BOOT) (Fixed) (Total:278.57 GB) (Free:198.56 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (RECOVER) (Fixed) (Total:19.5 GB) (Free:12.8 GB) FAT32 Drive e: (MEDHPSP1DEU) (CDROM) (Total:2.53 GB) (Free:0 GB) CDFS Drive f: (STORE N GO) (Removable) (Total:3.73 GB) (Free:3.72 GB) FAT32 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: F98D6E74) Partition 1: (Active) - (Size=279 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=20 GB) - (Type=0C) ======================================================== Disk: 1 (Size: 4 GB) (Disk ID: 00000000) Partition 1: (Not Active) - (Size=4 GB) - (Type=0B) LastRegBack: 2013-07-12 07:26 ==================== End Of Log ============================ Danke Geändert von schnanna (12.07.2013 um 07:46 Uhr) |
12.07.2013, 08:38 | #4 |
/// the machine /// TB-Ausbilder | GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKU\Anna\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\Anna\AppData\Local\Temp\cesexmuolejicawli.exe [x] <===== ATTENTION HKU\Anna\...\Winlogon: [Shell] cmd.exe [ 2008-01-21] (Microsoft Corporation) <==== ATTENTION HKU\Anna\...\Command Processor: "C:\Users\Anna\AppData\Local\Temp\cesexmuolejicawli.exe" <===== ATTENTION! C:\Users\Anna\AppData\Local\Temp\cesexmuolejicawli.exe
Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier. neu booten, freuen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
12.07.2013, 09:04 | #5 |
| GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniertCode:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 12-07-2013 01 Ran by SYSTEM at 2013-07-12 09:52:52 Run:1 Running from F:\ Boot Mode: Recovery ============================================== HKU\Anna\Software\Microsoft\Windows\CurrentVersion\Run\\qcgce2mrvjq91kk1e7pnbb19m52fx => Value deleted successfully. HKU\Anna\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully. HKU\Anna\Software\Microsoft\Command Processor\\AutoRun => Value deleted successfully. "C:\Users\Anna\AppData\Local\Temp\cesexmuolejicawli.exe" => File/Directory not found. ==== End of Fixlog ==== Hast du einen Tipp, was man machen kann, um sowas demnächst zu umgehen? Also spezielle Software? Danke, danke, danke |
12.07.2013, 11:17 | #6 |
/// the machine /// TB-Ausbilder | GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert Machen wir nachher, erst noch Kontrollscans im normalen Modus Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ --> GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert |
12.07.2013, 12:17 | #7 |
| GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert Nach dem Booten ist die WLan-Verbindung hinüber. Per Lan habe ich eine Verbindung, das Netzwerk wird aber nicht gefunden, wenn ich es über WLan probiere. Woran kann das liegen? |
12.07.2013, 12:25 | #8 |
/// the machine /// TB-Ausbilder | GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert Diese Malware verbiegt gerne noch en paar Einstellungen. Richten wir im Anschluss
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
12.07.2013, 12:39 | #9 |
| GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert Der JRT-Code Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 5.0.7 (07.11.2013:1) OS: Windows Vista (TM) Home Premium x86 Ran by Anna on 12.07.2013 at 13:26:23,37 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{8D527BD2-87A1-49EB-8E14-29038C3D3658} ~~~ Files ~~~ Folders Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{007B88DF-8835-4C71-8271-808BF8FE16CD} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{009396BA-19E3-4915-B8F8-1F066C0D0482} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{00A83E1D-9BAB-4DE4-8409-8188E70B61FA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{016A0D39-51D0-4AA1-893E-BED359DB5BE9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{020E90B0-5340-4901-9647-8461FC5A637C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0382E63D-F32D-464A-BDCE-6A72AE026216} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{03859908-722D-4DBF-A325-E1A872F38808} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{03AA0A0F-C8A0-495E-ADF6-8D249ED0FCC8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{03C2F8FE-AF2B-4274-B98A-339B2845836D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{03DF4CB8-D64D-4CD5-9AE0-11A9453A6A3F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{04819A12-2407-477C-90B7-F4C63C1C536A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{04C36AE3-60B5-4F49-95D9-1341E4F224EA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{051A3D38-D6D7-44DE-9BCE-0B34B3C9FB0C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{052E06E5-BB70-423F-BCD6-CE10447904D6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{05CDC5AC-6E32-4C89-B656-161BF717A88B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{073462FB-CCCB-42B9-857E-A0C241187251} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0898248F-BBF5-49C7-822E-912921FBF292} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{08B0EE70-51EF-4BF7-9FA5-C57C0616009C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{08EB226C-3BDB-4B6C-B7F3-07B909714735} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{091BFEDD-1835-4A10-8206-E4E9D8FD8697} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0A6FAB9B-7109-4380-B169-FCE4FE216725} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0C0C643F-B981-425C-8747-449178A60374} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0C219DAD-7371-46A1-AE3E-74D22E31FC27} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0C316823-26AA-46D6-AC9A-CBE7ACCDFB4A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0C613DE3-7A3E-4157-9D12-1FC39A67ADA2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0C7E5117-1085-435C-AD49-D97F2F81CD48} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0D4B897A-61ED-4946-9515-50F15E6A7063} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0E23508F-F76E-4E31-A5E8-CC6CDF4D496C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0E511339-9AE6-4467-B057-30ABAC8F1B43} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0EA45E42-B42C-4F8A-9258-A4E7E870006C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0EBEF401-9BCE-4188-BECD-791F73D211CC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0ECF8291-B355-4A7D-A52F-E5ACDFF186AB} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0EF8A2A7-1DBD-4D75-853F-3E96BE4B1424} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0F5173B2-994F-4604-BA7E-8A84429D6D6C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0F5D7392-47FC-49D1-ACC8-A88D4F06E4B5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0FC132CA-8CDA-4ED3-B395-0319A060CA1B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0FE29143-EDE4-48F9-97B1-A310050B9104} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1010FC54-47E2-43DE-9665-D2B296F91294} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{10746C80-CBEA-4A80-AB02-426F05F06374} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{107D0085-EDCD-4028-B27A-921164322B23} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{109AE8E9-CE9F-4759-9DEB-8792F5B97FAB} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{10F498FC-86A0-4928-A973-DB77FE57DCAF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{114DD16C-A6CB-47CE-BCCA-9A8B003F15B4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{11F9CECD-46DC-4CC9-B628-7971CB228520} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{12344D84-56C5-4004-B0CF-212C0E69EF24} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{123D196E-C78E-439F-AC07-F3548BAEB17E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{12E1F57B-29A6-47B6-95D5-0D79AB8583A8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{13B554E4-87C7-4D72-9A08-228BE8D05408} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{13B820A1-6CE3-4EA0-AD4C-86D8FE6CE157} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{144AA651-A344-4E08-99B6-704446AE77C9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{14824D58-2ADF-4545-9484-E0F2AED2A771} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{157F3C06-6AAE-4D3C-B8AE-85BE6053CF35} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{15C01E4F-D9D9-4815-BE5F-676CBE54C1D7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{15D73CE6-A362-4D22-BEE6-40518B9335E3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{15E3BF25-51B8-4A0B-846D-78EA95ADB9DF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{160BBC4B-C6F8-477C-AA65-E03F0D2B44AA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1665F30E-FD70-40A3-A3E9-9F636197511B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1682B2F1-D479-494D-8B2E-59360E24D4E0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{16C7B44C-E743-4B4C-BC15-3912C953F30C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{16D0BDC6-1982-45D1-8B53-04EC51A47DD8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{17343541-B078-411C-BF26-EDE26B61E256} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{17A98FEA-7F87-4921-B9DA-BDA2AF2C3ADA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{181B4C05-AC79-4CAD-B8E1-5D044D8DD97F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{187D8071-4905-4F7D-8A2C-97C795295266} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{188119F0-06BC-471E-9082-FB7D9A646213} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{18899B08-3C5F-4026-861E-36BAB38A4DD7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{18D50863-46B7-42E8-969B-1D4C7274E5F4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{198541B0-1086-4B10-A177-ED30EB1FB3B1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{19C57BCA-4F53-4B41-B4A2-EA172A9757F8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{19CEE134-AEA9-4C14-BA98-EDE6B9E5B5C0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{19DA2CBE-8912-4F01-8306-0412C01921B6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1A50BB5E-1317-4BEE-A17F-157A9BC130C4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1ABAF2A7-B2A7-48FF-BA1A-8729383BC747} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1AE8BC79-854C-44F9-8627-900BE339346E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1B3FBED4-E9E4-4E93-A549-FE6EB7043723} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1B92BA9F-50DB-47EB-BF08-F5987ACC3F38} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1C14A75F-BDA9-491F-81C2-52CAD68F0854} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1C822FEF-15FD-41B4-A77A-271FCA927CD6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1C82B4DC-4C29-4B3B-8388-4C0DD76B13F1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1CB08237-E9F0-4C13-AB9D-8199CA97CDF7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1D11C49D-7022-4916-AFD2-1FAE11A49B68} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1D63CD09-B0C0-4768-8D96-55C5F30160EF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1D7DE9DE-F63C-453A-B6B0-478494F7F603} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1DBE9EA5-DF7C-4688-8128-E68770613367} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1DD48320-0EFE-4A94-A5FD-AC5FEE6FE838} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1E0729D4-8783-419D-BA91-2B950D80ADCF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1E0FC961-8474-464C-B034-2BAE881C9BD1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1E1530F4-B6AE-4189-BCDA-C7775CB9CD78} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1E191E41-CC4A-47E2-A919-BD7A7376D80A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1E70EB93-DFDE-4B7E-AFA8-AF434BBDA9AE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1ECB8E41-E5E3-4E64-8063-55A6C6923AD4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1F45D5DE-3E09-479C-89FB-731B0A2DB78F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1F49FC72-0E38-490C-9238-1043816E7772} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{20EAFBE0-4F3A-4FCE-81E0-D87F71AAD257} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{213B09BC-F8AB-480C-94AB-F5F77BF5B5C0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{21441EFF-C74E-4E49-8E19-7E4C65CAB24F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{21AF14AB-C38D-45A3-9B2B-253BF057F577} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{21BC91BA-98A4-4DAA-BDE2-4CC2126DD124} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{225A3CBB-A369-4FBB-BC6A-A283D8D1C5AF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{23CAD4C6-F05D-4DD4-86CC-AC93CDE0F32D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{23EA9D14-D14A-4A15-89B8-54A46031C8EE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{24896E5E-9753-49AB-983E-6FF22F99A64F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{250479C9-D407-4074-B91E-1D6E96AD62B9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{260E1AE3-AA3E-47A2-AA83-DD19EDB8BCE4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{262B5C99-72B9-4560-8EB9-C12D9EA8F3C3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{264C2309-61E7-42CC-8AB7-EE8A933794B2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{266D53C1-129F-4D48-8F80-3B6886FC077C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2682D22D-2E51-4847-ACF2-04774767246B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{26C2A668-FEBB-49E0-8E12-5090166332FF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{26D0711B-6850-4226-A2CA-3E02E8C9FD97} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{27AC661A-7E7C-46C9-B5FF-EC903D985BD9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{28091822-8630-43C6-8C2A-0AF3633E4FAB} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2827B23A-0B64-4048-9246-0DD1E0E18391} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2827C404-0FF7-4BDB-9D9B-4175959EA5EE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