|
Plagegeister aller Art und deren Bekämpfung: Ads not by this Site ProblemWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
04.08.2013, 14:14 | #1 |
| Ads not by this Site Problem Hallo, habe mich in letzter Zeit immer gewundert das bei mir immer zuviel Werbung aufpopt trotz AD plus im Firefox. Ich habe schon ein wenig gegoogelt aber nix gefunden was bei mir zutrifft. Habe jetzt mit GMER und OTL gescannt und die Logfiles angehangen. Ich hoffe das mir hier jemand weiterhelfen kann. |
04.08.2013, 14:22 | #2 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Ads not by this Site Problem Hallo und
__________________Die Logs bitte in CODE-Tags posten JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Im Anschluss: adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen Downloade Dir bitte AdwCleaner auf deinen Desktop.
Danach eine Kontrolle mit Farbars Tool bitte: Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
04.08.2013, 14:45 | #3 |
| Ads not by this Site Problem AdwCleaner Logfile:
__________________Code:
ATTFilter # AdwCleaner v2.306 - Datei am 04/08/2013 um 15:32:41 erstellt # Aktualisiert am 19/07/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzer : RONsen - RONSEN-PC # Bootmodus : Normal # Ausgeführt unter : C:\Users\RONsen\Downloads\adwcleaner.exe # Option [Löschen] **** [Dienste] **** ***** [Dateien / Ordner] ***** Datei Gelöscht : C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\searchplugins\11-suche.xml Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB Ordner Gelöscht : C:\Program Files\Web Assistant ***** [Registrierungsdatenbank] ***** Schlüssel Gelöscht : HKCU\Software\APN PIP Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403A-B9D2-65C292C39087} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{898EA8C8-E7FF-479B-8935-AEC46303B9E5} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS Schlüssel Gelöscht : HKLM\Software\PIP Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\kincjchfokkeneeofpeefomkikfkiedl Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\facetheme Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1 Schlüssel Gelöscht : HKLM\SOFTWARE\Web Assistant Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}] Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{EB132DB0-A4CA-11DF-9732-0E29E0D72085}] Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{EB132DB0-A4CA-11DF-9732-0E29E0D72085}] ***** [Internet Browser] ***** -\\ Internet Explorer v10.0.9200.16635 [OK] Die Registrierungsdatenbank ist sauber. -\\ Mozilla Firefox v22.0 (de) Datei : C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\prefs.js Gelöscht : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...] Gelöscht : user_pref("{8E9E3331-D360-4f87-8803-52DE43566502}.ScriptData_WSG_blackList", "form=CONTLB|babsrc=too[...] Gelöscht : user_pref("{8E9E3331-D360-4f87-8803-52DE43566502}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...] ************************* AdwCleaner[S1].txt - [14300 octets] - [04/08/2013 15:32:41] ########## EOF - C:\AdwCleaner[S1].txt - [14361 octets] ########## [/CODE] OTL Logfile: Code:
ATTFilter OTL logfile created on: 04.08.2013 14:53:56 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\RONsen\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16635) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 7,98 Gb Total Physical Memory | 5,53 Gb Available Physical Memory | 69,28% Memory free 15,96 Gb Paging File | 13,32 Gb Available in Paging File | 83,46% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 450,66 Gb Total Space | 188,04 Gb Free Space | 41,72% Space Free | Partition Type: NTFS Computer Name: RONSEN-PC | User Name: RONsen | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2013.08.04 14:53:44 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\RONsen\Downloads\OTL.exe PRC - [2013.06.30 16:37:28 | 000,188,760 | ---- | M] () -- C:\Programme\Web Assistant\ExtensionUpdaterService.exe PRC - [2013.06.18 16:21:11 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2013.06.16 12:47:17 | 001,855,880 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe PRC - [2013.05.10 09:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012.09.01 22:14:59 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2012.08.01 09:33:47 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe PRC - [2012.05.08 16:48:31 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe PRC - [2012.05.08 16:48:31 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe PRC - [2010.12.23 14:46:44 | 000,120,104 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe PRC - [2010.12.23 14:46:40 | 000,181,632 | ---- | M] () -- C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe PRC - [2010.12.09 07:27:50 | 001,025,616 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe PRC - [2010.12.09 07:27:50 | 000,311,376 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe PRC - [2010.12.09 07:27:50 | 000,287,824 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe PRC - [2010.11.12 03:21:52 | 000,257,344 | ---- | M] (NTI Corporation) -- C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe PRC - [2010.11.12 03:21:36 | 000,296,768 | ---- | M] (NTI Corporation) -- C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe PRC - [2010.10.06 06:08:48 | 002,655,768 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2010.10.06 06:08:44 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2010.09.28 05:00:56 | 000,340,336 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe PRC - [2010.09.18 02:10:16 | 000,407,920 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe PRC - [2010.09.18 02:10:02 | 000,201,584 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe PRC - [2010.09.14 04:32:32 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2010.09.14 04:32:30 | 000,283,160 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe PRC - [2010.04.27 04:09:52 | 000,113,288 | ---- | M] (Renesas Electronics Corporation) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe PRC - [2010.01.29 02:27:36 | 000,243,232 | ---- | M] (Acer Group) -- C:\Programme\Acer\Acer Updater\UpdaterService.exe PRC - [2010.01.08 15:21:22 | 000,023,584 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe ========== Modules (No Company Name) ========== MOD - [2013.07.18 17:23:20 | 000,475,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\e937e3331234e8da935e71172e46ba17\IAStorUtil.ni.dll MOD - [2013.07.18 17:23:20 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\34002b75cd0faab68bf8079299c1aa46\IAStorCommon.ni.dll MOD - [2013.07.17 19:14:39 | 011,914,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\c57eba08ab60f48e7d57228849d92a34\System.Web.ni.dll MOD - [2013.07.17 19:14:33 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\89fe719039385377f6b5ad8d0070aa6b\System.Runtime.Remoting.ni.dll MOD - [2013.07.17 19:14:12 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\178644ab40108f3becd8b91049a254c3\System.Windows.Forms.ni.dll MOD - [2013.07.17 19:14:06 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\bfa7a95284aec941f4b03bae0debe07c\System.Drawing.ni.dll MOD - [2013.07.17 19:13:56 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\c25666b99761bc42322bae2e59968df8\WindowsBase.ni.dll MOD - [2013.07.17 19:13:51 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\32066405eb9ab14056b2af3115d2a6de\System.Xml.ni.dll MOD - [2013.07.17 19:13:49 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\72c249e8bea5ae896e266f77d7f675e6\System.Configuration.ni.dll MOD - [2013.07.17 19:13:48 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\187c13e8967097d2ed1e5f123e7d890a\System.ni.dll MOD - [2013.07.17 19:13:36 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll MOD - [2013.06.18 16:21:30 | 003,285,912 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2013.06.16 12:47:17 | 016,033,160 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll MOD - [2011.07.09 23:58:57 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll MOD - [2010.12.23 14:46:40 | 000,181,632 | ---- | M] () -- C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe MOD - [2010.12.23 14:46:38 | 000,210,312 | ---- | M] () -- C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll MOD - [2010.11.13 01:26:08 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll MOD - [2010.11.12 03:22:22 | 000,465,640 | ---- | M] () -- C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll ========== Services (SafeList) ========== SRV:64bit: - [2013.03.29 03:34:18 | 000,241,152 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV - [2013.07.27 00:46:24 | 000,563,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2013.06.30 16:37:28 | 000,188,760 | ---- | M] () [Auto | Running] -- C:\Programme\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant Updater) SRV - [2013.06.18 16:21:21 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013.06.03 16:21:54 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013.05.10 09:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012.09.01 22:14:59 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2012.05.08 16:48:31 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2012.05.08 16:48:31 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2012.04.22 13:51:04 | 000,720,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2011.09.27 21:04:08 | 000,359,192 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ) SRV - [2011.07.09 14:28:01 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2011.03.28 21:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc) SRV - [2010.12.09 07:27:50 | 000,311,376 | ---- | M] (Dritek System Inc.) [Auto | Running] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService) SRV - [2010.11.25 20:29:54 | 000,052,896 | ---- | M] (Atheros Commnucations) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe -- (AtherosSvc) SRV - [2010.11.12 03:21:52 | 000,257,344 | ---- | M] (NTI Corporation) [Auto | Running] -- C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe -- (NTI IScheduleSvc) SRV - [2010.10.29 20:22:12 | 000,868,224 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Programme\Acer\Acer ePower Management\ePowerSvc.exe -- (ePowerSvc) SRV - [2010.10.08 02:24:16 | 000,150,016 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Programme\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost) SRV - [2010.10.06 06:08:48 | 002,655,768 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2010.10.06 06:08:44 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2010.09.28 04:09:54 | 000,172,912 | ---- | M] (Egis Technology Inc. ) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe -- (EgisTec Ticket Service) SRV - [2010.09.22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV - [2010.09.14 04:32:32 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) SRV - [2010.06.02 01:31:28 | 002,804,568 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU) SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010.01.29 02:27:36 | 000,243,232 | ---- | M] (Acer Group) [Auto | Running] -- C:\Programme\Acer\Acer Updater\UpdaterService.exe -- (Updater Service) SRV - [2010.01.08 15:21:22 | 000,023,584 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe -- (GREGService) SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - [2013.06.08 20:58:20 | 000,031,136 | ---- | M] (REALiX(tm)) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\HWiNFO64A.SYS -- (HWiNFO32) DRV:64bit: - [2013.03.29 04:35:02 | 011,658,752 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:64bit: - [2013.03.29 03:09:44 | 000,581,120 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:64bit: - [2013.02.14 13:41:10 | 000,096,768 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:64bit: - [2012.08.23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2012.05.08 16:48:31 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb) DRV:64bit: - [2012.05.08 16:48:31 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt) DRV:64bit: - [2012.04.22 13:51:38 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd) DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2012.02.15 11:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:64bit: - [2012.01.09 17:28:20 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd) DRV:64bit: - [2012.01.09 17:28:20 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt) DRV:64bit: - [2012.01.09 17:28:20 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev) DRV:64bit: - [2012.01.09 17:28:18 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc) DRV:64bit: - [2011.12.19 21:09:33 | 000,279,616 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:64bit: - [2011.09.16 16:08:07 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr) DRV:64bit: - [2011.09.02 08:30:46 | 000,042,776 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LUsbFilt.sys -- (LUsbFilt) DRV:64bit: - [2011.09.02 08:30:36 | 000,060,696 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt) DRV:64bit: - [2011.09.02 08:30:24 | 000,066,840 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt) DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011.01.15 18:21:04 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone) DRV:64bit: - [2010.12.10 21:22:10 | 000,062,584 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk) DRV:64bit: - [2010.12.10 21:22:10 | 000,022,912 | ---- | M] (Egis Technology Inc.