{28B34025-224D-493F-8908-019B152B493F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{28F5C578-25E5-495A-B128-DE84381DB3F1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{291088B7-4AA6-40E2-A4CA-8E5BDD6EF838} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{29390A1F-8F94-4612-8E58-AD10F0B8F09E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2967289E-2492-4A0C-989A-7A90A801D7EE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{297AC3A8-0463-4732-A6D3-E988E0107DAB} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{29D0EBBD-A3BB-49E2-900C-BCF647AB1A87} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2A3E0515-65E9-42E3-97F4-F24A5A274DD0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2AD8313F-3437-46F1-A4BC-D34D2C2CA1C4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2BBAE166-A0B1-43F9-A605-F504B7A2DE97} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2C323536-3B91-4D3E-9806-F8E867075601} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2C37214F-AA42-4C6B-906A-CE1678A8D2A2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2C7B4176-18EF-4EEE-A758-A51999F92122} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2CCAEDE0-E79E-4381-96C1-9E123E691CF6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2D8DEA64-729C-4DAE-9F6E-BB4D1356B30C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2D9E42FF-EE61-485E-A9F8-9AB4CC8BD803} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2DB42821-33E9-4949-B55C-72A072779B5F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2DBDE85C-14D5-4579-B1F2-1B7120123333} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2DF46AEC-5567-4086-AE68-BA45401AD2A2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2E5BD05F-6081-465E-AB44-AB3D0726A16D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2F114444-5C03-4B60-BC5F-1A90AC8D8990} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2F410904-2237-4017-9BD0-DD7E9037AB2F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2F454BDD-72F0-4492-9FD0-6DCA6A3D31C8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2F9560AB-F1FE-4ED5-8AC1-0EB380E1DC0E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3096416C-EC29-430A-B6BE-9879F6855858} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3182775D-4F21-4AD7-B1B0-1B1312A563AB} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{324A3C52-DDF7-4E88-BD0F-CD7AC9D98339} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{32D57235-4BB0-4E00-B185-3D0EFA2521E5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3393CD09-F896-4751-A060-B169E1DDBB56} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{339DBFEC-E19F-4910-A42F-0B02A9E4AB4E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{33DCAA36-B171-41BA-8C94-73FD5A1048C2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{340637BD-69E0-489A-9876-A3F534A2DCD5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{34885BAE-464F-42D8-B624-C501436096D1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{349EA470-F3F8-4C5D-8BA3-D8D2C42882D2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{34B03791-D9BB-47BA-B2F1-8009DE8E21D2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{34B6EEB1-5734-4CA8-986D-DA4E7402D634} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{34C4E8F6-4F87-414C-8035-CAA5F58DEFFC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{350F4CE9-E1AF-4E8D-8222-12F57D801274} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3574B8AF-BE17-4B62-80CA-1186B614AF09} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{35D92669-E3F4-4FB4-9116-48F1CE67D905} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{365575D3-0D56-44F6-BD3E-8662ED9A7949} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{366FD285-E73D-4640-8670-79338C868538} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{37195135-5435-4E75-9EDD-7367A5B26A4B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{372DD52D-2CF2-47FA-9D7B-6EEACC58114D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{373C3BBB-09BC-4E00-8443-8B4CFE919CD0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{37584391-6F42-4B91-8830-B209D97BD02A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{37651553-FE6F-4E2E-993B-DC2BDD858A7C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3784D521-D517-4F87-8CB1-E173A08EC5E9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{378EC7D1-5877-49F2-B5FA-BB4C03240D1B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{37BC03AD-E709-44B8-BFC8-47D218EFDAFA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{37E6599B-A4B7-4C62-B532-D41721BFBFFC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{388C8904-96B5-49EA-BE40-CF49B5103213} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{38A34611-FFDE-49E3-B257-CBD7F11F7FFC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3921D586-5292-4B40-8087-E934578A3548} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{392A2356-3731-4806-8708-AA6548377925} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3934BA35-DED9-4DE1-910D-16108D19A314} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{39F37754-5B7C-4F6F-9948-A633FC18FF15} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3AB28680-EAA3-4178-B817-D6A14F508FA7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3B3D0838-85D8-417B-AEF6-1635F2C16951} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3B908940-3FDC-4848-8A9E-33BDF075E3D8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3BC9AB64-B8AB-49AC-B38F-FB1FFDAFA0DE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3C60430F-DCB9-4A16-AF6E-F0B25B5DF6A3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3CD68A35-1C17-48EA-BB53-D842D1238976} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3CEE3CA6-7A97-4819-AAA6-59CE58D65BE4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3DB53889-4F91-43AC-BA3C-0045DEC0221B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3E140D86-EC0A-4D63-931B-313447021F4F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3E188DCA-8146-4042-BEAB-FFAB0B1D6563} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3E1EC007-9FF2-45C2-8BF1-80B25C7A4776} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3E2B2E17-5A4A-4D14-87B0-DD3BACF3D204} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3E65BB1C-6860-42C3-AAB7-AF56DAB73216} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3EC7E98A-73A0-4889-A2D4-3AFBA2680C98} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3EF267A3-6736-462E-BC7D-07C6323FD887} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3F07B6CA-854D-4AB6-A913-DE545CE4126C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3F12D454-8FF1-4D8A-9BC6-A69C44AFB434} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3F425BB9-EDB2-4C24-A91B-B01771049310} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3F6EDEC3-3F06-44E6-AB1C-F5DD63696D9B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3F83FA85-8F29-4911-AB2F-D80DDF63FFED} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3FC313C4-5DD6-48DC-BF9A-54DD8C9009B8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3FFB2A7F-601B-4B4D-90C1-27112E727E79} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4017C4C9-F0D6-48FD-8F0D-9D6CB38A0D68} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{40771451-1736-4554-8C69-1D1458DA1722} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{40B22F3F-6025-4181-8F61-403E085608C6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{40F81636-9765-413B-BD31-A13DBB2B217A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{411F3635-B4D1-42E0-BB2B-5E2D1B1C441B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{41F2AA9F-2873-44C0-8AB2-3078C398037A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{42CCDC2E-16D6-44F7-9F0C-857EF6952C77} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{432A619F-99DB-45B2-AE9A-7CAFB0543FA6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4397DBBA-74D3-4D91-9B37-A7B656FA6670} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{439F984D-72AA-446C-9795-04C4D58DCE65} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{43F9C8BF-1BA7-4C89-8174-F2D213655A7B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{44ED1E80-762E-4AE7-A648-B9C877043B77} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{450BEBE1-7B9A-4079-A4BF-15684A9851F9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4541D914-9DE1-4458-889A-DF4792981371} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{46051DCF-D495-45B6-B689-C548AE8162F2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4630CCCB-1D6E-445D-9D57-B6F3E1AC0ABA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4682210D-1A76-46C3-9D5F-455C4965224D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{46B8305B-8484-4429-99B4-30FFDA726409} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{46BC8414-EEE4-441C-8FBE-3D743976FC90} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{46C8151E-1B2C-40DD-852B-89FF6215976D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{46CB659A-2580-44EA-9D19-18C8E7175932} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{47273DE3-9C60-4DED-81CA-89660E40A746} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{478A52F6-9A39-42B8-BD7D-A545796614E0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{47D43BFD-772F-479F-8E6C-FBA4F3B690FF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{47DA6D4B-FED7-400B-9CF7-B1BE7F8DB574} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{482821ED-811E-4C8F-AC62-8CCA33BD926D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4844BB93-AE7A-4309-BF38-DC9D13B7700F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{485626AF-871C-44C2-AC60-ADFF37A4F685} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{48C1A004-62C6-4F53-B366-418090D4EAE0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{49B501E7-4CC2-4AB3-86C0-E672A0AAA2B8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{49FF7463-9E86-44A2-B99E-E5F6BB6707A3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4A7A6523-CD65-41D9-83EB-F276112FA0D9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4B4D6CC2-5B44-4BA0-8B17-E956C91D1B94} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4BCF0EB4-5AE9-4B35-B0F0-C95313950C07} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4BE1833C-9F23-4A7D-B87B-82AC75315A40} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4C48EE6C-EFA8-40CB-8968-30F78DEC7197} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4CBEBC36-525D-4A22-8053-986EC298F3D6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4D0C2A8B-F3A7-4D84-BF1D-DEE8AB7BA316} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4D4C01C9-758E-4287-BC78-525110F96E28} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4DAA2995-CD79-401E-B5DC-38EAF56B2978} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4E1BFD6D-741A-45D1-99D2-E280211B7843} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4E97F046-C2BC-46B8-8F08-13EB04A15E60} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4EB4B279-5AA2-436A-9BDE-3442EBF33815} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5047DE4D-99CE-4C2C-AA80-C9727D8B3CA7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{504D4EE7-000D-4893-A11A-CCB5F59F87BC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{50D01439-2F1F-4EE2-B361-04FE08A9466B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{50E7273D-74EB-4431-90D1-FE8EF2143918} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{523CB762-DF38-46B5-8104-76BFAE3AC2AE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{529BE0DE-CEB1-44B4-A4A9-6BA45DBB03F7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{531B5493-73B7-4207-BF50-C7C9117D74A1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{53628E22-2674-4770-8482-2D0F831F0EAD} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{53A6B4A3-4FE5-424F-989F-3E29508170C6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{53BF3441-A402-4FBB-8EA5-5E358851C2BF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{540CD9B4-0CE6-4BDC-8C8D-8C15BB1C23D2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5457A1E4-0A4B-4A00-A64E-4F699A8624BF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{54B1F954-34D5-439A-ACF2-2A1166C19FB4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5514A6D9-083F-4F0F-9EE3-465B50E065BF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5521CE12-0790-408A-B74A-890946F417BF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{55B2454C-7277-40CB-8FD4-64E24B8465A2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{55C71101-E2B4-4C59-B4E4-FFD09FC515E2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{56379DE9-17D3-4272-86F3-CA02494654BD} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{56383E70-2AFD-4A03-8999-120AE777AABA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{56464A89-8BFA-4D91-AA7D-89E4745AF7AB} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{565693BB-7A01-4302-97EF-4E2DDE2DF52A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5675DFDF-DD5D-48EA-BC60-ACCDE09778A1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{56959C9C-9AAA-4A2B-B874-CBF661EE094A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{56C02079-8BB5-4AC6-9124-2A262362C57F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{572275DF-B905-466B-9273-597BC6675731} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{57F6CB2D-9B34-4575-81AF-44F259BC1F51} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5806A739-207B-4397-8BAE-D501AD1E95D7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5817BA9C-1935-4CC8-ACE1-8FA585AEC617} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5879CEA7-96D5-4E80-BE41-21766C9890D0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{589E883D-69CD-4020-A63E-FB4F82FF3F1