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDFilter.sys -- (mwlPSDFilter) DRV:64bit: - [2010.12.10 21:22:10 | 000,020,328 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDNserv.sys -- (mwlPSDNServ) DRV:64bit: - [2010.11.25 20:30:12 | 000,275,616 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter) DRV:64bit: - [2010.11.25 20:30:12 | 000,201,376 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP) DRV:64bit: - [2010.11.25 20:30:12 | 000,154,272 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP) DRV:64bit: - [2010.11.25 20:30:12 | 000,055,456 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT) DRV:64bit: - [2010.11.25 20:30:12 | 000,036,000 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort) DRV:64bit: - [2010.11.25 20:30:12 | 000,028,832 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS) DRV:64bit: - [2010.11.25 20:30:10 | 000,298,144 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP) DRV:64bit: - [2010.11.20 05:33:36 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010.11.20 02:43:58 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:64bit: - [2010.10.20 02:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) DRV:64bit: - [2010.10.08 02:23:38 | 000,019,192 | ---- | M] (Intel(R) Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB) DRV:64bit: - [2010.09.30 07:00:06 | 000,180,736 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:64bit: - [2010.09.30 07:00:06 | 000,080,384 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:64bit: - [2010.09.27 09:24:44 | 000,076,912 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C) DRV:64bit: - [2010.09.14 04:24:26 | 000,437,272 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:64bit: - [2010.07.29 15:30:48 | 001,383,472 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2010.07.20 11:43:22 | 000,247,400 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV:64bit: - [2010.07.09 05:51:50 | 000,017,408 | ---- | M] (NTI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper) DRV:64bit: - [2010.05.11 12:11:38 | 002,229,608 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:64bit: - [2010.05.05 23:21:46 | 000,125,456 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:64bit: - [2010.04.20 04:35:14 | 000,018,432 | ---- | M] (NTI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NTIDrvr.sys -- (NTIDrvr) DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV - [2013.06.20 19:42:44 | 000,019,952 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys -- (RivaTuner64) DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://acer.msn.com [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://mystart.incredibar.com/mb178?a=6R8EA7oV5p&i=26 IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.) IE - HKCU\..\SearchScopes,DefaultScope = {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} IE - HKCU\..\SearchScopes\{5F970FDE-702B-4ef9-920C-5F2848A5AF26}: "URL" = hxxp://www.daemon-search.com/search/web?q={searchTerms} IE - HKCU\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = hxxp://mystart.incredibar.com/mb178/?search={searchTerms}&loc=IB_DS&a=6R8EA7oV5p&i=26 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "MyStart Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "hxxp://news.google.de/nwshp?hl=de&tab=wn" FF - prefs.js..extensions.enabledAddons: battlefieldheroespatcher%40ea.com:5.0.145.0 FF - prefs.js..extensions.enabledAddons: %7BD4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389%7D:0.9.10 FF - prefs.js..extensions.enabledAddons: %7B19503e42-ca3c-4c27-b1e2-9cdb2170ee34%7D:1.5.5.5 FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.17 FF - prefs.js..extensions.enabledAddons: %7B8E9E3331-D360-4f87-8803-52DE43566502%7D:2.0.0.604 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0 FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\RONsen\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX [2013.07.21 21:09:47 | 000,000,000 | ---D | M] 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{8E9E3331-D360-4f87-8803-52DE43566502}: C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX [2013.07.21 21:09:47 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files (x86)\McAfee\SiteAdvisor [2011.08.30 19:45:00 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{EB132DB0-A4CA-11DF-9732-0E29E0D72085}: C:\Program Files (x86)\Object\facetheme [2011.07.17 19:36:09 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmdownloader@gmail.com: C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ [2011.09.23 20:23:42 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Program Files\Web Assistant\Firefox [2013.07.21 21:09:47 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{8E9E3331-D360-4f87-8803-52DE43566502}: C:\Program Files\Web Assistant\Firefox [2013.07.21 21:09:47 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.06.27 21:11:40 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{EB132DB0-A4CA-11DF-9732-0E29E0D72085}: C:\Program Files (x86)\Object\facetheme [2011.07.17 19:36:09 | 000,000,000 | ---D | M] [2011.07.09 23:41:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\RONsen\AppData\Roaming\mozilla\Extensions [2013.07.31 22:36:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\RONsen\AppData\Roaming\mozilla\Firefox\Profiles\mjboubl6.default\extensions [2013.07.20 12:28:43 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\RONsen\AppData\Roaming\mozilla\Firefox\Profiles\mjboubl6.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2012.09.01 22:03:50 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- C:\Users\RONsen\AppData\Roaming\mozilla\Firefox\Profiles\mjboubl6.default\extensions\battlefieldheroespatcher@ea.com [2013.06.12 16:39:01 | 000,350,663 | ---- | M] () (No name found) -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2012.12.12 13:22:09 | 000,036,098 | ---- | M] () (No name found) -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2013.07.31 22:36:03 | 000,824,302 | ---- | M] () (No name found) -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011.10.31 15:22:18 | 000,434,392 | ---- | M] () (No name found) -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi [2012.02.25 14:24:14 | 000,000,933 | ---- | M] () -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\11-suche.xml [2011.12.30 17:17:10 | 000,002,059 | ---- | M] () -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\absearch-search.xml [2012.02.25 14:24:14 | 000,002,419 | ---- | M] () -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\englische-ergebnisse.xml [2012.02.25 14:24:14 | 000,010,525 | ---- | M] () -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\gmx-suche.xml [2012.02.25 14:24:14 | 000,002,457 | ---- | M] () -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\lastminute.xml [2012.09.08 23:02:43 | 000,002,203 | ---- | M] () -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\MyStart Search.xml [2012.02.25 14:24:14 | 000,005,508 | ---- | M] () -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\webde-suche.xml [2013.06.27 21:11:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2013.06.27 21:11:41 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013.06.27 21:11:41 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013.06.27 21:11:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions [2013.07.28 15:23:13 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2013.07.21 21:09:47 | 000,000,000 | ---D | M] (Web Assistant) -- C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension64.dll () O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) O2 - BHO: (FGCatchUrl) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files (x86)\FlashGet\jccatch.dll (www.flashget.com) O2 - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension32.dll () O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (FlashGet GetFlash Class) - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files (x86)\FlashGet\getflash.dll (www.flashget.com) O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) O3:64bit: - HKLM\..\Toolbar: (no name) - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} - No CLSID value found. O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} - No CLSID value found. O4:64bit: - HKLM..\Run: [Acer ePower Management] C:\Programme\Acer\Acer ePower Management\ePowerTray.exe (Acer Incorporated) O4:64bit: - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations) O4:64bit: - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications) O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.) O4:64bit: - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [BackupManagerTray] C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation) O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKCU..\Run: [] File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: &Alles mit FlashGet laden - C:\Program Files (x86)\FlashGet\jc_all.htm () O8:64bit: - Extra context menu item: &Mit FlashGet laden - C:\Program Files (x86)\FlashGet\jc_link.htm () O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\RONsen\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O8 - Extra context menu item: &Alles mit FlashGet laden - C:\Program Files (x86)\FlashGet\jc_all.htm () O8 - Extra context menu item: &Mit FlashGet laden - C:\Program Files (x86)\FlashGet\jc_link.htm () O8 - Extra context menu item: Free YouTube Download - C:\Users\RONsen\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O9:64bit: - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\FlashGet.exe (FlashGet.com) O9 - Extra 'Tools' menuitem : FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\FlashGet.exe (FlashGet.com) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A55D2BFF-7D12-45CF-B27D-745D6463F44B}: DhcpNameServer = 192.168.178.1 O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.) O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Programme\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{8ee7ffb6-2a73-11e1-a407-1c7508fa5649}\Shell - "" = AutoRun O33 - MountPoints2\{8ee7ffb6-2a73-11e1-a407-1c7508fa5649}\Shell\AutoRun\command - "" = E:\Launch.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.08.03 14:19:16 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{91E97676-05BB-4197-A7F4-47EE40124740} [2013.08.02 22:23:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2013.08.02 10:39:10 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{142CBD56-86CB-4095-926A-F38D32B048AE} [2013.08.01 08:18:49 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{93EE428A-19E7-46D5-8A21-61D1F390C7C8} [2013.07.30 18:36:25 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{018B31CE-944A-45EF-930D-B104F4C79895} [2013.07.29 10:48:29 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{CE86AC33-F835-4FAD-9D7F-FB3B64535FA6} [2013.07.28 15:23:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service [2013.07.26 14:36:27 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{B73884E9-D300-41CD-904D-52D5C4B48684} [2013.07.26 12:26:09 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{6FF61D0C-14E8-49B7-BEBA-07818A17B0E5} [2013.07.25 12:06:01 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{B2408FFF-0E99-4C56-B3A7-9F938185C1ED} [2013.07.24 12:44:11 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{4FF7389F-A09E-4A2D-9A66-A92AC49117AC} [2013.07.23 11:58:19 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{180EC5BA-9383-433C-921C-CD80C2732B14} [2013.07.22 20:55:56 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{FAF88EF3-F711-4257-AF0B-7E1E2EB16B94} [2013.07.22 13:08:44 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{431EB91E-BD90-4DA8-B507-FC9438283B7A} [2013.07.21 12:40:19 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{48E29D7D-BE33-4DC7-B62D-5F214B842CBC} [2013.07.20 23:54:45 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{51425EB7-733A-41E0-B4E5-5F47E85A703D} [2013.07.19 23:23:48 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{2A2A88F0-6E24-4675-9A07-368A92AE1E89} [2013.07.18 20:16:39 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{8A9BB33D-3E3D-4857-8F97-9BD293DF8B7D} [2013.07.18 17:15:34 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT [2013.07.18 12:24:44 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{48BF14E6-15CD-4BA6-933B-ABC231D4F3C3} [2013.07.17 18:56:22 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2013.07.17 18:56:22 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2013.07.17 18:56:21 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll [2013.07.17 18:56:21 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll [2013.07.17 18:56:21 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe [2013.07.17 18:56:21 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe [2013.07.17 18:56:21 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2013.07.17 18:56:21 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2013.07.17 18:56:21 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2013.07.17 18:56:21 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2013.07.17 18:56:21 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2013.07.17 18:56:20 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2013.07.17 18:56:20 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2013.07.17 18:56:20 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2013.07.17 18:56:19 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2013.07.17 18:50:01 | 001,887,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL [2013.07.17 18:50:01 | 001,620,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL [2013.07.17 18:50:00 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll [2013.07.17 18:50:00 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll [2013.07.17 18:49:08 | 001,643,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [2013.07.17 12:32:37 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{32337F3C-7360-44BF-A016-24C090B70087} [2013.07.16 13:13:20 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{AB7B7514-7163-4AF7-BF40-5F9817F8C5D7} [2013.07.14 14:51:41 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{6368FE43-2110-46EF-B0B6-11EA7CA15B96} [2013.07.12 19:31:23 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{67C05DEA-7AA3-4675-B643-3831D43F0BEA} [2013.07.10 20:26:21 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{A82CA017-3CF3-4086-BE20-C9656D76D6F4} [2013.07.07 14:08:04 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{68E57180-39E5-415B-90EE-3D0DAF96CCCB} [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013.08.04 14:20:00 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.08.04 13:10:55 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013.08.04 13:10:55 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013.08.04 13:03:35 | 000,000,035 | ---- | M] () -- C:\Users\Public\Documents\AtherosServiceConfig.ini [2013.08.04 13:03:30 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.08.04 13:03:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.08.04 13:03:09 | 2133,217,279 | -HS- | M] () -- C:\hiberfil.sys [2013.08.03 14:13:54 | 000,016,153 | ---- | M] () -- C:\Users\RONsen\Desktop\Dienste Win 7.ods [2013.08.03 13:50:41 | 000,000,126 | ---- | M] () -- C:\Users\RONsen\Desktop\prozessliste.bat [2013.07.31 10:33:07 | 001,498,742 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013.07.31 10:33:07 | 000,654,400 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2013.07.31 10:33:07 | 000,616,242 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013.07.31 10:33:07 | 000,130,240 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2013.07.31 10:33:07 | 000,106,622 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013.07.30 18:43:00 | 000,000,339 | ---- | M] () -- C:\Windows\Brownie.ini [2013.07.28 15:13:17 | 000,120,272 | ---- | M] () -- C:\Users\RONsen\Desktop\bookmarks.html [2013.07.28 15:12:44 | 000,100,680 | ---- | M] () -- C:\Users\RONsen\Desktop\bookmarks-2013-07-28.json [2013.07.17 19:12:37 | 000,309,512 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2013.08.03 13:50:40 | 000,000,126 | ---- | C] () -- C:\Users\RONsen\Desktop\prozessliste.bat [2013.08.03 13:42:52 | 000,016,153 | ---- | C] () -- C:\Users\RONsen\Desktop\Dienste Win 7.ods [2013.07.28 15:23:15 | 000,001,167 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2013.07.28 15:13:17 | 000,120,272 | ---- | C] () -- C:\Users\RONsen\Desktop\bookmarks.html [2013.07.28 15:12:43 | 000,100,680 | ---- | C] () -- C:\Users\RONsen\Desktop\bookmarks-2013-07-28.json [2013.06.29 23:56:45 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat [2013.06.07 22:45:23 | 000,000,624 | ---- | C] () -- C:\Users\RONsen\AppData\Roaming\All CPU MeterV3_Settings.ini [2013.05.04 13:27:14 | 000,188,416 | RHS- | C] () -- C:\Windows\SysWow64\winDCE32.dll [2013.05.04 13:27:14 | 000,107,520 | RHS- | C] () -- C:\Windows\SysWow64\TAKDSDecoder.dll [2013.03.29 04:13:14 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe [2013.03.29 04:13:12 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe [2013.03.21 06:10:18 | 000,042,880 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll [2012.11.27 01:18:46 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll [2012.11.18 15:11:40 | 000,002,722 | ---- | C] () -- C:\Users\RONsen\.recently-used.xbel [2012.10.09 20:08:47 | 002,020,411 | ---- | C] () -- C:\Users\RONsen\Handbuch HL2000_UG_German_ver5.pdf [2012.09.01 22:15:00 | 000,270,240 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2012.09.01 22:14:59 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2012.07.28 03:39:50 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat [2012.07.28 03:39:50 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat [2012.07.09 19:01:30 | 000,000,684 | ---- | C] () -- C:\Windows\wininit.ini [2011.11.07 21:53:25 | 000,103,016 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat [2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2011.08.01 22:04:45 | 000,007,621 | ---- | C] () -- C:\Users\RONsen\AppData\Local\Resmon.ResmonCfg [2010.12.10 21:09:56 | 000,131,984 | ---- | C] () -- C:\ProgramData\FullRemove.exe ========== ZeroAccess Check ========== [2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 04:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] < End of report > [/CODE] |
04.08.2013, 14:48 | #4 |
| Ads not by this Site ProblemCode:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 5.3.2 (08.03.2013:1) OS: Windows 7 Home Premium x64 Ran by RONsen on 04.08.2013 at 15:27:05,44 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services Successfully stopped: [Service] web assistant updater Successfully deleted: [Service] web assistant updater ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-1955225510-3349160328-3692403937-1000\Software\Microsoft\Internet Explorer\Main\\Start Page ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\extension.dll Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\im Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\iminent Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\iminstaller Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\pricegong Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926} Successfully deleted: [Registry Key] "HKEY_CURRENT_USER\Software\Microsoft\internet explorer\internetregistry\registry\user\S-1-5-21-1955225510-3349160328-3692403937-1000\software\web assistant" Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\iminent Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\web assistant Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\extension.extensionhelperobject Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\extension.extensionhelperobject.1 Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5F970FDE-702B-4ef9-920C-5F2848A5AF26} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess" Successfully deleted: [Folder] "C:\Users\RONsen\AppData\Roaming\dvdvideosoftiehelpers" Successfully deleted: [Folder] "C:\Users\RONsen\appdata\locallow\boost_interprocess" Successfully deleted: [Folder] "C:\Program Files (x86)\astroburn toolbar" Successfully deleted: [Folder] "C:\Program Files (x86)\iminent" Successfully deleted: [Folder] "C:\Program Files (x86)\object" Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{004953BF-7322-4977-8DB7-CBBC5820738E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0084AA12-0264-4ECF-846C-10484A205C38} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{017D20EC-1223-40C1-8DC7-D2BFA0F43C08} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{018B31CE-944A-45EF-930D-B104F4C79895} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{01AAB396-F6C3-4D48-AE38-85CCD34AB1A5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{01EBD008-FB23-41CB-8D9C-7407DE283A1C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{020E2AC9-3809-48D0-8096-D960B8863F79} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{024FFD46-5017-4CC8-B73B-DC277F2EDD24} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{02ABCBF2-40FD-4399-9669-5C5D49C8229A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{03658D96-3461-4E4F-8AF1-6C1887E9B396} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{03701C88-FC4D-4986-A065-4482F8F4BC15} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{03DF96D1-2E8C-4CF1-B0B2-38E67B7C0301} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{03FFF424-1DB8-491A-8FF3-15C5BB0CCFF0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{04584327-1F34-4BE1-A87D-AB63F43F7478} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{04E3A983-206E-4137-A87E-24AEC5B3373F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{05593608-2D76-497B-9427-F71828DE51EF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0590E28B-C390-43F4-80A7-46A6A13FD3F7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{06255A17-4CB7-4EC9-9831-D21AE0FCA0D7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{06A97881-864F-40E5-8A40-858096BF849C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{06B89027-8C4D-44C5-8E68-ED2455A5D6FE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{06C83B7F-3F1B-4295-B763-600DFA55E940} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{06F24969-2461-4EBD-8C3A-168C646A4DCC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{073A324F-2D71-4784-8EA1-B113E4D8EF0E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{075DAFDD-311F-46FA-812E-C4C175D679CA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{080D1EB4-94E6-4774-A2B5-8470D7F919C0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{08389CEA-0E79-4E54-B24F-E207FA0ADF52} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{087EA9FD-BACA-42F7-AE17-672487CA140D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{08DD9351-01EF-4338-A76F-C27DAF3DA086} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0902E279-5B24-4704-AD6B-F5FD95AAF394} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{09241574-5231-48C0-9E79-A00F0829A92F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{094B5189-5A71-4608-B1C9-0CDA8B81A456} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{09D480E8-2B0A-4297-BBB2-147DB05EBEAA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{09E00332-1941-41A5-BAFD-1480ACB166D7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0B2711F6-BD22-4355-8E07-9FF981C32297} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0B659D83-DD48-4784-BEE1-3AEA0F05DA33} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0B93A817-CCA7-4A99-BEA6-5F7D115B5387} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0BBC22F8-FD63-4593-9102-A214EA45611C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0C937DB7-CD37-461D-90FD-8ADF40A8D47F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0D4377CB-A318-4A70-A9B9-F4B1002F3172} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0E269ECC-9C16-43BA-BFAE-156E23FBF4A5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0E36FEF9-6238-4E05-9910-47102B9D9652} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0F26C120-C69D-4D23-9622-D31E9F5499ED} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0F7066AE-A8F2-4258-B462-E6088A5C0BFB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0FA6EA5D-E941-4810-8B30-408087018B01} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0FA72846-5F16-4685-851B-FFE909D775D6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{108E46DF-7E87-44D0-83BB-E76F38326FCC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{10BE17AA-4360-41F2-8D20-B0F51311E774} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{10DF308C-55E0-4A10-B838-094DC52FC61F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{11C4B762-83CA-40B5-96FD-AB38742D7BB8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{11DED390-BBB2-4299-ADD1-C9679044B8C2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{123EEF80-5325-4AEB-8A94-1C62E7DC7CDB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{13F7AB2E-2FFA-43D5-86EC-BD48510FE00F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{142CBD56-86CB-4095-926A-F38D32B048AE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{143FD964-29B2-4ABC-8745-B5326A7B574F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1444AFE1-AE7D-4F3E-9633-F18A83D03A45} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1445CB79-8FDD-4137-AFF4-80B58E755FC6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{144A970B-3906-4DE0-9B79-21F480479A98} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{14E98FC3-C017-429E-9B72-0463DB8A8653} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{14FD27C6-DB61-4C83-843E-31D156874A67} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{15087911-55FF-4547-B64D-B33B52A64F02} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{152F2685-7F5A-4F33-A066-48DF60BA0554} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1569F095-EADC-4866-88B2-6AA0E7BB12CC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{15A4BA9A-E393-477D-89E7-1FCA3B1B3705} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{15AA7FE4-7AAB-43E7-BB96-832A2EB6ADA8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{15D16045-147B-489A-9575-654180E224C6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{16AC10DD-462E-4AB4-9989-38D247A98C30} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{17457AC1-4099-452F-B4F4-DF2205B5A118} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{17C52FC1-BE02-49B4-8FC4-8199A75CB201} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{180EC5BA-9383-433C-921C-CD80C2732B14} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{18BA208E-9E35-43D9-8127-94CBBCB7C65F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{19653881-1D52-43A5-8CD3-AC166435610F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1966ADD8-BA53-4037-8115-F0E438821D7B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1997EC25-2864-4ABB-9E30-F4497451D6B2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{19A41600-018E-4582-996C-B893E76BE484} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{19ADB159-6467-41E0-8B72-CACC2C7AD037} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{19EAA9F4-4CB2-467E-B7DC-EC825869FE19} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1A474A62-0C15-42FA-B5D8-73A2981FEDA2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1A61067F-5537-47EA-B0B4-6EE4A7505DB5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1A7B567C-EBB6-4C6E-A8D1-9B1674A9538F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1ABFD536-C02F-4075-9215-A046D437A7FF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1AED6A80-CEF2-4FD9-B2EB-31F112FB3B43} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1B5FFC20-CB57-4A6A-B02B-BFBCD8E4400C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1BBA385C-3C41-4440-B421-9936E6243BA7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1C4DBFB8-5AC2-4E62-B862-AC398FE7CBE7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1D402E63-71E4-4A9B-8680-2BE170D4139D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1E1CCCE3-AB90-4054-A864-FCDD34764DAB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1ED1B396-2D6A-4C41-A8C1-BC42A8837D7E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1EE2106D-2946-441D-AEAD-1A23FC8612E4} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1EEBF795-E4B7-4F43-843D-3E915CA58DF3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1F70667E-1AB8-4269-8250-87977A9A8F58} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1FAC7FB6-8BE9-434F-9CED-D840337ECCBE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1FB5F2BA-4BC1-4CC3-A0BC-93493DD719DD} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1FE8AA6E-E879-42DF-9533-A71F5636E611} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2042A74C-D8F2-4A4E-8A2B-D060B9828AF6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