E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{58FF0AFA-4A65-4130-BCFE-7BB56E2E8627} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{59C4850C-82E0-4B69-9406-6A49ACDAB748} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5A76146F-5C26-41D2-9A55-657BAF48BB1C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5A8B11B6-7AD9-4259-BC60-E9991B4865C8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5ABD3D11-10F3-42E4-BCEF-639082D00C43} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5AD5A542-56FC-4F55-890C-E6B35A4BCF6F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5AE254C8-8265-4B4E-B8AD-FE318B0F9DD1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5B15C7D2-E283-490D-BE67-CE31CBF250D4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5B28CCDE-F224-4AFF-A8B0-939374783647} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5B54DF0D-45CA-4A9C-919F-0AEEAB714561} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5C124A42-C9DF-45C4-91CA-A412C3EEE3CA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5C788D39-954B-4D3C-AA09-F6ED24519952} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5C84A2FF-9372-40CF-9BB2-EA7ACBED2CA5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5D0BE715-BC9A-4569-8410-0AB43BE44589} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5D75B503-2DCC-49A4-8600-DCD1C6CFFFCF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5DBF72C3-B951-4514-BBE7-3FB91321A8AC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5DCECCC6-CD8B-40DB-83C4-A4095C21D2FE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5E2FDE59-EFEE-409A-9A95-BF7EDC298F7A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5E392663-7A81-413F-958B-91EC54C07A0C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5E3C4A04-FFE2-41DB-A4AA-ED88C0945339} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5E8BAA18-B059-4DFC-B145-9F953F9BA906} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5EBBEE0E-3717-4CF3-9EC3-9FCB5F89FF14} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5ED4E1D3-1B7A-4CAA-B7C3-9CA90A768E87} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5F0B87DB-FC8C-4143-9BC7-A73928BECCF2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5FA07E7F-9B1E-41D9-8FA2-796F4F2C4E5A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5FD00CE8-B0E7-4B33-B8B9-AA4D905E4A8B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6001A26F-6638-467F-BC46-58584F16FA9A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{601ADF64-9EBF-4A85-933F-FED71D723445} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{606174A5-3834-44C9-AF8E-16C4C7473AE9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6061C03F-32F6-4A0E-B81B-57F52C5F1ADC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{60A98AE7-64EF-4109-94BC-EA5FD61CA23F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{60EC0AD0-3624-46AA-BFD2-93B74D6D9F85} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{60F40DFB-6165-4056-AC3A-9A850DF0C175} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{61F6AE2B-629A-4661-BA78-678E5A451249} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{623815BF-E45D-458B-ACC1-D354B2D5AC47} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{627307BE-4B7E-4DCD-829D-6DAF0DB6C870} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6290A9EB-16F1-4BBC-A584-B8EBB8FF01DA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6371FBB2-3CFB-4981-ABB3-E47BB06A609A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{638993E7-A99E-48CF-9629-90947A2D9B52} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{641A0BCF-7F9E-47F7-AC03-A361FF3DD821} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6471F75C-F069-4E52-A3B8-D05314FBBFB9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{649ED86F-200D-4894-AFB4-54710B4B802A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{653EBBE6-6C59-458D-B875-81E289482DEB} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{654CC781-FA1C-422A-B0DB-449A0AB25B85} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{65739262-4CE4-4447-A931-6B5D826FEB5D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{65C31DF3-F126-4BA9-8826-9B061D91E141} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{666875E4-2FEB-4296-B744-932B520CA389} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6671CBFE-815B-4AFE-A371-76E3D7B01E08} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{66BD181E-76E9-4336-AEDB-30FE3D73CAB9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{66C4B250-30DA-44EC-BB07-8E390E6B3EA7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{66EABF2F-B4E6-426C-A567-02072C65999C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6747B6C2-5311-4C6F-BF81-9757A4F5222B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{676F3A67-F333-4EA5-8EC7-3105591709F4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{67B29F3C-EAE5-42AF-9B03-6818E60E518B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{67CA11D2-77A6-4933-B648-1BE3F0DE4CE2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{680A2FDF-5315-4BB6-B986-1FD9130C1F80} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6833D125-2D2D-4F5B-A950-00F79D0FD29E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6852244E-DFD0-4E7B-8109-393582AF3EFC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6A9E53A9-EB3A-4F33-8D00-0A095E75D1A3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6AA8BA07-F623-440F-AE1C-998DF414676C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6B32B2CD-FB2E-4799-8D00-686DBEC633D5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6B68FE6F-858D-498A-9D91-1B3F7D43E77D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6C333670-1735-43EE-AC17-BE4B30326A45} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6CF3CEC0-5DDD-403C-99D0-FAE2B9BCAAA1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6D0B60AB-8A94-4306-965A-3E29E6EBDE5D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6D6DB4BB-8955-495E-BABC-FDA8CA4C0EC2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6D91A79B-B324-4985-ADD6-81448E7669FE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6DCAF2CD-C5A2-4982-85F3-350EEA01A476} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6DDFD55D-5DCE-430C-AA4E-CB1855806065} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6E9E027D-B14B-451B-9EB8-3B67B416A9F6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6F20CE41-1942-475E-8EBE-8F649745C338} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{71134193-DFFF-4F6D-B8B8-42054B163A7A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{71294A3E-1CF6-44D5-BE29-1B5ECD340AA3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7154EA16-FDDD-4ACA-84CE-8A684D3C64C9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{71D908FA-D236-4808-9958-37DE6B335D3E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{722EB5EA-A35E-4BF3-8206-726C9D7E2435} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7240F561-1691-4275-AF04-2EC0D4048E53} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{728232BF-4B78-4BD5-81DE-113B96A2DEB6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{72896A9F-753D-41CF-8D47-73DC0D1F30EB} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7325E0FC-ED95-4782-B365-5185A41A5FA9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7355C33C-BA2C-4977-AAC7-604869542CA2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{73B8822E-50A7-41C2-A211-4592074DEA8F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{74137D7F-2FE8-45CF-86F7-6BE6F997E6A0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{743A058F-28BD-44D7-BFFD-C17A24F3A10E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{743E3361-C18A-4242-B074-FF989C78E9F4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{749167F9-D549-457F-AB90-A6DB9D429E21} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{74C350C6-7024-4A30-BC9E-EC4B9059C703} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{74CA5688-C18F-4E53-B329-926648ABE73E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{753B7665-8D42-4E7E-9AF3-5253BAFB1720} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{75F000AF-D1A8-4907-AD15-764459DE992B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{75F86B67-F0A0-44BA-8F4E-51FE01FBEA0D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7666580E-E820-42EA-AC4E-E939560BD28D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{76AA8DA7-A0CA-4B64-8161-5F70E9314C52} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7709A8FF-14C5-45F6-99B2-22D47BBABC69} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{772A6E3D-626B-4D02-8DC8-81C5BF6C32A1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{774AD82A-185B-484F-BA3D-0C753F77B555} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{781EAD49-2ADF-48B4-93A5-4CA8688B7956} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{78BB1165-3207-4855-B45D-0F5EAFF40CDA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{78CA24DE-32E5-4A18-8341-54FE07CEDB1E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{79189FB5-A515-47F9-A8EB-E55139275115} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7949A90F-761E-45E8-BEDA-F9AF5FA41350} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{795721A0-7DBC-41CB-86FA-1AB20349A331} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{797EF5D9-93A9-4484-96FF-186169A70FDE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{79FBE455-06B1-42BD-B344-A4C9EB9E55BC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7A2C0A16-B0D3-4714-AB2D-D43FA4978343} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7AF74266-10BE-4A68-90B0-E1C3926704EF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7AFC9E89-C63D-4DF5-BF4B-141A568B05A9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7B9D68D8-9C72-4EA2-B010-1A08E48AD4A4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7BCA2086-86CE-462C-A0CD-ECDC238DF18E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7C4A6984-1759-4022-AAAF-C19608FE6072} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7D9FDA55-4349-4CB0-8EAD-9316B53B7D0E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7DB0840C-CB49-4F75-92CE-173CDD48F007} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7E211013-8F1B-4D28-8BB0-4179B0F7C957} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7FF7EAF1-169E-4C5F-B74E-DA73E74F044A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7FF92877-A617-426D-997A-53C25E72E845} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{802E25D8-7B6C-40C9-AC82-B8FE1130AF61} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{80751CB4-B265-4CD5-9B73-699C490A9E43} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{80C53FFA-58ED-40FA-AA64-C836A2639BE4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{810AFE49-81AD-4D72-B76F-4320EDCF60CC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{810C23FA-30C7-4D21-A6BD-126E3AD330F3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{81464468-2C76-46FA-A4E6-E59C82490AA9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{814BB116-7D72-49A2-BD36-6B894CABA04B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{81C8D124-7DA9-43F3-B987-B2F03D66E4F8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{81E2504C-9EB9-4B0B-B47B-354D283BEDC2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{82015A16-4B20-48B6-B72C-7D862EAB8FB4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{828E9AF1-DF67-4FB8-9229-4D4CFD52678B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{84251D19-A6B1-408D-A0E1-AA3FAF19C61B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{84347C9E-0EDB-4F60-A2D8-4475035CAF89} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8482F556-00F6-480B-8297-274C3203DE36} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8498FF69-C51A-4038-BFD1-64C5663CEBF0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{84A1242B-B00D-452A-9E4A-FF00D367D3F6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{856C8A85-9216-431F-91AE-6079EC6250FB} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{85DD36BC-F2BC-4CD8-A201-1EBCC4FF3FBB} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8610175F-7600-47A5-BC28-5703449533B2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{862BE2B4-751F-46DA-BF52-41F60E429BFD} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{866CA3AB-2C2F-49F5-ACA0-AEA05058C60C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8671776F-C890-47FF-B93B-6ED6591A1DA4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{86BEBA58-471F-4713-9D46-A86B65F08F1B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{87CBBFCB-9789-4E01-A30C-933CB987EE49} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{88210373-B98B-4E9A-A1C6-A856E849BD4F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{88738A60-C418-4B54-B9F8-CA72904ADF1D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{888F9269-E8C3-449C-8763-B8330CEC9C53} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{88E69C75-7F3D-4CAE-AEB9-3A7FF7EF78A5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{88E980B2-E0DA-45A0-BD58-480B34311682} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8946B5E2-1773-4470-8731-5484200D4122} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{894C9D70-7235-4344-87D7-6EADB40477DF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8954FDFC-CAC3-4C8A-97FC-9573447E89FE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{896141DB-0E61-49C4-A74F-E6F9A476EF18} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{89D13794-41D0-4119-BCBB-CD6668C1694A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8A075FD5-D403-42C2-8D0B-4A5612AFEA4C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8BB97A91-4A05-4A89-91AD-7C38EE0BC4D8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8C696454-76C7-4169-B162-C95B0C862E67} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8C91DCB2-B483-4367-8063-138A63FC4948} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8CD278C5-D968-4A56-88DF-991E2FE09371} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8D72C27F-B49F-489F-B382-F53ED120AEBA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8DB8728D-E8E8-42D7-8D02-D3B270050240} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8E0E3999-5E22-4B59-814A-4CA6255EB193} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8E5A70BF-B94C-4EE7-BD59-2208A0BBFEA6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8EAD2FE3-E038-4D5C-A5C8-DCB0F00926B1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8EB35F07-C74E-4E01-9F78-1530E151CA07} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{909E8661-CC35-4DA3-89BE-DD129DF598DE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{91498F6B-DA74-4268-A1B8-DE44AACDF635} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{917E6951-18D0-43AD-8759-1D5531BB4923} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{91FA0EFE-4F6E-4858-A5A6-1677323C36AD} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{92FB4D9D-1960-4E96-9928-41972ECFC2D5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{930199B5-57F6-4368-AEF2-ABD6CBE5AC28} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9309CCC7-9461-40B0-8CC9-26C7264EA563} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9326CE79-B8D9-46CC-A3EB-4A29C6C28DC0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{932C53AA-B68B-40EA-BF6F-6A0A03282EE5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{934C2439-2A10-4025-AD64-7DA8518929A7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9386EFA3-CAD3-42C9-BF3A-A58CE48B582A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9395D076-FAAA-4557-AEF4-6D7E93FD758E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{93C22340-AD4F-4451-9049-FA7311BF5105} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{943AA535-94AC-4043-9FE8-EFFAD4CE3E3C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{94459298-D5D8-4F65-81E4-0E6989F2F833} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{94572CBA-426D-4418-B89C-5FAAE460EBCF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{94803069-A61C-4002-8D2B-3315993A5C43} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9484DF85-4795-45EC-8A03-93B13887BB15} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{95DFC3B0-B49F-48D5-A0E9-7EE22D7D3A80} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{95FC53B1-EB01-4D33-A892-9AB52B9B4AFA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{962249A4-92E4-4F63-890B-BCBB0D1EC507} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{964276B0-9676-4441-AD20-70E1DB58C736} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{964BF20A-FE15-47D5-A148-EEFF799F0242} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{966EF0DD-2990-4CF1-8F22-EF981706E941} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{96C55633-6038-4316-9726-BAAC61C0BD6A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{972D5C66-ABBE-4299-BEC2-0AB1697EDFCA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{976C532D-98A2-494A-9F94-67F87CB72BA1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{978ECD92-6358-48F3-AB8A-C2D4D6F55E62} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{979947D3-AB6D-442D-8283-FCE7D9B80E11} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{97AC9CB3-9A56-4252-88B3-7800BE8CCF89} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9809E839-DD72-4C32-94A6-3089063D7F84} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{984EB2D6-63E4-4BBA-B105-39C9180A8AF4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{98F636D7-8B11-42BB-A5E2-546AD1D7E663} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{99334836-097C-4B4B-8AA1-2D7AD5F51529} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{99FC7BA7-92C5-4FBA-ACD5-EC5FF730771D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9A0CCCF4-1692-4764-9E09-664232EC351B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9A58A382-2510-42BC-9711-95E0A9C226C2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9A608FD3-19DC-4EFF-9344-59F872673D91} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9AF3EBA1-38D6-4694-8A8D-A42FED26DB90} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9B59E7CB-0C32-48B5-91FB-DEAE2880D438} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9C16BCDD-BB00-4D1C-9742-5E5AC12574C6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9C4D7380-2B85-4D30-9ADD-D120C66CB72A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9C621700-7255-403D-8976-C916E983A24F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9CCF6878-E85C-4856-90D5-26A988EF587E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9CE790DF-347F-4305-99EA-60B3299401D4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9D1A23A2-5246-4FAE-B360-DA9B573E3F97} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9D268B41-8D32-4E47-B12D-8E27850FBF4D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9E07B48F-B698-42AC-8E46-29CCD7DBA172} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9E1DFDAC-7CE7-45A9-947F-4EA6F1C2B7FC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9E7E6922-CD5E-4DF0-99CF-B1577E87F527} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9E966F8E-D0FC-49AC-B0B0-526D2D87709A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9EC898DB-A2CE-4225-ADFD-38EDF61DB5D1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9ED5CDC3-2172-4AE9-926A-507F0D9A71B3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9EF88C07-A370-4EBA-BC14-31AD0112AB0A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9F5B9D1B-6E47-43F4-B123-74CFFA716BED} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9FB6E802-C0B9-4CC0-A303-0E7DFEC18093} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A08BEC55-CEF1-4AC0-B3C7-ADD65E0FF4B8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A0BC4EBA-47C5-4F4D-8F03-B568B9F389DC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A0CBA31D-618D-4E3A-8257-BB4DC474DC8B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A0D55AEC-9D5B-40BD-BB15-39D19E3CD6FC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A1223A83-5338-4618-AFF4-0A5CBE38998B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A1302A08-19AF-42A3-86E5-CA7DBC639888} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A1A49A1A-D925-4F2E-967D-45633CD11327} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A1E811B7-0C91-499B-9A1C-ACF62215BA70} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A24BB3F9-174C-4C0E-94B5-654CB172B2BC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A2C272B1-7BCC-4BE6-99C2-C27828264AA7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A330132E-B299-438C-A1C7-4B5DA0BC7AD8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A346B967-2EB2-4AF6-B999-25123EFB70F0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A366FE5B-7895-4B7B-98F9-F6D95FCECAB4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A398F6D5-D5A2-4A1A-AC33-0851C7BD4668} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A48D8BB3-C834-489D-A25D-5774631BB729} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A500DEF3-B846-4024-AB6B-67548FF7D9F4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A558F8D7-D454-4B9E-BB53-30E6C1326DD5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A5AB5DC5-E176-421D-9C52-D8D4F657FCD1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A5E1F38B-1828-4923-BE77-F395DEF65D6C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A66914F5-54C8-45C6-BF28-B70DD512A02B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A690C760-B452-4606-9D3B-1CF07405E3B3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A6EC4244-5CD0-418A-B837-C106236F640D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A70A22D4-C9D1-46BF-9D95-8B048D3FF3A3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A7302D83-A2C7-45FE-A649-CEB5C611070A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A74BE44A-A6F3-4B0F-A876-AF97686B5E13} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A8E1CB16-54BA-4EEA-A2BC-D45322173FA3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A9B8B4E2-31DE-4E43-BAA7-56C62EA482D8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AA9D3A48-EB56-4791-A33C-4C7EA1B837E5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AAA5E43C-CF79-47D5-BF3B-E92FD4F7590F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AB1D9A1B-D5B5-4F0E-90ED-27632ABE7904} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AB244A08-9710-426D-99EA-2D4E5C9DB22F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AB32D8B3-D5F3-4F9E-91EE-A25522F96A46} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AB9E6EB0-558D-4128-B545-8D0D4E716D8E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AC833ADE-7C14-4770-ABB0-BA28CB0408C3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{ACCE3DFC-7D00-4DE4-81F4-237003AE9C41} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AD0BEC59-95A2-40A1-BDDB-01636FBA572E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AD3C5D6A-E07E-4D7D-89B4-CF6F55BC07A2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AD8ED272-94C8-4B5E-8231-FBE650DFB0C1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{ADA50D01-0519-46AD-A745-195C4654C21C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AE02FF2D-A592-47A6-9817-DD775CD46526} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AE4A5C32-30EB-402C-A919-92D7422D46D3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AE91C372-A4D4-4FBF-90E6-26971846C0D5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AE9C8951-4E90-4C9B-8710-FC681DB42ED2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AED0FAC4-F3A1-4777-A172-FF732F8F262B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AEEEEBEC-FB97-461F-AF6B-35FD2ACCFD08} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AEF670B4-7F6F-4889-9EE7-8D406277FDA6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AFCB4DF1-88E5-4227-9E2C-A110FB6F4F17} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B05608CA-F9A6-47BE-B6FA-E80BD6026B6D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B082B4B9-0852-4BAE-9922-ECFF38558CF8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B137CD5B-CC09-4D28-98F5-731FE4ACADD3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B1A7911E-7EA4-4B66-A9F8-EA443BF56848} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B1BAB68A-F054-4390-BDF9-92E8A25769F9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B2233AD3-E781-40D9-86CA-88CB4207B28D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B29F2786-6321-4A99-83E8-22CCBC744494} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B2F685AC-1AB9-4DE4-AB1A-2A8D155B863B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B34E1779-3965-40BE-8C82-7C8A577DDD2C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B3E429D7-40F1-4759-8BD4-A91F43904D36} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B3E6982E-FDF8-4B48-91BF-80E8DEA32364} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B4DD9394-2185-4F1C-9831-7AE69A3BABF4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B5363323-D0F1-4C65-94BD-D8C5BB423E56} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B55F0F01-58D8-4CD4-AE08-41427C24B76F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B6C8369E-9531-428D-AB7E-DE031D3E76A6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B71B14D9-7F2E-4E99-8601-C8FF953C4826} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B78F4244-7E2A-46F0-B66B-EAF352ECFD84} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B7D3A128-1F61-4607-B005-43AC9916F248} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B86AF4FA-3427-4CD9-B4EB-88AA0AEBCB31} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B8973B77-37FE-4618-980D-51C38F095E8B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B8BD2446-675A-476A-B9DE-2D32D49D3070} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B952C230-990C-42FD-BC6D-D71C2BEF6B85} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B997B5ED-2D70-4A43-A4AD-201366BE159E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BA024075-5DF8-4DA8-AFEE-D509B32FCBBB} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BA149856-68FA-404B-97D7-D8384702CB98} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BA54E7D1-DA07-464F-A1B6-A23975ECAA24} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BA5ECC49-06C2-46D2-92DD-DCBDAEDF7DD9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BA665DF4-5C4A-4881-8EB3-D35E3AD6EB3D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BA7CF77D-FD38-4FCA-BB67-F282F2BD1021} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BB8DDA8E-C926-49F1-B8DD-79F7A78730A5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BB9CBDC9-B9D4-4990-BAD7-9F184754D195} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BBB64A4F-3053-4043-BC2B-6A35122C397C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BC0D44C8-7F1F-49F5-A91A-7F78205B6B45} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BCD00BB5-2BF6-4F59-BD08-8FEC8D9E48D5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BD0D5E51-137E-453E-9DB9-B28EE370CB63} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BD18543C-97EF-4C50-AE5D-7E86DDAF2A50} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BD396F4E-7801-466B-A27F-A4BD3E1290C1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BDD1DBDB-8E35-4B1A-BC72-CDC3B9C000DC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BE6ED310-2C93-452A-912A-8D4CE16C34FD} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BECD1AA6-80D8-4772-9C05-D4A20B748A62} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BED86724-806D-4F45-BBCC-93