{20DD8964-8B8F-4515-B76A-6BD5215EE4CB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{20E43B2D-BEE0-4D9A-879F-EA634214013E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{21013284-6277-42C0-83B8-F651C3A697E8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{21362CBD-94EF-4FD9-9981-61F1238F9BC1} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2166DCAC-023A-4E2D-8E22-D49A6969C170} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{218E65BE-C15A-40A3-A608-71DD489FDE87} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2199939C-2CE3-4F97-B5F7-6080D1F6B037} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{21C6F973-E981-4DCB-9A59-8C39606FB5D5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{22991684-9A24-4B9A-AF9D-E2B7A66BC1BC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{23265114-F682-49DC-9704-83D05F2CD378} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{24B46921-25F7-47D9-B8F7-A23E98B41E56} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{25266F57-71C3-4196-A1B8-DA1D74A4E06B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2557C344-C3AB-42D3-86D6-2E6BA9FFEEB8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{26144000-2B6A-4E35-8001-4B889B7E596D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{26AB5833-F838-44E9-8EAE-E2FBDD4B8CDB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{273DAF9A-373D-4326-9B53-9B610DE461FF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{273EA9CE-FBC5-4FC4-AB70-56D5A2A6E1D6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{27DDE52B-03CB-420A-BB0C-C42E94590BBA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2923F56A-88CD-4A64-8D09-B652A50A6213} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2949BA58-78F3-408D-A8A9-917454CD20E3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{29BD7DDA-159B-4F48-8E8C-3D834E1E710B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{29D29BD9-4EB6-4B08-87B1-C0FAED1347B7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2A2A88F0-6E24-4675-9A07-368A92AE1E89} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2A9AB376-212F-4F48-B611-A610A7D10972} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2AA23122-480A-481D-8D95-AA123DAEBA33} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2ADF9844-A479-4C10-BA9E-10E232EE5AE6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2B757088-7F72-4FF3-AFF2-34D59D8AA688} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2C1AA3CA-8795-43AE-9A9D-E85BB9DC4B1D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2C1D8433-4268-4149-AC82-4412BFCD0259} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2C6EA7DC-7C71-4637-BE21-A31961183D90} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2CBD1365-2356-4DC4-889F-CFFD2BDAA255} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2CE992AF-728C-402E-9855-B6A0E7DBEDA5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2D2DCDA3-A4BA-4B13-8D6F-472021F99A4F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2D8EB04C-3588-410F-958F-304AE3BE42C3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2DEC8BCD-0741-4367-9013-386EA28B163E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2E2DE817-1300-4616-AF06-54A121DD34AD} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2ECCE334-BE2A-4451-83BC-E82C705ADB0E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2EE4D98B-CE49-4C60-B68F-845D6AEB6217} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2EF5FD25-40B0-4891-96E0-12C31F4888A4} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2F0111C3-2C70-441E-8132-E69CD21AE59C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2F6D2149-B701-48A7-8F08-B3605BC93F68} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2F93A081-8A4E-4E3F-86E1-A203307A087F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{300F79A0-5760-4FA6-99FC-170112EC6947} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{302102EE-9BDC-4ECD-9DFC-3349E6213121} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3053FC52-66FA-4697-AA2A-2DD1C982141B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{307809D6-26A0-4F53-8E82-95DBB8D22666} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{308E69C9-41D0-4AB1-9E5A-FBB97DB40A3F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{30AB48D0-BB25-455A-8274-B1E6F0435317} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{31F397D7-F2FF-45A4-99FE-D78C2B5A0E87} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{32337F3C-7360-44BF-A016-24C090B70087} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{32A6227D-DDFB-478C-BD9E-0686A5B394D8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{33413BF0-A0F9-4CEE-8D93-553EA0EC94FD} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3396742F-D52F-4289-9600-09D67C344F11} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{33A30358-6548-4B46-A339-818B4DE4187A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{33BED16F-5673-4C1C-B546-264EA389C124} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{33D5F300-9A09-4BCE-86C2-D158194F5D7A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{34389AA4-32D7-4CA9-BFA5-E9622DB5851A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{34672AB6-0E55-47C5-A45C-EDAF0509BE31} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3518899B-DD5D-43B6-AA74-9800CCE64484} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{352F9390-BA26-4550-A8B2-B7BC8ED62753} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{35549A47-96B9-4863-8952-CC029E55812A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{35F0F1CD-6815-46A1-8268-FFC57E755E8C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3617EDCA-C24F-42CA-A8CC-00CB417B9D31} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{371890D8-0E69-498D-AFB4-F805A02DC00D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3743A61E-55A2-4D8E-B236-200A07897EAD} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{37AAC2C6-102A-488D-B0C1-15D5A5A7CBCF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{38D5F675-C9FC-485E-8C83-EC24857EB2BF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{38E26FFD-0DDF-4393-8F05-4FA12086296D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3904660D-25DF-46EF-8778-B7F8216BC7AC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{393BD830-A4FC-4CE3-BADF-C44BFE6C731A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3963F5A0-8F08-4A44-A8B0-FCBBFCD7A2D5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{39EEB468-5C20-4FE2-A0BD-A5652F7F8F57} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3A14351F-3F2F-45A6-A767-4AD6B6BFE604} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3A91DED0-4EFF-49DC-918B-8BD88A862CCF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3AA81246-8BD4-41A6-A557-3CEA268D978E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3ADF3DF5-7E52-4629-81D1-8A07251ABFDC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3B648213-3622-4E6C-A45A-70C73AD9ABF3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3B6B4C43-97CF-4D87-930A-14E15376E24A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3BBD49B7-CCB1-416E-8CE8-84664784FB9F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3CE7287C-A0D3-43AD-A2C7-E7668AA08490} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3D8554E4-B5BE-41CD-925C-4A07ECB4B89F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3DF7AB0C-F4C0-4550-B96E-17D4C517F406} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3E63389D-F2B3-4C01-96D5-A6A063A6D72B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3EF6FE3F-96D6-49AC-93AD-3BC8DE1430C0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3F0A4EE2-356F-40BE-B559-33DD1114CEDA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3F1B03A0-5944-40CE-8C74-A076829CB742} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3F3F4C69-A188-4CD6-90F4-2E91DC47802D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3F6416F0-9903-4592-858D-58EE72F53ECE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3F80D600-E400-4065-BA50-0BF28045FD11} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3FB4EC8B-5A46-4DB9-A348-8299F0351420} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{40ED4433-600E-4781-90BC-9ADA64D3B5F1} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{40F8BFEB-6500-4E11-8E1B-704C300ED518} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{410E4909-0D60-4A38-BF9C-3B97F0633CD7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{41BBF949-FC86-4BA2-92EC-D5DA62CD9D53} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{425C9F17-E79E-4B3D-8993-930DE12E074B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{426B8149-A2BC-44FB-9963-3D485E13E354} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{429046D6-A692-4A9A-B748-979C59615632} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{431EB91E-BD90-4DA8-B507-FC9438283B7A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4347E6F0-4D8E-4D2D-9327-23E95DAD842A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{43C6C8D7-7890-4227-9B18-33B599C78BA1} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4419FCE6-E8BE-4C3C-BC92-1DC7FF0C90C8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{448B2D04-638B-423B-853D-C7241D5B43E6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{448B8C33-B763-4116-AAC9-3857597EAB0C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{449BA7F9-57C5-4CEA-BD63-E42C464276DA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{44F52045-842B-4EBD-8F6A-72C3DA8D7BDC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{44FE3B93-2E88-45C4-AB9F-9A59172C37E2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{450A56E6-14E3-4FB2-82FE-5C63C5C49D37} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4514E89E-851E-4B36-9F0F-BFB16999C555} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{454F742C-5EFF-4DDF-BAF6-C7D53AAA7EDE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{45A3BBBB-892E-47F7-893C-06991242DA32} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{45D2D570-57E3-469F-BAC9-6794A6B33D9A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{465BBBFF-0AB5-425A-8A66-D04EFDDCF5BA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{46AC66F1-C7AC-4D40-A94F-900E693B44B7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{46AFD0F3-8D9D-410D-83CB-F9092F994A16} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{46FB2035-7B2D-4D2F-B7E8-18840FBB1A3B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{47479473-945A-4B8E-9F34-D321A6D0C1D1} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{479F3188-7BD7-4CBC-9EE3-79D3B0229CAB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{47C44F01-157D-4692-9F4C-098D539F5757} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{48052AB5-67DD-4183-9BF3-2D5C7AA43BCB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{484D8D27-C979-4EF8-8F6C-2C9C0578D385} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{484DB158-251B-4FF3-87F4-B5DFF560D5AA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{48BF14E6-15CD-4BA6-933B-ABC231D4F3C3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{48E29D7D-BE33-4DC7-B62D-5F214B842CBC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4A029217-7862-4D47-8CE7-4ED7D4A3DE95} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4A0AAD2A-6FF6-47C2-B040-30A23AC4A5DB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4B8ED9CA-04BB-4EBD-9A3F-59CB98FD79C2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4C67CFDF-31F4-4119-91ED-9956C0D4165D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4C718F1F-3077-4D27-B1EF-7BBFCC302089} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4D307F45-9C6B-46BC-B7EB-480D7C5638AE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4D5D6C39-6A61-40B7-B988-64A187C115D8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4D96396A-C567-4696-8295-B7972BFF6ED5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4D97BE15-2197-4155-84C5-08A9C25C3F89} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4E384E9A-B0F4-4210-B7AB-6D9FDB1D9822} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4E621C8C-AA91-44B5-9DE8-0F0E84D76BFF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4EA0FA26-3625-4E1E-940A-205BFD970D94} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4EFBD574-C656-41CF-A50F-D5C20EDB1705} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4F3A8030-0BEC-4BC1-99E9-B188588ECFF0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4F43C68E-B0CA-4A4D-BD6E-F4EE2C28F0D6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4FB276D1-1A62-4F94-A32A-30BF0D4E44EA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4FE16B78-54E9-4442-8CCE-37FEF9CB57FE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4FF7389F-A09E-4A2D-9A66-A92AC49117AC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{503FBF75-EFF8-4A97-B892-219F651B6BDC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{50B9823F-B1B1-41F0-B41A-2D2015453472} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{50F9D1E2-1834-4455-B161-1AA5F055A3B3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{512DAB0F-8111-48E2-9E6D-828BE93A834B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{51425EB7-733A-41E0-B4E5-5F47E85A703D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{522BBEA3-AF00-445F-9046-3825955C0FB9} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{52A3EF7B-8B35-4769-A9A0-B3B1138FD99C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{52B0873C-215B-40E0-AFF3-ED3363A7A72B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{53501BD1-2575-4885-B1B0-45EC11148F74} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{53BDDB82-13A4-4719-8D52-C426CB98A26F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{540C49ED-47BD-49D8-8A14-DCD78E8CC8D4} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5417840F-9BA6-4906-A133-354B0737DA06} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{54420705-5065-4F80-89F0-A67064E94CDF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5555C91F-970B-4E76-B00C-74959AAFF4EC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{55728088-F8B1-4C24-AB4B-55516634B5AD} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