692AF7776C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BEDC2950-102D-4E94-B79A-89A694F779B3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BF49D838-DC03-4257-8AEA-3EC46DAD6A7A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BF76C3AD-E150-4A19-8825-14630AA13DBE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C0BC6B7B-6EFD-40F4-B310-3D9A89FCCF23} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C0F393C7-4EEC-44C2-BD2C-68DC39A6BAD3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C0F4C71C-74B2-430E-BEDF-C9877545A609} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C14808C4-79EE-4F86-BA07-EE9EF8A283F4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C17A947E-F530-4A52-B37F-B629EAA90D68} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C24218AC-0A46-4BAF-AB88-DF5F8D2A6904} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C2A33372-80B4-4DE0-9AB9-2DECA7C55925} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C2D0F70E-D811-42DA-85E4-7AD9F1BEFA78} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C407F716-4B90-4563-8EC8-3B9962FCBE94} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C415395B-52F3-4716-A9ED-844414235408} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C45E32D9-ECB6-4016-9D1E-CDB216B9A936} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C4602D3E-EA18-4F6F-A848-DF1F7425FD84} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C4BD1CA2-FAEF-42A2-8D3A-CDF0C5E0AFC6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C4DE3F98-8A78-4B03-8572-E7184734AC5D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C50E8972-0969-443D-9617-574BB869F1E5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C518D511-27D6-4E07-82C9-9DB84E13795F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C55A020B-5CA5-4120-870D-DF6837565AAA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C6596A7A-8254-4C18-94AD-ABEAEB44E692} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C68130BE-D410-4E6A-89CD-04E92BDB6AD3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C6BA1F27-67FC-4788-BCB7-A35BBC4D38B1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C6E5FEFE-9302-4427-B65A-6C7075F7F833} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C6FC0909-368E-4D32-B3C4-9E5CE3DCCF16} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C7ADB0BF-B1A1-4C75-8B88-905E460935C3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C7F84AE5-BB74-4BB2-AF86-74FBF2F0D295} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C8301A1B-BC9D-4705-BF65-F2E78D2FC66F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C83CE103-9D36-4A8B-A191-5344F41D0A84} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C883ACCD-818C-4422-A871-61EB7C59EF28} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CA30DDE1-6B98-4564-9A6A-600365861946} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CAAEA92D-1360-4A2E-ACA1-F9CECD4AE867} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CB323C71-DF23-4CD9-9148-9CDF248866C0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CB5FC314-649D-4C76-A715-23757D8FF950} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CB69E4D3-C9A5-41BB-A0C2-C23FD3341C90} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CBA9BF81-5D89-467B-875D-23CC64F41205} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CC2A3BD2-C557-47F5-BCB6-16A878597951} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CC3F1B61-8349-4B3F-9DE1-2691412EF43C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CCE2FE15-730D-4146-9D75-362B7AEE2284} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CCF7AB03-ECA9-4A27-93C7-AD60A560FE7B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CD4B49EF-A3FD-4E91-AFE9-7BAF629CFDA7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CDAB6C39-9CF6-4FD0-928E-CCF5BD1A74D3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CEF0D87B-0630-47BA-98E7-AE7EE9B45C6D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CF2B2061-7B37-4F7C-95AC-BA86F3AA6B3F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CFA64292-BB08-47EE-92A1-083E3CD7DE88} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CFBBE53C-4EFF-4C03-B7F2-125B35F5F984} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D00625F7-103F-4AEE-853D-76E0A20F401B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D122ACA2-0C67-4BD2-A999-93A9ACBF8210} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D1432F88-D805-4FFA-A666-2F4B35F2CB79} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D19A61E7-970F-4B47-9A45-796B15B1C16B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D1B0C127-6662-4D9E-9BDD-E0F540DC34D8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D23393FF-DC53-4DB4-BBE8-FB031F3D5D73} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D2B9E054-5909-4D60-83C8-86CDA6E4499A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D373DAED-EC18-441C-B7D1-83D0473B3D8C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D3CE3CE5-1491-4638-BCFD-8D0BC660FA95} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D3D41948-21E7-4771-B260-23E7CCF04C90} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D3EB507A-600E-4DDE-AB39-F0D3FB45D1D7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D424C3F1-EBFB-4106-BEFC-DF54D91231AF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D42DBC63-E2FF-41D1-804E-8957E7780A80} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D432A750-3703-4538-8295-ADC19548CB6E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D4683CAA-C5B5-4822-B04F-8F51BDDDE5A2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D46B1CB1-3096-4409-A00D-8DE51B4E8CA1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D4C21EEA-29F7-4001-9EC6-B6E997213CF8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D4DD2B72-78A6-4BC5-9D80-B91169CC1B50} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D599D05B-351B-4BF4-9B7F-EC256493086C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D659AADD-991F-4534-B917-EFA628189F0C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D67AD5DA-B187-4381-9111-9143FFC84CF2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D68C1E1D-6412-4F1F-9C12-87D0D6FE53CF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D6909C70-8889-4071-9A82-1635D51368D4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D6F86165-A18C-45FC-8862-12567A38753A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D77A592D-E085-48B4-BB40-AF434427E8D0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D79B7DCC-2A4B-4FAA-8F7B-062459F81540} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D7D4DB14-55BC-4BD6-9D91-8A2767CDD872} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D83B3349-9E76-454A-B2D3-FFC496A8D99B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D83B8411-DE44-4BA6-9CD7-A7046C9D567E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D86D7EE7-BC55-4E58-B21B-255364FA79B5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D8C10452-165A-4079-9BF0-B2AE4C53B7FD} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D8E609E0-1373-447E-B533-CF64E6D5E6F1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D91FD460-47F5-495A-BA6F-333019A725A4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D9824283-A9A7-4AF7-9976-5B7C875DD71F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DA632630-A71A-4F37-8E14-52B3144C9298} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DA9E8404-43D2-4710-A28D-BED13220EAD8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DB55AA5A-C03B-4668-87D3-2D2DC6B4E016} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DB8C09A3-FA9F-49B8-857E-AC2046D9CB4E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DBD33A89-4076-459C-A9DD-247FEC86410A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DC18A2F6-FF65-41A8-BF5B-B8D39F4615AE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DD850EAA-7841-478A-A3CC-D7638AC526FA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DDA59068-1BEB-41E9-8AC9-5AD11A3796C9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DDCB0A75-9B6D-4E07-A15C-7CDED07AD172} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DE6BB4E4-8C95-4054-A15E-605FD78D7AC7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DEAF6BBB-59F3-4431-A0F6-1880117C850B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DEC947FC-AE37-4909-9D6D-9FD36987A06B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DFDCC631-2358-4CB6-8652-7DE16BF3A5D0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E0B6B397-7077-4DDE-82CD-A312E477517E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E1066EC2-87D8-4053-A793-0E6D6DCEA723} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E131328D-7A2B-4D66-B20B-F2E3BA2B5A41} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E1506737-8169-424A-8C8E-DDD864306CBA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E17C377E-CF89-49FF-B3B9-E7E0DB3416CB} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E1C86835-FEBC-45CB-8290-19EEB5A2D457} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E213E4F5-3BEF-414F-BF46-E3B8D4727519} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E23299F9-15B6-4D88-9FE8-6C03BDA94086} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E268D889-CF90-472B-B198-57DF0F3F03DA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E271D989-5CA9-4AFD-AC93-6F6DCCE6F557} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E2A7E98B-B26D-458A-89EE-60FD2429586A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E2AFDAF4-6639-4457-99F0-8ADC50D1DE95} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E2E7826C-1E1E-40F1-BDE2-88E5CA4E289A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E4294902-4A19-4F7F-9A3A-D3DEEBBDF35B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E44CF572-9A58-4984-93DC-3A358E014FB6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E44D88BB-E50F-4DB3-9623-5B46A203C22D} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E5C9D661-5288-43E6-840B-EA72BF51BBD9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E63FA1D1-6A37-4FC0-9E6C-49E8AFC1BF84} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E64171B7-C6FD-4A91-B72C-A52AFA837599} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E6E81FF1-1ED3-459E-AA9F-5248F59B67C7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E6EBC335-8E47-46D9-9705-C66080F97446} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E73F02C7-7BEC-4A4D-A88D-E2B472AA1423} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E79BF772-EB03-4032-A27D-790460E0DBF8} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E7AD35AB-8733-4996-81B8-DEBD9B1AC588} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E8284F2C-CE54-4FCB-855F-0877C2E85912} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E8474648-8FDB-437B-9413-84168F20E0CD} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E86862B8-96EB-4491-9ED0-A5ADDAF52303} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E8934F1F-1EDA-4A85-B33B-B84052208CC6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E8BF25C6-9B50-4ADA-BEB3-08B8E836C0A1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E8C18897-F213-4C9B-B067-C2011F921289} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E939FE64-229D-4D69-8AB3-FA7C48F2554E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E968C2AC-FFD6-4BAF-ACE4-EC136FB67D41} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E99D4311-99A0-4DA7-AD2D-62EB8C9C5C37} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E9ECE04C-79DA-4592-8752-95816FE64308} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EA45BC70-D880-4E89-A32E-F15B36B3F408} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EA60E73D-C3BF-4404-9E0E-DDF36F26D819} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EA6AB6EF-0CF9-4180-9B9E-8835D2747BDE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EA9578FD-DBA2-425A-8002-2019D97486E0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EAA93276-094A-4C93-8562-0498BE234505} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EC259DE4-3059-47BC-94D2-05EFA588557E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EC5D4F37-DEAC-4319-BF43-43EFB0833569} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{ED0A41DA-A112-48FE-BF8B-F12A9173AAB9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{ED2122CB-321D-4C4B-9FE6-06262B82C57A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{ED3340C2-C7E4-4708-A1C1-AA1EB54EEF68} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{ED94D2BB-6C90-4847-B8D8-5AAD2DE33D7F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EDA48AC6-D2E3-4C11-A538-BD84EEEAE85A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EDE3F7B6-4C78-4326-BBF2-BF2A6810B1E2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EDEEFD5A-CFD0-4B87-99A9-20C7D9DCD4E3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EE00464F-FE4D-493A-9A88-680D05CBFCE9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EE5ABA8D-680F-4081-860F-26949BACBDB9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EE6ACCC4-6BE9-418C-82B7-5E6992F16C4C} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EE760B9B-BBD8-4C27-B491-F255D7D89094} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EE8E414E-92E6-4271-93D6-68E5C82863AA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EEE02649-6F6B-4E46-8FB3-C68D06EA5C73} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EF431286-8F72-4F0A-925D-2BD193020CD9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EF6C6A17-0823-4BBD-A17E-461106318E3B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EF6CF904-556E-4072-BC87-2C3B75CAF5C3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EF73BE3F-9BA4-45C6-9017-593590C14EE7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EF781525-7B19-42B8-8405-C08F1B64D089} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