{55A29D3C-93E8-414B-9894-FEC77630C1D1} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{563084FC-FB15-4D9A-9912-DE42C5E17B0A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{56A7596F-5F66-4F60-B9EB-3A20FE21E763} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{56B69ED7-8F23-4C89-86BA-476F4655D501} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{57380314-757E-4258-8651-502A86F83D80} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{573D6023-CE07-403E-9779-1995F39F6CD2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{574F325D-8B43-4411-A25B-736EFDEA9814} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{578B02E7-CA51-4A9F-BF9F-8DC248D9243F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{57BE2A04-E4EE-4FEA-AC90-FF56F0BEA5E8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{58FFAA34-09DC-4F24-8BA4-3492A3113E28} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{59B0F514-F333-4533-96FD-653963718C0A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5A0BE9FC-BE44-4D6C-8D93-505E83171E7B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5A4977E3-37A1-47E0-931A-BA5C35982565} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5A570506-3B05-45E3-BF63-A84838FE2240} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5A5E76B4-CCA4-4EF9-8C6F-A4E3EE1C1765} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5A824727-BAFA-478D-9CE7-4015AF6ADF5B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5AA7E251-A7BA-4BFF-8466-C9830AAC6ECE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5B231B98-EAA4-424D-A50F-5A8E4CCE656B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5B330E25-0FBE-4446-A01F-3E338C963EC1} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5B704656-E2D6-4290-B40E-B3C5E04AD434} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5B7092B1-9C50-4A1C-A8D2-3568B7A66D39} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5B7A2A23-D9FA-4045-9749-5639F690E624} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5BA9D150-9B70-40D6-AB0F-741B47BF6311} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5BB8477C-44EA-43DD-8A65-9A0DC208F6F3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5BC90F0E-CB54-4ED9-BB08-527658D9ACE9} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5BE73E1D-36BB-4A4A-95A8-1F26A3D0807B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5BEA4D06-F527-45E5-BF00-6BCFC01C2854} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5BF06980-8529-4019-AF78-749DC33EECD0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5C1E2E58-7C34-470A-8771-4D05AA181AF3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5C1EF5D4-C164-45B4-A368-19B20E161770} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5C6A3D05-C05F-476D-BBD1-7BE0CCA678D3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5C6F4D15-12AB-4DD9-A499-91472CA734DF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5CB2C166-7786-4219-8FAF-16B2DC8482B7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5CEB6182-0D86-4B7B-A3A1-831F72FF75AE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5D335D66-1600-4C25-8242-933F42BCD2CE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5D58D3E0-233D-4F47-90D5-519F435D5A8C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5D751C33-85FC-4901-8DF9-D87E14B4160B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5E68D3E9-6D37-4528-B7C7-83176839A003} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5E9FD579-5781-440A-9382-87DB0D525F9A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5F9B1CC0-07E8-43C7-B820-670E35691486} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{603C7E4B-E4E6-4B70-8C17-E7C88660FB1D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{606E9D52-C310-47F9-844E-0C58668E3F6A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{60A2B13F-BC78-4D68-86C9-CD62D693F5A8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{60F8320B-6CBA-430C-88F0-07FAC185E885} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{61E46DE3-D904-4FF6-858F-6F76C4A02EFB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{61FEB00C-8143-4ACF-8A94-78F53713D44E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{622161A5-5AB0-4F54-9537-4F70666F2175} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{624BA809-D844-453F-9E0F-171AAA1EDB6A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{635A4B55-D3D6-436F-9E5C-07F8D2AAAF14} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6368FE43-2110-46EF-B0B6-11EA7CA15B96} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{63B2454C-DCC4-48ED-8A05-FC0383CFED33} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{63B6C2F8-6914-4376-BFCB-492F3ACE26E0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{63CCD3A2-EF02-4E69-B227-FFEE677E299F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{63F63C31-350F-4D31-B5CC-B2FB8F8E6AE7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{64A904CF-8E9F-438B-BC68-15B98FDD4424} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{64E1B130-3F8A-476B-BF44-CEA0B766A915} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{650A0AF7-660A-45CC-96FA-05B3B395721E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{653F3456-4FA8-4C6F-BA80-7947F366B019} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6540DAED-6CFF-476D-A06B-4729D5EE9316} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{654AEC31-4A7E-4B9F-962A-03F922422E91} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6552532E-A0C1-45B9-8DFE-26C7205A6CE9} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{65D5CCF2-C9E4-4720-9E7A-52A1DE34E741} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{65F6AA8E-E391-4D8A-B307-9C62B298201B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{669C75B9-AF12-4958-B030-D6A080453D30} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{66F51839-C34C-41B3-9AA0-4739AE20BC50} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6703A6DD-EA7F-4BC3-B116-DA2CDE40EACA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{676ACC81-4368-4BD8-B3F4-21A39CB83E69} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{679E570A-C9DD-464E-9841-75647A87F4C8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{67C05DEA-7AA3-4675-B643-3831D43F0BEA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{67FC7FED-B0BB-4B2F-A869-562F039675B5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{684E52FC-F854-4062-AB04-54C28FD4BCB0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{68889C9A-DAB9-45B8-B322-8612E8069AD8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{68A3FD32-A6B7-4F42-852F-68EECBD75EF4} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{68E57180-39E5-415B-90EE-3D0DAF96CCCB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6901E233-F290-47A1-A441-4B1C4892374D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{69049222-F91D-460D-A215-38E4EB8EC900} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6A06C385-920E-4B75-8E9D-D87CE4D24BDD} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6A37BA2A-8401-4A63-9F9B-EF07AA9DE7F0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6B8D4275-A09F-4072-BF3F-8F1A678524E0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6BB054E7-3C1F-47A1-9E50-149C16ABC849} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6C77CC22-7735-48EC-8A03-E3258831849D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6CD26937-2C4B-43AE-A280-F8D578909BF0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6DE699AD-586E-41A6-B70C-9F7F503DB018} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6E004200-9132-45B9-9F4F-58E96E395360} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6E4E529B-D94D-4317-A6D4-2BB56E1F45E2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6EC77ECA-25C9-4F0E-8FD9-35DE91B90F74} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6ED220A9-C54C-456A-A4B2-312EC7ED2A17} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6F16545A-6236-4E28-B053-D99E934B17DF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6F628D79-1AF5-4ECA-B764-ECFF6809AF34} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6FF61D0C-14E8-49B7-BEBA-07818A17B0E5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{702DF132-006E-41FA-9B83-DFED28C0DCF5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{70C8933A-CA78-4C23-B5B7-6A2577C17825} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{719FB745-2BCD-4FA1-8E4D-3EF115C2ABA1} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{71A7AB93-F91E-45FB-B350-2F3299421B51} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{71B5B25C-89FF-4CEA-906C-571C814A45C6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{71F2ADDD-8034-469A-98FF-F5D1EA34B2ED} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{72A742A1-5D0B-47E3-B9D8-ED7106F4D87A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{72D09D2A-8AA3-4573-B8E8-5470195CDF13} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{74568610-90E9-48DA-BE7D-B475A06A305E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{74AA7509-E645-49E8-9437-FC43697B9977} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{74DB0E5B-E3C4-4910-B298-7C1F7AFF7F40} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{74F1F9E8-BB7D-4C8B-9B5D-FB12874DC483} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{75181EA5-DB50-4E56-9DEB-7CF5A0DC34A8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7519C275-8191-4E2A-9315-C471F14734F7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{753A65C7-8E04-4EF2-990F-5F3BB6C8E297} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7552884B-24AD-41DD-996F-A21B23B5AAE9} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{75B807DB-37C2-4E1F-B4A2-0CCC69C46227} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{75E75908-CEAB-49E1-8B50-3A7BE02BC5F2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{762BC1EB-93E1-4912-A73E-AEB60502F5CF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{768179AA-B48B-4FA4-8630-9C750F665545} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{76BDB79E-B632-41C4-B745-A0A9E405CCDC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{77451B4F-B83A-408A-8400-7F0C012B537E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{777A2C2E-822B-48FE-834C-3DC32FD146E5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7831905E-683B-42D8-942D-1E480C9A36B2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{78504B08-5FDF-4FDE-9089-D51D7F452614} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{788EEE09-0B69-46AA-96C2-BCD79946F677} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{78A3A3B7-C170-48EB-B306-63AB43FDCFCE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{78A5F45D-43AA-4D76-B81B-C2D1DF2F15E5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{78A6B7F8-C8ED-4B4D-BA55-53AF3FC670BA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{78B78426-ADAD-476C-877B-C537630C80FE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{79696E1D-751A-4483-B14E-0D4CA03C3112} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{79B36095-A05D-4B18-95DD-273DA8EF3386} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7A5D3F6B-2881-4522-9376-1222B3A0EC1A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7AACC582-0CB6-4E39-A2E2-7345A89A6D39} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7B140388-EFA9-4222-B228-F466752E4889} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7B229509-5C56-48AA-9ABF-6E3B410D96CE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7B6DA710-DB78-4737-AF7D-993C76DAFCD2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7BFC7CB7-45F6-4108-904C-E03320EF428D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7C11AD55-B24D-4F39-86BB-39346B1AA612} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7C36D254-9895-4BE6-AC29-1360DC55D09D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7C958551-C4B1-41FA-BB96-6BA5AEA6ED9F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7D9B35B1-0100-4F21-98EE-D955001729B7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7E03E16C-3DA0-419B-85BB-2687CED4968F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7E364E27-1907-44E8-8DAD-212054C83C07} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7E7A530E-868B-4947-871C-937CFE3F9044} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7E9D93A6-B0B2-4380-A5CE-BD27268AF94F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7EAE56EA-DF21-4404-BCB0-CD155460A2B5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7FB6CFE5-DB5F-4A4B-A70F-1778D86151BE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8034179A-D812-44E5-90EB-FAF5B5D9D5E7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{80447BF5-A740-4F80-A79E-736EA1370BB3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{80A24A3D-241B-4619-92DF-3E0A4893E6A0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{81011676-5AA7-428C-9627-C8DD43F4E54E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{81845E2E-C8F5-469B-869A-7ED18BDFB86F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{81942923-FE74-497C-B0F4-2A319986E6B1} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{81BD58A9-C851-4489-AED2-6690B4211951} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{81F9EFF4-E251-4EDF-9B6E-25C20DB42A49} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{82081B8B-C18C-4C16-9BAA-C32B1B9C21FE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{82990278-43AD-4946-95C3-0726358D601A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{82B71B54-6B56-4DAF-BDC5-85FB79CFE351} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{836B1047-FA44-4630-89F1-8C505EADB4BE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{83ACFC54-F97D-4420-8E12-51F1791F0DBA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{83ADD1DB-A8FE-4C07-B42F-185E246ED774} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{83D91036-D2DF-4F98-9E8E-4EDB0C670327} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{843F7F57-4914-4F43-A95A-E9AAED9B8FB2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{85032D56-56C6-455A-A6B0-870FEC2B9BFA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{86002285-2406-486D-B7AD-F24875453A97} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{860FCBFD-C5C2-4999-BF9E-D21E5D60D5B3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8656C052-4FDB-4F29-B497-A28F4081C437} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{871DD385-1A5D-46E5-A846-6BCD03FD6E04} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{87CB2627-D8EC-4ADB-82DA-63A17C02533D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{88E1F9A2-81C4-465F-AC41-30A9AE6630E5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{89317FFF-118D-4557-BA4A-AE3DA3D4A3B6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8A06B32C-14C9-4048-82E7-39CE2C80A6B2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8A38F259-695D-4A02-B403-6E8BBB6E2ACE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8A9BB33D-3E3D-4857-8F97-9BD293DF8B7D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8AC70885-D5EA-4D46-812E-B9887716C851} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8B1FCEA4-B519-4875-A9D2-50987BB8E79B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8B480A29-5811-472B-92A1-90C20D11C2B0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8B7B7F2B-7E74-48F6-AD58-CC7597648C74} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8BC8DDB2-828A-4F31-8538-AF5A0FDFCABA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8BCBD1F2-C364-4A3A-9363-AA907E9D82B9} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8BDEA533-CDC1-4949-B0E1-E30078D49840} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8C5C22C0-AF60-4515-943B-7B794B6221F8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8CB292E6-DBC1-4AEF-B928-AF68380FF71D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8D39F7F4-6D03-4043-9EA8-8A03930DEEFB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8DC2E8C5-AA6D-4ADC-BDB1-E3239D40D0D9} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8DC4B4C2-70D6-4F3A-AAC0-5F31B3253812} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8DE8AE39-AAC9-413C-A39C-7EE84BB119B3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8E4CC9D3-2232-4375-AC26-A210F5DE20BE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8EE9FE50-22FF-4CD8-BF24-89C1E5934B63} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8EF13789-D4A5-4340-96BF-3586B34F3E0D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8FB2DDAE-E163-41DF-ADA0-419E0AECCE3C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{902AA100-F9A3-45BF-8280-8D2ACF3314FB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{91E97676-05BB-4197-A7F4-47EE40124740} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{922D8EAC-3D6D-4035-B050-CEC7DCB096E7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{922E96F7-14BE-4734-AB21-082A8538FC36} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{92350A74-FE2A-485A-AE55-413E7E8F2417} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{924FB264-F1B1-4199-BF69-D7C2C65B26B8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{92C27D3C-110B-47DA-820C-645397CDF8AF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{92C91001-958F-456F-AE71-282A1958B7AF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{92FB041D-57DD-480C-AC8B-7C9807C2B7BA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{93093305-D1C5-42CA-BFB4-ADAA30F57225} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{93508F1D-E9CA-4720-9534-FCDA79891BBB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{93D32E22-2AD8-4C93-A278-C481F209EFDD} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{93D67150-0688-46E8-B126-5A472F48DE82} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{93EE428A-19E7-46D5-8A21-61D1F390C7C8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{93F8F2F6-B6E2-4BDE-933B-8F828C7D235F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{940A58A5-F197-49CD-A852-B4A58D9B3096} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9499A692-8001-4AA6-BDDE-C9D4ED114FEF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9526C7E1-ED9D-47A0-AB60-73FC088E0946} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{953B3351-282B-4352-955D-E6A2F7CA56B9} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{958D3E36-F42C-4313-BD60-927CF368EC5F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{96010CE4-3D68-44B4-BB70-61EF579BF3E4} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{966DAD6E-F4E0-4A25-BC95-FAF6E8EC3D14} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{96B64168-6D5C-4A5B-B8D1-D89B0E24DC43} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{96CFADAD-C558-47C1-958F-595005448F4F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{96D4B618-676D-4108-9D0A-6431C315846B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{97148E7C-4DA3-4821-9584-614DC2EF5CB9} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{975ED215-2CD2-4EB7-AC49-0B0E7287D1C2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{97A5C481-D659-4A14-83DF-B247684ABD43} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{97A66E6F-EE19-47D9-8C2B-A4CEF53B0FDA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{97BCE8CF-BE15-4375-94C0-B3742451E972} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{97D9C281-2BC0-4B7C-918F-5C70CF3E3AD0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{97F37940-47D1-468C-B35E-4256642D9342} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{97F4A649-9B0E-4BCC-AB88-9E92F2E6921E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{989CD2A6-FEAB-40E7-96C4-ABD8D12D76BB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{98AF67FE-BA12-4488-B7E5-9FDB734F1CB8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{98DA54E0-D0A0-4BC6-B562-9FA2D6C7B224} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{99236309-BA7B-4751-BB9B-9DE4AC3D9E0B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{99393F42-F369-4050-8F2A-A6FA8DA19763} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9979FE32-1E57-4183-A815-805D34FCB4D7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9999B9C8-BCBC-4612-A475-215AE459B5BB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{99F3A8F9-8B8A-45CD-8EB2-9044F235071E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9A385AE7-BC2A-4B19-B022-F5E1C16BB6D2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9A748EB4-2AC8-454C-B6AF-2E15B5167222} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9B59A01F-7FE5-4CB8-9826-8D2A0AEA1319} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9C1A7A83-B8D0-4C4F-A747-38F6A1360983} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9CA25BC7-FCEC-4B20-9079-E6ED52F35DAF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9CB3C5D1-BBF8-4E26-A4EB-C0A34E44FC22} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9CF9B41F-099B-4617-A2FC-C0B4A81FB29E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9CFC8BDC-9683-4E34-B73F-FB8D63649B8A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9D17ABBC-4791-48BD-B76D-8CD5FCFBFE1E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9D350AAC-CD2B-49A9-B5D4-FFFA399429F5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9DE86CE1-2516-4B19-9E6E-49F351685929} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9F3EA08D-0805-4DC3-828F-C37CE09A0A09} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9F493692-86D5-4916-AD14-0FDE81ECD517} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A0523B3F-BFF6-4A0C-8323-C04F142B3F0F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A09F4BE1-E667-4EF4-ACEE-E153B667184E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A0EAB2BD-573B-4289-9BB7-E4AD9429BAE5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A1751387-3E25-43D9-A332-0D91AE52D60E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A1EAACEF-597A-4A4A-A648-7DC82AB32C25} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A2CAC831-E10A-4B39-8054-F32E57EF66B7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A2D6881A-5467-4538-8CE4-EEFE1317DDF6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A2D7A12E-911A-4F56-B34B-6CC0872AC982} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A2E8B350-ECE4-48DD-98E3-35E448B7A0A6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A2ED0F71-09C7-4702-B96D-E085893173E2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A363B4A2-DEFC-44B1-BE99-2E74B89CA852} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A39609FC-D51B-4E04-BAE9-D5F5F3AA24ED} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A3DDEDD6-9572-4BA1-AD75-AA7374A1FC77} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A3E3819F-D104-4A8F-96C3-6E98B3B5726B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A3F0A010-5D08-4E67-9D4A-97DE70951D62} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A40E316D-0098-4780-B276-65FC3C31B37A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A4FF15A2-04EB-49C5-A65F-B620EB2AD275} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A500CF02-C233-40A1-8FD2-BADE6B325F92} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A52EF246-49A5-4138-875D-F84EAD7B8BC9} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A557CB54-BD22-4ED3-9CE9-DE5313611103} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A55F7919-4418-43D5-90D5-BDA8658B0089} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A58542B4-2661-4839-89AF-3C0E0B9B0F0E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A5A054AA-6B3B-4C23-9E6F-3ADD390045D3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A5E36184-B059-4BD6-8D9A-F7830DE91A3E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A676529F-2609-47E2-8E00-926529A29282} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A738D699-D3EA-4E4C-AB26-FD4F9A0DFE47} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A73F4270-B95E-46E4-985B-9F613E6DD2A7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A75204D2-BD2E-4F1D-BE34-75D2D21C91A9} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A76F176F-95BC-428D-B991-EFD5B0BADC46} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A786913D-D1E8-4F98-B260-6D59A29A1E96} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A7C80E4F-6A98-4286-A204-E818AC8271B1} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A7C9EE53-8B52-4A06-84E0-85595027D22B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A817AE51-4F2C-47BF-91AA-0F52F51A22C6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A82AD59B-B039-43EB-BA0E-A30EB7709115} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A82CA017-3CF3-4086-BE20-C9656D76D6F4} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A8CE7A50-6D4B-415C-A098-950FEA0EB83F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A8DEC139-B0F5-431A-8F7D-B300380AAF3E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A956D455-393F-438E-A7DC-1CFA9AA3E3B3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A9C12948-35B1-473F-B2EA-EB674A079ABA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A9D93CDD-DF74-4B24-B7C8-0D9D614455FE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AA17C727-6EFA-4FDC-81D0-3FC0D04F9F88} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AA213BB9-17EF-403C-8DDA-1359BDB3F26D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AA7A43B9-F4EE-4B17-BD47-48B31BA5F07A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AA7A8BAF-C961-4072-9318-0B1B455E51FF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AAC582DA-609B-4928-806E-6F00E2BF5E92} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AADFC1B3-43FA-495E-890D-8FC939C81374} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AB078729-F923-41C6-8613-2F22675F562C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AB20ABF1-BF19-49CC-851D-6835DAF73E05} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AB7B7514-7163-4AF7-BF40-5F9817F8C5D7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AB9E3D66-5797-44FA-9E41-D01E95D88F31} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AC17AECF-0E7E-4F47-8EB3-424CC29244D8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AC69278F-6FDF-4852-9C0C-600F584A0838} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ACDC2C72-2C82-47C7-B00E-FF9DE3106630} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AD01DFC2-557E-459D-9B56-0BD27D4143F3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ADC3C1D7-FF20-44DE-B3CB-6DF188CE5FDF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ADDD8135-87F6-4F5A-B6DA-8AC13A2E15E5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ADDDE647-9DBD-4B66-9E61-C512D323C7C3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AE196E6F-2019-422E-9222-69E8EFB34CEF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AE52A84B-1AA9-4E3D-A340-39F05CDB9186} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AE9FE668-DEF7-4FD5-A1E1-4EBE46486F55} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AEF49AE7-834C-4CA7-886A-470EE565969D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AF86BBC6-245E-4F9F-8CC9-BDFF6E7F535A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AF9A6F0F-2136-4E6A-909D-98B46F9B8446} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B06D38F3-CF23-432B-BEBF-843F9A1A44CB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B1D4E16F-46B4-4FCE-A05C-EABE1C979413} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B1F5A8FF-8297-4429-B7A1-2E660F9BC84D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B1F6D9D8-7679-4626-BBA4-56C44148A28D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B21A57BA-D467-4F5B-97D7-0A175BA3C54E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B2408FFF-0E99-4C56-B3A7-9F938185C1ED} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B28EFFA8-19AC-4F02-A31C-8EC79313AB66} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B2DF7775-02EE-489C-88C0-C8408AAA457E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B3BA8CD5-D641-4E25-AB64-84F275555D8A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B425EDB5-4C92-4D45-BF82-C85BFC0D6D7D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B6148FBF-192B-4335-9034-DD80DBCF4FC6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B648C935-6CA7-4A03-A7B9-622E629A909F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B6A30134-3B45-4F7D-B4C8-BA94306CE307} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B6A64