EFAE451A-C4A6-4E36-B775-A45038407893} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EFEE256B-EFE5-45E6-AADC-B556D027DC7E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F0110CD1-1F6A-4F02-97FC-08B2EE31D333} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F0534589-13D2-418B-912C-10428A96D176} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F0704BDD-E7AB-49FB-994C-92B0FBA96680} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F0FA8CDC-4BCC-4032-8CD8-5BE21D11A328} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F1070566-4E99-4214-B700-3DA778F4AF8A} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F1646478-E63C-4F1B-B07A-CBACEBA5527F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F188A8E9-F425-46DD-8299-B2C93435C05E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F222B573-D089-4130-B3DA-03DE39B778D7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F24B7523-AA0D-4154-AFEE-639FBE40A6B2} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F2A14F01-19E8-4A57-843F-C4E85A8A72F9} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F2BF5006-E090-4813-9D41-F0ADEA39AA6E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F323E877-3543-4065-8ADE-743B30C2E7C6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F38BA397-6919-45F1-AF5A-426476E7F494} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F39BBF4E-D8E2-4B30-A508-243953E872EF} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F3EACBF6-1385-4C9D-9AC0-3B707288B52B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F47C0FE0-5BB0-4BF4-8076-0F4AE949B4E7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F48BB268-D4EF-4863-A4E2-C29FFDBF37DD} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F5A1B0E2-E506-4A15-AA3C-F93E22A1E619} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F5FD6A22-D997-4A6F-A904-2BEFCB89E095} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F618371E-584F-4BF4-B631-0EFEAC8D84F0} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F672E524-6519-46BC-A335-B9F13DE38A9F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F6C08C8B-42B3-40D9-89E0-435089E6F107} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F6ECECEF-C5D6-4A3C-8E0D-C301BADC5A8F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F6F303FC-667D-4C43-B962-332E5E6ED59E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F8837D76-8155-4D2E-B20B-FBAC29F41EE3} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F93A02D9-C57A-4E41-97A3-5D01E4679A8E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F96B8552-0C83-4BAA-8BB8-013CDA9175D7} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F9887C86-0F13-42CE-8AB0-A0A2A25A5307} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F9A0CDD0-ECE0-4395-A32F-B0CA6BD0C346} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FA254160-64C1-43E7-B845-222BA1A290E6} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FA46DA75-CD4E-4BDF-BA8B-6B8ACE0B9A1B} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FAF085D6-A52A-4CCA-966D-75FDB46094FA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FB39546E-B731-4FDB-A9C9-B083C92214ED} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FB4FBAF3-0E07-4C00-B6AE-CFC5E8F558D5} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FB8689FA-D739-4984-8EA3-C936BA09FFDA} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FBD516B4-99B4-4B24-A961-1EC512CB5567} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FC0BC07D-E450-46EB-85D6-7E7300233FBE} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FD418B75-2C5C-4BEB-88F0-27A3E663BC5E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FDA47721-3392-4145-9A03-FD31AA499086} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FDD69365-E95A-4185-A283-F52DB1FA34AC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FDEC2FC6-7AEB-4D77-AAB6-B7F92FAF0558} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FE12DCC6-A194-4005-996B-38CF52DB24FB} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FE382E6C-C66B-46C9-9D29-410C8438ABD4} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FE516C4C-9C7E-476E-B115-0996CBB88438} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FE92532B-7478-46C7-89A4-CB30C442B1A1} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FE941F2D-3029-4585-AC9D-48275C16D337} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FEAFA95F-CC8B-46CB-A5A4-E012B8514DEC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FECAED10-C977-4A94-9983-83D00D02E423} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FEEEE2D8-2E55-472A-AC64-2AA75F69A2BC} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FF39F159-1C59-481E-80E6-A6175BDAF43F} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FF3F4C33-36F7-492B-AD5F-87A2B60E0671} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FF48F502-7B46-4A55-8289-D281C7F2E732} ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 12.07.2013 at 13:28:50,05 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-07-2013 01 Ran by Anna (administrator) on 12-07-2013 13:31:24 Running from C:\Users\Anna\Desktop Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Microsoft Corporation) C:\Windows\system32\SLsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe () C:\Program Files\Launch Manager\OSDCtrl.exe (CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE (Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEUPDT.EXE (Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_287_ActiveX.exe (Microsoft Corporation) C:\Windows\system32\conime.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] - %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [LMgrOSD] - "C:\Program Files\Launch Manager\OSDCtrl.exe" [241664 2006-08-29] () HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon [1637496 2011-08-04] (CANON INC.) HKLM\...\Run: [avgnt] - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-07-01] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s [11672208 2012-08-31] (Realtek Semiconductor) HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [141848 2009-09-23] (Intel Corporation) HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [173592 2009-09-23] (Intel Corporation) HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [150552 2009-09-23] (Intel Corporation) HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1233920 2009-04-10] (Microsoft Corporation) HKCU\...\Policies\system: [DisableRegistryTools] 0 HKCU\...\Policies\system: [DisableTaskMgr] 0 MountPoints2: {08176035-94eb-11e1-b4fe-001f162248de} - F:\KODAK_Software_Downloader.exe MountPoints2: {37d6588f-130e-11e2-bdb7-001f162248de} - F:\KODAK_Software_Downloader.exe HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation) HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation) Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.) Startup: C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" No File BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" No File Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 ========================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG) R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [140456 2011-09-06] () S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.) S3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [113152 2009-03-04] (Wistron Corp.) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-03-27] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-03-27] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-27] (Avira Operations GmbH & Co. KG) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH) S1 HWiNFO32; \??\F:\DIAG\HWINFO32\HWiNFO32.SYS [x] S3 IpInIp; system32\DRIVERS\ipinip.sys [x] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x] S3 USBAAPL; System32\Drivers\usbaapl.sys [x] S3 uxddrv; \??\F:\uxddrv86.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-12 13:30 - 2013-07-12 13:30 - 01218598 _____ (Farbar) C:\Users\Anna\Desktop\FRST.exe 2013-07-12 13:28 - 2013-07-12 13:28 - 00082262 _____ C:\Users\Anna\Desktop\JRT.txt 2013-07-12 13:26 - 2013-07-12 13:26 - 00000000 ____D C:\Windows\ERUNT 2013-07-12 13:24 - 2013-07-12 13:25 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Anna\Desktop\JRT.exe 2013-07-12 13:21 - 2013-07-12 13:21 - 00001082 _____ C:\AdwCleaner[S1].txt 2013-07-12 13:20 - 2013-07-12 13:20 - 00662345 _____ C:\Users\Anna\Desktop\adwcleaner.exe 2013-07-12 09:41 - 2013-07-12 09:41 - 00000000 ____D C:\FRST 2013-07-11 20:27 - 2013-07-11 20:28 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp 2013-07-11 20:22 - 2013-07-11 20:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp 2013-07-11 19:29 - 2013-07-11 20:27 - 193362412 _____ C:\Windows\MEMORY.DMP 2013-07-11 19:29 - 2013-07-11 20:27 - 00000000 ____D C:\Windows\Minidump 2013-07-11 19:29 - 2013-07-11 19:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp 2013-07-11 19:22 - 2013-07-11 19:22 - 00000000 ____D C:\ProgramData\HitmanPro 2013-07-11 06:22 - 2013-05-29 03:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-11 06:22 - 2013-05-29 03:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-11 06:22 - 2013-05-29 03:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-11 06:22 - 2013-05-29 03:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-07-11 06:22 - 2013-05-29 03:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-11 06:22 - 2013-05-29 03:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-11 06:22 - 2013-05-29 03:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-07-11 06:22 - 2013-05-29 03:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-11 06:22 - 2013-05-29 03:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-07-11 06:22 - 2013-05-29 03:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-07-11 06:22 - 2013-05-29 03:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-11 06:22 - 2013-05-29 03:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-11 06:22 - 2013-05-29 03:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-11 06:22 - 2013-05-29 03:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-11 06:22 - 2013-05-29 03:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-07-11 06:22 - 2013-05-29 03:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-10 11:17 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-07-10 11:17 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-07-10 11:17 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-10 11:17 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2013-07-10 11:17 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2013-07-10 11:17 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2013-07-10 11:17 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2013-07-10 11:17 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2013-07-10 11:17 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2013-07-10 11:17 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2013-07-10 11:17 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-07-10 11:17 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2013-06-21 21:56 - 2013-06-21 21:56 - 00000000 ____D C:\ProgramData\WindowsSearch 2013-06-17 12:36 - 2013-05-08 06:37 - 00905576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-06-17 12:36 - 2013-05-02 06:04 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2013-06-17 12:36 - 2013-05-02 06:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\printcom.dll 2013-06-13 05:54 - 2013-06-13 05:54 - 00000000 ____D C:\30269cb3e1045cd9ca 2013-06-12 09:38 - 2013-05-03 00:03 - 03603832 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-06-12 09:38 - 2013-05-03 00:03 - 03551096 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-06-12 09:38 - 2013-04-24 06:00 - 00985600 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-06-12 09:38 - 2013-04-24 06:00 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-06-12 09:38 - 2013-04-24 06:00 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-06-12 09:38 - 2013-04-24 06:00 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2013-06-12 09:38 - 2013-04-24 03:46 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2013-06-12 09:38 - 2013-04-17 14:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll ==================== One Month Modified Files and Folders ======= 2013-07-12 13:30 - 2013-07-12 13:30 - 01218598 _____ (Farbar) C:\Users\Anna\Desktop\FRST.exe 2013-07-12 13:29 - 2006-11-02 14:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-12 13:29 - 2006-11-02 14:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-12 13:28 - 2013-07-12 13:28 - 00082262 _____ C:\Users\Anna\Desktop\JRT.txt 2013-07-12 13:26 - 2013-07-12 13:26 - 00000000 ____D C:\Windows\ERUNT 2013-07-12 13:25 - 2013-07-12 13:24 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Anna\Desktop\JRT.exe 2013-07-12 13:22 - 2013-05-01 21:31 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-07-12 13:22 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-07-12 13:21 - 2013-07-12 13:21 - 00001082 _____ C:\AdwCleaner[S1].txt 2013-07-12 13:21 - 2008-01-21 03:35 - 01705375 _____ C:\Windows\WindowsUpdate.log 2013-07-12 13:21 - 2006-11-02 15:01 - 00032534 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-07-12 13:20 - 2013-07-12 13:20 - 00662345 _____ C:\Users\Anna\Desktop\adwcleaner.exe 2013-07-12 13:01 - 2013-05-01 21:31 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-07-12 09:41 - 2013-07-12 09:41 - 00000000 ____D C:\FRST 2013-07-12 08:26 - 2008-01-21 09:16 - 01445546 _____ C:\Windows\system32\PerfStringBackup.INI 2013-07-11 23:54 - 2012-12-03 23:10 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-07-11 23:44 - 2011-07-30 19:53 - 00000000 ____D C:\Users\Anna 2013-07-11 22:22 