E55-F2F3-4614-AAC2-E8D626064D53} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B6E0A03C-03EB-477C-8314-EDB38A8B8DB6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B6E2023B-FA9A-47D0-A718-7343C2192F96} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B73341DE-0236-46AC-A127-B5C5D07DC6BC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B73884E9-D300-41CD-904D-52D5C4B48684} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B73BC9C6-FFFE-4D59-99E3-F40F9B003AAE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B7414990-73C9-4C5E-880A-83B8E5F2DCF7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B746E003-3AA6-451A-93A0-D595ED55C910} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B81420DF-4721-4C0C-93A2-0B64B6D4FFA7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B90C43D5-FF6A-44F9-BEB3-B01FFD071B81} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B91C69BA-40D5-40DF-B8E3-E2ED3267A188} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B9913525-D5DD-4BA6-8CB3-8CDB61D8E8CB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B9C8FE31-561D-4433-B830-9EAD0846C7CA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B9E4231F-E492-49B3-8762-6C6910CCEA5A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BA6159FD-7841-4117-B158-AA008D2F7385} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BA8929F3-2C31-47C5-AB85-95BE514896AC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BAAD64A9-FC77-4AB0-9F19-A5DB22AC9E55} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BBA5D786-2190-4B0E-9CC5-2C59A6717FB5} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BC0745E9-5F99-482D-9588-CAA50D90EBD4} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BC23146D-123B-4A82-862A-CB9465CF95EE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BC9F3314-3EE3-4495-B28F-9D664AC1F5D1} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BD26738A-FC1D-4452-8D3F-9E9564228B56} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BD2E0034-1F26-4E72-B870-28C217E8403D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BD33C1F6-BA22-41E2-8554-6BAA4AB50D2D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BD700FD2-BDCA-4397-86FD-810251897250} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BE8830C4-6A0E-49A1-B410-C0F28B3CF123} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BEA89EA6-8310-4759-897C-D7C930FF12A0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BECF1329-A007-4728-A847-6792D1690916} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BEEF8418-4378-41E0-A823-13EFAA823C41} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BF9F72FC-7983-4D2E-9380-9F8D9366A896} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C05D80BD-4CD2-4D78-A947-C6312560CC4A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C0925E23-8C71-424F-BBE6-7F17AFD01DD7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C0A3B434-3A76-49B6-BCF1-6B3A4847849F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C190747E-4438-49C3-AA31-24CC1CEBCA41} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C1B62229-3580-41D2-8DF4-D994F0317DF2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C1D5A5FB-44A6-47F2-AF94-9E907DB1C01D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C1EA9872-AD19-4E4F-903D-148636FE241D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C21211CE-2171-44C0-9E94-B07181D6B90F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C22594AC-FA12-4E28-A4BF-E3E43AD65C2C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C29B2874-D766-4414-A0C9-EEFAFA3D36B1} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C30BD27C-D574-47BF-B0EB-E2BE4357C3E6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C34EBB1A-7E32-492C-9503-BF2CA0A6A907} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C49E7F0B-33AC-4629-89F7-BA917D834EDD} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C4D5FA7C-FD90-4537-AD0C-3FCD63A6EDF1} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C519094E-5DF3-47D8-8D02-9B713D8AE6FD} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C541374E-B1C2-4686-9D7F-E15CBFEDE207} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C551E2E5-37AD-4AAB-A00E-AF97F530605E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C63834A0-C9AA-43A9-BFFD-74C9E6527AF4} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C653148C-0E9B-4ABE-8D45-B299BE4EDFAC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C6CDBC1D-011A-42A9-91EA-D72329307A5D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C72AA314-61A8-42A3-97EC-5A3BC79342D9} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C74B96DE-B7B3-4FBF-AF19-77F75085C6A8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C7ACB997-B52A-481C-A2EF-30E20C5C4ACD} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C7B53A1E-A72B-4BEE-85F0-0609BAA138B8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C800939E-5C84-429C-8AA6-E1272333F74C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C8EFADE1-A543-4B4B-BCD9-1E446FC47B2D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C927937B-0679-4C35-9469-723139D81310} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C99B076D-3F67-41E3-8F49-DF7776C02A0E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C9A493AB-0439-47EB-B63E-82456DD06EAB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CAF24976-1BE7-44A3-8C41-955970B86B7D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CB18C83E-4057-412A-8E9B-193C37543A3D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CB306B39-E133-49DA-83F1-4292044FF83B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CC200A71-132C-4736-8AB3-57D5BC41D104} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CD737318-E4F3-4CA3-8425-4E825B7AE227} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CD7511E4-2156-4566-942D-1E6441C74C52} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CE21DD86-B8A8-46F3-A3F8-82FE81AB588D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CE86AC33-F835-4FAD-9D7F-FB3B64535FA6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CE8B6677-A313-4BDF-8644-9B050A55FC6E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CEC798BC-38DD-4A2A-A583-521BC2936131} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CF67A585-D53D-4A02-B7C5-90774AD38F25} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CF9840BA-1C33-418B-8DE5-D7DA32ECE561} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CFB91CA7-C12A-4088-A360-02AFB45F67F8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D02094E4-B5A4-49D7-9E33-78834B7D4276} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D028262C-8F88-4683-BB17-935880A542C7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D03FC334-7ACA-4BB0-BD78-6E33453DAA52} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D0A72BE7-88FF-4DA8-BDE8-E25A31581733} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D11156AF-1451-42E3-86E7-B44A4D36A3C2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D1374783-E8DB-4282-B46F-4916B1ED7D72} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D1CCA893-2467-47E0-9588-5BA8FE0ED20F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D2EB1D25-3909-4B7D-8E21-31626544E07F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D30A3C05-4D64-454E-B055-8B75DB6EF631} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D312346C-2608-431E-A9DF-DFDD02C6DA77} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D354B9D3-3F2C-4E81-888E-2BE24C46E81F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D364EF0E-93A4-4A28-87C3-34FEE8185C58} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D418C0ED-B3E4-49A6-A8F3-7846C1AC19B2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D47995F9-9E5D-4530-A70A-66F406787F82} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D504C510-615F-4625-B640-004D5CCE091E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D53BD33F-D214-4B02-87BF-024BFC903825} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D60222BC-9674-4BD5-A37A-EBD3C28B2382} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D67115A5-DE40-4B11-9108-4D624D5776D7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D6B7E824-EC13-414C-A0C7-2D81A22932AE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D7A8567C-EA46-44C6-887B-4BCA5AC99863} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D7CAE3B4-3036-4495-A004-A9D5A6B2CD88} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D7F3ED17-D726-4D75-920A-1F59DD687C7D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D8B4DFAA-BAC2-460D-B16E-BE0E193037C6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D8E791B7-E7B1-4287-83D2-079C1E86F8DA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D960F0ED-AD0D-491B-AE37-7F8CFCA9251F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D96D1233-4FC4-441F-895C-5EDDE63223BD} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DA6B49C8-C5BC-42FB-911F-9BE6CA298A92} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DA9AB34B-58FA-41A2-AB36-29ED92A2FF87} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DA9E17B8-B138-4234-B5C3-8E7620A39DF1} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DB1C285D-BBEA-448F-9557-52525C3DA687} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DB2D365D-72AB-4A18-8924-D1E2BF1C40EE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DC7313AB-EB12-4DC4-AD90-87B77710517E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DCCA0F23-E21F-4ADA-AC12-47A65053C9C0} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DCF3F19F-04D2-48F8-801C-A7F45E6C1626} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DD716F14-CBFC-4562-996E-089D7B3666C8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DD877D2F-793E-4CF9-AD61-C52A35C5A19F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DDBED2DF-692E-48D8-833D-C374238C8D75} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DE059DC7-5041-4619-A975-EF6B34AADE45} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DF5BE3F9-CFC6-4641-8859-F1CE5B545FDE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DFBE29A7-4791-4E9A-BB93-6759D399801A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DFBFE0D4-3E23-42E8-9211-0CAA607C703C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E018A0A4-F548-4ECA-A9D6-89DBC24142A2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E124FA11-BF87-4D67-9A95-51F5975C340A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E159E9EA-8874-46C1-8930-CB16DBB80BFA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E15E323A-C210-4BC7-9D06-2FB09CC6F3BC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E18A0E21-DEC0-48DF-97A2-BDA8919A3E18} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E1F77A92-6D42-4C26-A652-2E460C38C93C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E2202B91-D82F-49EE-B464-AB35EFC93DDD} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E22F37D4-B586-40EE-9C53-94B3694BD04F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E25AA408-6517-496D-97D1-892DCD756DF2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E29D4942-9977-4A4F-9864-A9DBB31AF442} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E2D317DC-CE8A-46C3-A8DE-67D7AE9C8CB8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E3A7D74B-7030-48C6-B192-62E551B7D131} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E3B43809-65B3-4C3D-B8F3-28FF6CB8A03F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E3EEAAC5-4344-4FCE-BB67-5FE5836DDCA8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E471D2C9-EBF9-43D0-BD81-0C269A52CF69} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E58B1F63-4867-4D4D-8E2A-1C5E816E9F6D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E5B67732-E7D5-4175-8A85-B0003794EA80} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E6CD753C-8AF0-4553-8A75-FD60C92C0F9F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E6FE0911-F08B-4F2C-A0B3-970E6AB952D8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E71A1A07-BF09-476F-8664-4E59B68741A6} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E7DB87C4-13BF-447A-A425-3C23E8EF52C9} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E83FDDAB-5C5E-4D4E-A480-73F528F040AF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E840F97E-15A5-4B00-B3A1-055F3A1A8862} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E874A3C6-6269-48AF-8BE2-F4C64F45F9E9} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E897A685-FDF8-4821-952B-BE2C6D9C8C81} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E9171442-6BFF-4328-BF88-303604B5CD89} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E92296D2-41BB-40CB-BD6D-B05280AD508F} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E96A5A53-0093-43B3-9C90-8544DB830702} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E9ECEBBE-2CE6-40E4-A039-03F72DE9E25E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EA2746B1-9783-416D-B1EB-00444E4A4D3D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EA9FF48A-FB92-4B62-82A8-77E4D5DAE006} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EAC16186-D340-429A-B027-7943F28F7686} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EB0EC4B5-7F5D-4A2D-9F42-5417A0C13A0C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EB1DD25A-B858-4C25-985A-A0E68D01958E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EBA11941-C719-4898-AC44-D0A56360C770} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ECA55507-4D07-4CC0-977A-69ADD59981F9} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ED0ECB05-BE84-46A7-A77A-C517A32DA982} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ED15CAFF-6740-4D49-B54E-91EB49A752DF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ED3F2151-C00B-4647-963C-43AFE46A81D2} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ED5AFA37-DD8F-4C4C-BCE9-DFE330265495} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EDD78C99-2DFC-4BA0-BAB1-BDD8EFFC310B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EDD82B5D-B6F1-47E1-BDE4-26A77DEE916A} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EDDEAC86-9823-40BB-B4B7-A48078367E80} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EE47E8E0-7E51-4D4D-AC53-32C5FA3C83EB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