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET 2013-07-11 21:32 - 2006-11-02 12:22 - 19398656 _____ C:\Windows\system32\config\SYSTEM.BAK 2013-07-11 20:28 - 2013-07-11 20:27 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp 2013-07-11 20:27 - 2013-07-11 19:29 - 193362412 _____ C:\Windows\MEMORY.DMP 2013-07-11 20:27 - 2013-07-11 19:29 - 00000000 ____D C:\Windows\Minidump 2013-07-11 20:22 - 2013-07-11 20:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp 2013-07-11 19:29 - 2013-07-11 19:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp 2013-07-11 19:22 - 2013-07-11 19:22 - 00000000 ____D C:\ProgramData\HitmanPro 2013-07-11 06:35 - 2006-11-02 14:47 - 00372168 _____ C:\Windows\system32\FNTCACHE.DAT 2013-07-11 06:33 - 2011-08-25 18:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-07-11 06:32 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer 2013-07-11 06:24 - 2006-11-02 12:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2013-07-11 06:13 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal 2013-07-01 13:09 - 2012-08-30 12:03 - 00000000 ____D C:\ProgramData\CanonIJPLM 2013-06-26 16:18 - 2012-09-20 15:33 - 00000000 ____D C:\Users\Anna\Desktop\Noah 2013-06-22 11:09 - 2013-05-29 13:43 - 00000000 ____D C:\Users\Anna\Desktop\Dzemo in Ostfriesland 2013-06-21 21:56 - 2013-06-21 21:56 - 00000000 ____D C:\ProgramData\WindowsSearch 2013-06-18 21:16 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache 2013-06-17 12:22 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\Msdtc 2013-06-17 12:05 - 2006-11-02 12:22 - 41418752 _____ C:\Windows\system32\config\software_previous 2013-06-17 12:05 - 2006-11-02 12:22 - 19398656 _____ C:\Windows\system32\config\system_previous 2013-06-17 12:04 - 2006-11-02 13:18 - 00000000 __RSD C:\Windows\Media 2013-06-17 12:04 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\spool 2013-06-17 12:03 - 2011-07-31 14:21 - 00000000 ____D C:\ProgramData\McAfee Security Scan 2013-06-17 12:03 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\registration 2013-06-17 11:59 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\default_previous 2013-06-17 11:58 - 2006-11-02 12:22 - 36438016 _____ C:\Windows\system32\config\components_previous 2013-06-17 11:14 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\security_previous 2013-06-17 11:13 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\sam_previous 2013-06-14 13:29 - 2013-01-01 17:25 - 00000000 ____D C:\Users\Anna\Desktop\Neuer Ordner 2013-06-13 05:56 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE 2013-06-13 05:54 - 2013-06-13 05:54 - 00000000 ____D C:\30269cb3e1045cd9ca ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-07-12 13:29 ==================== End Of Log ============================ und der Addition-Code Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-07-2013 01 Ran by Anna at 2013-07-12 13:32:29 Running from C:\Users\Anna\Desktop Boot Mode: Normal ========================================================== Adobe Flash Player 11 ActiveX (Version: 11.4.402.287) Adobe Flash Player 11 Plugin (Version: 11.3.300.262) Adobe Reader X (10.1.0) - Deutsch (Version: 10.1.0) Avira Free Antivirus (Version: 13.0.0.3737) Bing Bar (Version: 7.0.619.0) Bonjour (Version: 3.0.0.2) Canon Easy-PhotoPrint EX Canon Easy-WebPrint EX Canon Inkjet Printer/Scanner/Fax Extended Survey Program Canon Kurzwahlprogramm Canon MP Navigator EX 5.1 Canon MX370 series Benutzerregistrierung Canon MX370 series MP Drivers Canon MX370 series On-screen Manual Canon My Printer Canon Solution Menu EX CCScore (Version: 8.02.0000.0001) D3DX10 (Version: 15.4.2368.0902) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition EVEREST Home Edition v2.20 (Version: 2.20) Free Realms Google Earth Plug-in (Version: 7.1.1.1580) Google Update Helper (Version: 1.3.21.149) Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.1930) Intel(R) TV Wizard Java(TM) 6 Update 37 (Version: 6.0.370) Junk Mail filter update (Version: 15.4.3502.0922) Kodak EasyShare Software Launch Manager V1.5.0.2 (Version: 1.5.0.2) McAfee Security Scan Plus (Version: 3.0.318.3) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729) Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6012.5000) Microsoft Office 2010 Service Pack 1 (SP1) Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Professional 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000) Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Single Image 2010 (Version: 14.0.6029.1000) Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) MSVCRT (Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) netbrdg (Version: 7.01.0000.0001) Picasa 3 (Version: 3.9) Realtek Ethernet Controller Driver For Windows Vista (Version: 6.239.531.2010) Realtek High Definition Audio Driver (Version: 6.0.1.6733) Segoe UI (Version: 15.4.2271.0615) SFR (Version: 8.01.0000.0001) Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1) Update for Microsoft Office 2010 (KB2553065) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition Update for Microsoft Office 2010 (KB2566458) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition Virtual Garden Windows Live Communications Platform (Version: 15.4.3502.0922) Windows Live Essentials (Version: 15.4.3502.0922) Windows Live Essentials (Version: 15.4.3555.0308) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (Version: 15.4.3502.0922) Windows Live Mail (Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Photo Common (Version: 15.4.3502.0922) Windows Live PIMT Platform (Version: 15.4.3508.1109) Windows Live SOXE (Version: 15.4.3502.0922) Windows Live SOXE Definitions (Version: 15.4.3502.0922) Windows Live UX Platform (Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (Version: 15.4.3508.1109) Windows Live Writer (Version: 15.4.3502.0922) Windows Live Writer Resources (Version: 15.4.3502.0922) WinRAR 4.01 (32-Bit) (Version: 4.01.0) ==================== Restore Points ========================= 17-05-2013 11:38:20 Geplanter Prüfpunkt 21-05-2013 17:10:05 Windows Update 23-05-2013 08:36:37 Geplanter Prüfpunkt 25-05-2013 08:05:56 Windows Update 31-05-2013 07:15:22 Windows Update 04-06-2013 07:57:45 Windows Update 07-06-2013 13:40:50 Geplanter Prüfpunkt 09-06-2013 14:24:38 Windows Update 11-06-2013 06:58:32 Geplanter Prüfpunkt 12-06-2013 12:16:57 Geplanter Prüfpunkt 13-06-2013 03:51:30 Windows Update 13-06-2013 06:28:49 Windows Update 17-06-2013 09:27:04 Windows Update 17-06-2013 09:58:11 Wiederherstellungsvorgang 17-06-2013 10:36:34 Windows Update 17-06-2013 10:40:53 Windows Update 21-06-2013 09:42:02 Windows Update 25-06-2013 15:09:53 Windows Update 29-06-2013 13:22:35 Windows Update 03-07-2013 15:14:28 Windows Update 09-07-2013 11:40:14 Geplanter Prüfpunkt 10-07-2013 08:14:22 Windows Update 11-07-2013 04:11:41 Windows Update ==================== Hosts content: ========================== 2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {1C3A65F4-A452-4BD5-8596-ED9F721760C3} - System32\Tasks\Microsoft\Windows\Defrag\ManualDefrag => C:\Windows\system32\defrag.exe [2008-01-21] (Microsoft Corp.) Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation) Task: {4EC2D714-078C-4519-BD7F-B1AAD8F304BE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-05-01] (Google Inc.) Task: {635CBECC-13AC-4EDC-924B-F6435204F374} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation) Task: {99322A3A-5061-47E0-B9D5-1AD57686FAFF} - System32\Tasks\User_Feed_Synchronization-{9D47A29C-FF9E-4948-A4EF-B60A1BD1978B} => C:\Windows\system32\msfeedssync.exe [2012-06-09] (Microsoft Corporation) Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-21] (Microsoft Corporation) Task: {A6E4393F-44BB-4E78-948F-B149351E6B96} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation) Task: {A723F1A9-3E95-4FB3-A53B-F66D8832FDDB} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {B3AE75F9-225B-4579-AD49-0A10590A43DE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-05-01] (Google Inc.) Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] () Task: {E6F675EC-F3E6-4FFC-90CF-AA5450EE19DA} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-21] (Microsoft Corporation) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2011-07-31 14:31:38.503 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-07-31 14:31:38.425 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-07-31 14:31:38.347 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-07-31 14:31:38.253 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-07-31 14:31:38.159 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 38% Total physical RAM: 3061.5 MB Available physical RAM: 1894.33 MB Total Pagefile: 6325.29 MB Available Pagefile: 5106.59 MB Total Virtual: 2047.88 MB Available Virtual: 1915.29 MB ==================== Drives ================================ Drive c: (BOOT) (Fixed) (Total:278.57 GB) (Free:199.5 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (RECOVER) (Fixed) (Total:19.5 GB) (Free:12.8 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: F98D6E74) Partition 1: (Active) - (Size=279 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=20 GB) - (Type=0C) ==================== End Of Log ============================ |
12.07.2013, 13:25 | #10 |
/// the machine /// TB-Ausbilder | GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert und AdwCleaner? ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
Downloade dir bitte Farbar Service Scanner
Poste bitte den Inhalt hier. und ein frisches FRST log bitte. Welche Probleme bestehen noch?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
12.07.2013, 13:28 | #11 |
| GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert Oh, der wurde nicht eingefügt! Hier der Nachtrag: Code:
ATTFilter # AdwCleaner v2.305 - Datei am 12/07/2013 um 13:21:32 erstellt # Aktualisiert am 11/07/2013 von Xplode # Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits) # Benutzer : Anna - ANNA-PC # Bootmodus : Normal # Ausgeführt unter : C:\Users\Anna\Downloads\adwcleaner.exe # Option [Löschen] **** [Dienste] **** ***** [Dateien / Ordner] ***** Datei Gelöscht : C:\user.js Ordner Gelöscht : C:\Users\Anna\AppData\LocalLow\Softonic Ordner Gelöscht : C:\Users\Anna\AppData\Roaming\dvdvideosoftiehelpers ***** [Registrierungsdatenbank] ***** Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D} ***** [Internet Browser] ***** -\\ Internet Explorer v9.0.8112.16496 [OK] Die Registrierungsdatenbank ist sauber. ************************* AdwCleaner[S1].txt - [954 octets] - [12/07/2013 13:21:32] ########## EOF - C:\AdwCleaner[S1].txt - [1013 octets] ########## |
12.07.2013, 13:29 | #12 |
/// the machine /// TB-Ausbilder | GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert Dann obiges bitte
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
12.07.2013, 16:02 | #13 |
| GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert ESET Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=26ebefd4e658b547bdbe0cd3fda47db7 # engine=14364 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-07-12 01:49:36 # local_time=2013-07-12 03:49:36 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode=1799 16775165 100 97 9384 239060266 2153 0 # compatibility_mode=5892 16776573 100 100 192852 211169704 0 0 # scanned=96364 # found=0 # cleaned=0 # scan_time=4556 ESETSmartInstaller@High as downloader log: Can not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetESETSmartInstaller@High as downloader log: Can not open internet# version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=26ebefd4e658b547bdbe0cd3fda47db7 # engine=14364 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-07-12 02:55:16 # local_time=2013-07-12 04:55:16 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode=1799 16775165 100 97 13324 239064206 6093 0 # compatibility_mode=5892 16776573 100 100 196792 211173644 0 0 # scanned=144628 # found=0 # cleaned=0 # scan_time=3767 Code:
ATTFilter UNSUPPORTED OPERATING SYSTEM! ABORTED! Code:
ATTFilter Farbar Service Scanner Version: 10-07-2013 01 Ran by Anna (administrator) on 12-07-2013 at 17:00:09 Running from "C:\Users\Anna\Desktop" Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo.com is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== System Restore: ============ System Restore Disabled Policy: ======================== Security Center: ============ Windows Update: ============ Windows Autoupdate Disabled Policy: ============================ Windows Defender: ============== Other Services: ============== File Check: ======== C:\Windows\system32\nsisvc.dll => MD5 is legit C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit C:\Windows\system32\dhcpcsvc.dll => MD5 is legit C:\Windows\system32\Drivers\afd.sys => MD5 is legit C:\Windows\system32\Drivers\tdx.sys => MD5 is legit C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit C:\Windows\system32\dnsrslvr.dll => MD5 is legit C:\Windows\system32\mpssvc.dll => MD5 is legit C:\Windows\system32\bfe.dll => MD5 is legit C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit C:\Windows\system32\SDRSVC.dll => MD5 is legit C:\Windows\system32\vssvc.exe => MD5 is legit C:\Windows\system32\wscsvc.dll => MD5 is legit C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit C:\Windows\system32\wuaueng.dll => MD5 is legit C:\Windows\system32\qmgr.dll => MD5 is legit C:\Windows\system32\es.dll => MD5 is legit C:\Windows\system32\cryptsvc.dll [2013-06-12 09:38] - [2013-04-24 06:00] - 0133120 ____A (Microsoft Corporation) 3EDE4C1F9672C972479201544969ADCB C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit C:\Windows\system32\ipnathlp.dll => MD5 is legit C:\Windows\system32\iphlpsvc.dll => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit **** End of log **** FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-07-2013 01 Ran by Anna (administrator) on 12-07-2013 17:00:53 Running from C:\Users\Anna\Desktop Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Microsoft Corporation) C:\Windows\system32\SLsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe () C:\Program Files\Launch Manager\OSDCtrl.exe (CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE (Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEUPDT.EXE (Microsoft Corporation) C:\Windows\system32\conime.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] - %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [LMgrOSD] - "C:\Program Files\Launch Manager\OSDCtrl.exe" [241664 2006-08-29] () HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon [1637496 2011-08-04] (CANON INC.) HKLM\...\Run: [avgnt] - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-07-01] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s [11672208 2012-08-31] (Realtek Semiconductor) HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [141848 2009-09-23] (Intel Corporation) HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [173592 2009-09-23] (Intel Corporation) HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [150552 2009-09-23] (Intel Corporation) HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1233920 2009-04-10] (Microsoft Corporation) HKCU\...\Policies\system: [DisableRegistryTools] 0 HKCU\...\Policies\system: [DisableTaskMgr] 0 MountPoints2: {08176035-94eb-11e1-b4fe-001f162248de} - F:\KODAK_Software_Downloader.exe MountPoints2: {37d6588f-130e-11e2-bdb7-001f162248de} - F:\KODAK_Software_Downloader.exe HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation) HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation) Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.) Startup: C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" No File BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" No File Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 ========================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG) R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [140456 2011-09-06] () S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.) S3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [113152 2009-03-04] (Wistron Corp.) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-03-27] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-03-27] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-27] (Avira Operations GmbH & Co. KG) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH) S1 HWiNFO32; \??\F:\DIAG\HWINFO32\HWiNFO32.SYS [x] S3 IpInIp; system32\DRIVERS\ipinip.sys [x] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x] S3 USBAAPL; System32\Drivers\usbaapl.sys [x] S3 uxddrv; \??\F:\uxddrv86.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-12 17:00 - 2013-07-12 17:00 - 00002191 _____ C:\Users\Anna\Desktop\FSS.txt 2013-07-12 14:31 - 2013-07-12 14:31 - 00000000 ____D C:\Program Files\ESET 2013-07-12 14:29 - 2013-07-12 14:29 - 00890988 _____ C:\Users\Anna\Desktop\SecurityCheck.exe 2013-07-12 14:29 - 2013-07-12 14:29 - 00356693 _____ (Farbar) C:\Users\Anna\Desktop\FSS.exe 2013-07-12 14:28 - 2013-07-12 14:28 - 02347384 _____ (ESET) C:\Users\Anna\Desktop\esetsmartinstaller_enu.exe 2013-07-12 13:32 - 2013-07-12 13:34 - 00012223 _____ C:\Users\Anna\Desktop\Addition.txt 2013-07-12 13:30 - 2013-07-12 13:30 - 01218598 _____ (Farbar) C:\Users\Anna\Desktop\FRST.exe 2013-07-12 13:28 - 2013-07-12 13:28 - 00082262 _____ C:\Users\Anna\Desktop\JRT.txt 2013-07-12 13:26 - 2013-07-12 13:26 - 00000000 ____D C:\Windows\ERUNT 2013-07-12 13:24 - 2013-07-12 13:25 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Anna\Desktop\JRT.exe 2013-07-12 13:21 - 2013-07-12 13:21 - 00001082 _____ C:\AdwCleaner[S1].txt 2013-07-12 13:20 - 2013-07-12 13:20 - 00662345 _____ C:\Users\Anna\Desktop\adwcleaner.exe 2013-07-12 09:41 - 2013-07-12 09:41 - 00000000 ____D C:\FRST 2013-07-11 20:27 - 2013-07-11 20:28 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp 2013-07-11 20:22 - 2013-07-11 20:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp 2013-07-11 19:29 - 2013-07-11 20:27 - 193362412 _____ C:\Windows\MEMORY.DMP 2013-07-11 19:29 - 2013-07-11 20:27 - 00000000 ____D C:\Windows\Minidump 2013-07-11 19:29 - 2013-07-11 19:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp 2013-07-11 19:22 - 2013-07-11 19:22 - 00000000 ____D C:\ProgramData\HitmanPro 2013-07-11 06:22 - 2013-05-29 03:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-11 06:22 - 2013-05-29 03:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-11 06:22 - 2013-05-29 03:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-11 06:22 - 2013-05-29 03:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-07-11 06:22 - 2013-05-29 03:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-11 06:22 - 2013-05-29 03:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-11 06:22 - 2013-05-29 03:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-07-11 06:22 - 2013-05-29 03:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-11 06:22 - 2013-05-29 03:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-07-11 06:22 - 2013-05-29 03:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-07-11 06:22 - 2013-05-29 03:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-11 06:22 - 2013-05-29 03:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-11 06:22 - 2013-05-29 03:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-11 06:22 - 2013-05-29 03:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-11 06:22 - 2013-05-29 03:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-07-11 06:22 - 2013-05-29 03:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-10 11:17 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-07-10 11:17 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-07-10 11:17 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-10 11:17 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2013-07-10 11:17 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2013-07-10 11:17 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2013-07-10 11:17 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2013-07-10 11:17 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2013-07-10 11:17 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2013-07-10 11:17 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2013-07-10 11:17 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-07-10 11:17 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2013-06-21 21:56 - 2013-06-21 21:56 - 00000000 ____D C:\ProgramData\WindowsSearch 2013-06-17 12:36 - 2013-05-08 06:37 - 00905576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-06-17 12:36 - 2013-05-02 06:04 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2013-06-17 12:36 - 2013-05-02 06:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\printcom.dll 2013-06-13 05:54 - 2013-06-13 05:54 - 00000000 ____D C:\30269cb3e1045cd9ca 2013-06-12 09:38 - 2013-05-03 00:03 - 03603832 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-06-12 09:38 - 2013-05-03 00:03 - 03551096 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-06-12 09:38 - 2013-04-24 06:00 - 00985600 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-06-12 09:38 - 2013-04-24 06:00 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-06-12 09:38 - 2013-04-24 06:00 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-06-12 09:38 - 2013-04-24 06:00 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2013-06-12 09:38 - 2013-04-24 03:46 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2013-06-12 09:38 - 2013-04-17 14:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll ==================== One Month Modified Files and Folders ======= 2013-07-12 17:01 - 2013-05-01 21:31 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-07-12 17:00 - 2013-07-12 17:00 - 00002191 _____ C:\Users\Anna\Desktop\FSS.txt 2013-07-12 15:52 - 2008-01-21 03:35 - 01709767 _____ C:\Windows\WindowsUpdate.log 2013-07-12 15:22 - 2006-11-02 14:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-12 15:22 - 2006-11-02 14:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-12 14:31 - 2013-07-12 14:31 - 00000000 ____D C:\Program Files\ESET 2013-07-12 14:29 - 2013-07-12 14:29 - 00890988 _____ C:\Users\Anna\Desktop\SecurityCheck.exe 2013-07-12 14:29 - 2013-07-12 14:29 - 00356693 _____ (Farbar) C:\Users\Anna\Desktop\FSS.exe 2013-07-12 14:28 - 2013-07-12 14:28 - 02347384 _____ (ESET) C:\Users\Anna\Desktop\esetsmartinstaller_enu.exe 2013-07-12 13:34 - 2013-07-12 13:32 - 00012223 _____ C:\Users\Anna\Desktop\Addition.txt 2013-07-12 13:30 - 2013-07-12 13:30 - 01218598 _____ (Farbar) C:\Users\Anna\Desktop\FRST.exe 2013-07-12 13:28 - 2013-07-12 13:28 - 00082262 _____ C:\Users\Anna\Desktop\JRT.txt 2013-07-12 13:26 - 2013-07-12 13:26 - 00000000 ____D C:\Windows\ERUNT 2013-07-12 13:25 - 2013-07-12 13:24 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Anna\Desktop\JRT.exe 2013-07-12 13:22 - 2013-05-01 21:31 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-07-12 13:22 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-07-12 13:21 - 2013-07-12 13:21 - 00001082 _____ C:\AdwCleaner[S1].txt 2013-07-12 13:21 - 2006-11-02 15:01 - 00032534 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-07-12 13:20 - 2013-07-12 13:20 - 00662345 _____ C:\Users\Anna\Desktop\adwcleaner.exe 2013-07-12 09:41 - 2013-07-12 09:41 - 00000000 ____D C:\FRST 2013-07-12 08:26 - 2008-01-21 09:16 - 01445546 _____ C:\Windows\system32\PerfStringBackup.INI 2013-07-11 23:54 - 2012-12-03 23:10 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-07-11 23:44 - 2011-07-30 19:53 - 00000000 ____D C:\Users\Anna 2013-07-11 22:22 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET 2013-07-11 21:32 - 2006-11-02 12:22 - 19398656 _____ C:\Windows\system32\config\SYSTEM.BAK 2013-07-11 20:28 - 2013-07-11 20:27 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp 2013-07-11 20:27 - 2013-07-11 19:29 - 193362412 _____ C:\Windows\MEMORY.DMP 2013-07-11 20:27 - 2013-07-11 19:29 - 00000000 ____D C:\Windows\Minidump 2013-07-11 20:22 - 2013-07-11 20:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp 2013-07-11 19:29 - 2013-07-11 19:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp 2013-07-11 19:22 - 2013-07-11 19:22 - 00000000 ____D C:\ProgramData\HitmanPro 2013-07-11 06:35 - 2006-11-02 14:47 - 00372168 _____ C:\Windows\system32\FNTCACHE.DAT 2013-07-11 06:33 - 2011-08-25 18:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-07-11 06:32 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer 2013-07-11 06:24 - 2006-11-02 12:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2013-07-11 06:13 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal 2013-07-01 13:09 - 2012-08-30 12:03 - 00000000 ____D C:\ProgramData\CanonIJPLM 2013-06-26 16:18 - 2012-09-20 15:33 - 00000000 ____D C:\Users\Anna\Desktop\Noah 2013-06-22 11:09 - 2013-05-29 13:43 - 00000000 ____D C:\Users\Anna\Desktop\Dzemo in Ostfriesland 2013-06-21 21:56 - 2013-06-21 21:56 - 00000000 ____D C:\ProgramData\WindowsSearch 2013-06-18 21:16 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache 2013-06-17 12:22 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\Msdtc 2013-06-17 12:05 - 2006-11-02 12:22 - 41418752 _____ C:\Windows\system32\config\software_previous 2013-06-17 12:05 - 2006-11-02 12:22 - 19398656 _____ C:\Windows\system32\config\system_previous 2013-06-17 12:04 - 2006-11-02 13:18 - 00000000 __RSD C:\Windows\Media 2013-06-17 12:04 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\spool 2013-06-17 12:03 - 2011-07-31 14:21 - 00000000 ____D C:\ProgramData\McAfee Security Scan 2013-06-17 12:03 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\registration 2013-06-17 11:59 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\default_previous 2013-06-17 11:58 - 2006-11-02 12:22 - 36438016 _____ C:\Windows\system32\config\components_previous 2013-06-17 11:14 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\security_previous 2013-06-17 11:13 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\sam_previous 2013-06-14 13:29 - 2013-01-01 17:25 - 00000000 ____D C:\Users\Anna\Desktop\Neuer Ordner 2013-06-13 05:56 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE 2013-06-13 05:54 - 2013-06-13 05:54 - 00000000 ____D C:\30269cb3e1045cd9ca ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-07-12 13:29 ==================== End Of Log ============================ Stunden später Ich hoffe ich habs bald geschafft |
12.07.2013, 16:49 | #14 |
/// the machine /// TB-Ausbilder | GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
12.07.2013, 17:02 | #15 |
| GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert Ja! Es werden keine WLan-Netzwerke angezeigt, Lan funktioniert weiter fehlerfrei und mit meinem Macbook mit ich über WLan verbunden. Wenn ich auf 'Warum können keine Netzwerke gefunden werden?' klicke, kommt ein Diagnose-Fenster mit der Info 'Aktivieren Sie die Drahtlosfunktion'. Das müsste per Fn+F1 (Medion Akoya) funktionieren, allerdings tut sich nichts. Unter 'Drahtlosnetzwerke verwalten' finde ich das Netzwerk und der Adapter funktioniert laut den Eigenschaften einwand frei. |
Themen zu GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert |
anzeige, boot, cmd.exe, dateien, erstellt, falsch, fehler, funktioniert, gvu 2.07 vista, hitmanpro, leer, neu, neue, neuen, neustart, nichts, nutzen, otlpe, programm, rechner, stick, tan, trojaner, usb, usb stick, vista, windows, windows 7 |