EE739F8F-F919-49F8-9D5B-657A66BD7191} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EE88836C-7DC7-4E4B-81FF-95A3BBF0D731} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EE942974-D939-4336-87AA-35A78B07C0E3} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EED670DB-8C76-4D4B-BCED-0B277831FDFC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F012EBB8-E743-4E70-BB10-76C04528DC40} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F0219C15-5382-4326-A6CB-9404DD5DB8EA} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F109A7B7-3D7A-4FE4-9E95-A55D12792C5B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F1220105-38C9-4A11-973E-FA57735C07B8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F14F4D2B-2EF5-481B-9D47-A4E737F33CFE} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F179F1F0-BDF2-478A-8B50-260BDFDB2E45} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F19670CA-85C7-4223-88E4-9DBBBCAB1AEC} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F1A76079-FF62-429A-BB20-8E2DA5339750} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F1D5A83F-27E1-4079-BE31-9A68097D5857} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F311A9AD-0586-419F-8114-D5F4BC5050BB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F345FCE2-92E7-4B2A-945E-4148C37694BB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F3E7FEC7-10CA-452B-82B3-969576FA05DF} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F559570F-15B1-4CEC-8F09-37EA1EE6D50B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F59216BF-DCDF-4150-8E05-CEF8AA41E59D} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F5AAF0C0-702E-4A27-981C-8FDD1A3EC0DB} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F5C0D45B-D2E7-46D5-99BD-A601D09EC5D8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F6F6EAD4-04E3-473F-8250-A9F5D550A621} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F72A6ACF-B76A-48B3-A099-1AFB8B302514} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F77AD006-6A6A-4F9E-8FDF-FC40943A5685} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F77CE535-9AAE-48E8-917F-8ABA75404F0B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F79C98C4-6104-4419-8C30-890ABDD90A51} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F7A1CDBE-7C70-40E8-87C5-30E11CC0F704} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F7FFA8B0-9CFF-44B4-954B-408BBEE4DC2E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F86B0A65-35C9-4E0A-AA6E-D0E0EA80E436} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F8BB5590-16A2-4A4A-8FB2-26420810605E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F8C55678-D22E-45D6-832E-456C56A04EC8} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FAF88EF3-F711-4257-AF0B-7E1E2EB16B94} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FB985F5E-0A8B-4038-8F68-6D70A8319325} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FC1895B1-8CA8-49EB-8BFE-A55BD40F595B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FC6E4762-4391-4B2C-9361-2463E38D608E} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FC9ECC0A-3AC7-48EE-928E-5E1E633196C4} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FD91F030-9419-4168-B79B-474CD47DEA9C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FDA9A20A-11A2-483B-8A5B-826ADCE8BB34} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FE1FECF7-E74D-4CCB-A6E6-5D0CEA6E9E7C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FF1C4A53-A503-4869-8680-759C931F34F1} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FF2334F2-D9A6-4856-BCFE-42EC82C8FCC7} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FF662C31-B623-435D-9488-8345A5FF412C} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FF9AE6C2-514F-4F6F-ABEE-C3D28C9D3E2B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FFA354F6-F97D-4B46-86DC-3FE525568304} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FFE6A54E-06B3-4A33-A3D2-1D9BBB834E0B} Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FFF54299-5B2A-4E2D-B515-A117AAC20246} ~~~ FireFox Successfully deleted: [File] C:\user.js Successfully deleted: [File] C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\user.js Successfully deleted: [File] C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\absearch-search.xml Successfully deleted: [File] C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\mystart search.xml Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\{336d0c35-8a85-403a-b9d2-65c292c39087} Successfully deleted the following from C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\prefs.js user_pref("browser.search.defaultenginename", "MyStart Search"); user_pref("extensions.incredibar.admin", false); user_pref("extensions.incredibar.aflt", "orgnl"); user_pref("extensions.incredibar.cntry", "DE"); user_pref("extensions.incredibar.dfltLng", ""); user_pref("extensions.incredibar.dfltSrch", false); user_pref("extensions.incredibar.did", "10643"); user_pref("extensions.incredibar.envrmnt", "production"); user_pref("extensions.incredibar.excTlbr", false); user_pref("extensions.incredibar.hdrMd5", "E89491401B3D0A5FD2DA735C7FB5FC77"); user_pref("extensions.incredibar.hmpg", false); user_pref("extensions.incredibar.id", "c4a391ed000000000000f655f975d47d"); user_pref("extensions.incredibar.installerproductid", "26"); user_pref("extensions.incredibar.instlDay", "15591"); user_pref("extensions.incredibar.instlRef", ""); user_pref("extensions.incredibar.isDcmntCmplt", true); user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1423:02:49"); user_pref("extensions.incredibar.mntrvrsn", "1.2.0"); user_pref("extensions.incredibar.newTab", false); user_pref("extensions.incredibar.noFFXTlbr", false); user_pref("extensions.incredibar.ppd", "6666647011"); user_pref("extensions.incredibar.prdct", "incredibar"); user_pref("extensions.incredibar.productid", "26"); user_pref("extensions.incredibar.prtnrId", "Incredibar"); user_pref("extensions.incredibar.sg", "none"); user_pref("extensions.incredibar.smplGrp", "none"); user_pref("extensions.incredibar.tlbrId", "base"); user_pref("extensions.incredibar.upn2", "6R8EA7oV5p"); user_pref("extensions.incredibar.upn2n", "92825022890009443"); user_pref("extensions.incredibar.vrsn", "1.5.11.14"); user_pref("extensions.incredibar.vrsnTs", "1.5.11.1423:02:49"); user_pref("extensions.incredibar.vrsni", "1.5.11.14"); user_pref("extensions.incredibar_i.aflt", "orgnl"); user_pref("extensions.incredibar_i.dfltLng", ""); user_pref("extensions.incredibar_i.did", "10643"); user_pref("extensions.incredibar_i.excTlbr", false); user_pref("extensions.incredibar_i.id", "c4a391ed000000000000f655f975d47d"); user_pref("extensions.incredibar_i.installerproductid", "26"); user_pref("extensions.incredibar_i.instlDay", "15591"); user_pref("extensions.incredibar_i.instlRef", ""); user_pref("extensions.incredibar_i.ms_url_id", ""); user_pref("extensions.incredibar_i.newTab", false); user_pref("extensions.incredibar_i.ppd", "6666647011"); user_pref("extensions.incredibar_i.prdct", "incredibar"); user_pref("extensions.incredibar_i.productid", "26"); user_pref("extensions.incredibar_i.prtnrId", "Incredibar"); user_pref("extensions.incredibar_i.smplGrp", "none"); user_pref("extensions.incredibar_i.tlbrId", "base"); user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8EA7oV5p&loc=IB_TB&i=26&search="); user_pref("extensions.incredibar_i.upn2", "6R8EA7oV5p"); user_pref("extensions.incredibar_i.upn2n", "92825022890009443"); user_pref("extensions.incredibar_i.vrsn", "1.5.11.14"); user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1423:02:49"); user_pref("extensions.incredibar_i.vrsni", "1.5.11.14"); user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_referrer", "hxxp://us.yhs4.search.yahoo.com/yhs/search?fr=altavista&itag=ody&q=hxxp://www.meningitis.d/|||8641 user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_temp_referer", "hxxp://us.yhs4.search.yahoo.com/yhs/search?fr=altavista&itag=ody&q=hxxp://www.meningitis.d/|#| user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\":\"q\",\"search.sweetim.com\":\"q\",\"search.imesh.net\":\"q\",\"www.searc user_pref("{8E9E3331-D360-4f87-8803-52DE43566502}.ScriptData_WSG_blackList", "form=CONTLB|babsrc=toolbar|babsrc=tb_ss|invocationType=tb50-ie-aolsoftonic-tbsbox-en-us|invocatio user_pref("{8E9E3331-D360-4f87-8803-52DE43566502}.ScriptData_WSG_whiteList", "{\"search.babylon.com\":\"q\",\"search.imesh.net\":\"q\",\"www.search-results.com\":\"q\",\"home. Emptied folder: C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\minidumps [301 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 04.08.2013 at 15:31:22,28 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-08-2013 Ran by RONsen (administrator) on 04-08-2013 15:36:38 Running from C:\Users\RONsen\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [860040 2010-10-29] (Acer Incorporated) HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-10-08] () HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated) HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKCU\...\Run: [] - [x] MountPoints2: {8ee7ffb6-2a73-11e1-a407-1c7508fa5649} - E:\Launch.exe HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-14] (Intel Corporation) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1025616 2010-12-09] (Dritek System Inc.) HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296768 2010-11-12] (NTI Corporation) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [348664 2012-08-01] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.) HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] () HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://acer.msn.com URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) SearchScopes: HKLM - DefaultScope value is missing. BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) BHO-x32: FGCatchUrl - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files (x86)\FlashGet\jccatch.dll (www.flashget.com) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files (x86)\FlashGet\getflash.dll (www.flashget.com) Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) Toolbar: HKLM - No Name - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} - No File Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.) Toolbar: HKCU - No Name - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} - No File Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default FF SelectedSearchEngine: Google FF Homepage: hxxp://news.google.de/nwshp?hl=de&tab=wn FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\RONsen\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\searchplugins\englische-ergebnisse.xml FF SearchPlugin: C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\searchplugins\gmx-suche.xml FF SearchPlugin: C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\searchplugins\lastminute.xml FF SearchPlugin: C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\searchplugins\webde-suche.xml FF Extension: Battlefield Heroes Updater - C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\Extensions\battlefieldheroespatcher@ea.com FF Extension: DownloadHelper - C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: No Name - C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi FF Extension: No Name - C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF Extension: No Name - C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: No Name - C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi FF Extension: Skype extension - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\Web Assistant\Firefox FF HKLM\...\Firefox\Extensions: [{8E9E3331-D360-4f87-8803-52DE43566502}] C:\Program Files\Web Assistant\Firefox FF HKLM-x32\...\Firefox\Extensions: [{B7082FAA-CB62-4872-9106-E42DD88EDE45}] C:\Program Files (x86)\McAfee\SiteAdvisor FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ FF HKLM-x32\...\Firefox\Extensions: [{8E9E3331-D360-4f87-8803-52DE43566502}] C:\Program Files\Web Assistant\Firefox ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86224 2012-05-08] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110032 2012-05-08] (Avira Operations GmbH & Co. KG) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [257344 2010-11-12] (NTI Corporation) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2012-09-01] () ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98848 2012-05-08] (Avira GmbH) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132832 2012-05-08] (Avira GmbH) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [27760 2011-09-16] (Avira GmbH) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-12-19] (DT Soft Ltd) R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31136 2013-06-08] (REALiX(tm)) S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [19952 2013-06-20] () S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [19952 2013-06-20] () S3 cpuz130; \??\C:\Users\RONsen\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x] S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S3 GPU-Z; \??\C:\Users\RONsen\AppData\Local\Temp\GPU-Z.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-04 15:36 - 2013-08-04 15:36 - 00000000 ____D C:\FRST 2013-08-04 15:35 - 2013-08-04 15:36 - 01781485 _____ (Farbar) C:\Users\RONsen\Downloads\FRST64.exe 2013-08-04 15:34 - 2013-08-04 15:34 - 00014329 _____ C:\Users\RONsen\Desktop\AdwCleaner[S1].txt 2013-08-04 15:34 - 2013-08-04 15:34 - 00000000 ____D C:\ProgramData\boost_interprocess 2013-08-04 15:32 - 2013-08-04 15:32 - 00666633 _____ C:\Users\RONsen\Downloads\adwcleaner(1).exe 2013-08-04 15:32 - 2013-08-04 15:32 - 00014329 _____ C:\AdwCleaner[S1].txt 2013-08-04 15:31 - 2013-08-04 15:31 - 00090549 _____ C:\Users\RONsen\Desktop\JRT.txt 2013-08-04 15:27 - 2013-08-04 15:27 - 00666633 _____ C:\Users\RONsen\Downloads\adwcleaner.exe 2013-08-04 15:27 - 2013-08-04 15:27 - 00000000 ____D C:\Windows\ERUNT 2013-08-04 15:26 - 2013-08-04 15:26 - 00561889 _____ (Oleg N. Scherbakov) C:\Users\RONsen\Downloads\JRT.exe 2013-08-04 15:05 - 2013-08-04 15:05 - 00111024 _____ C:\Users\RONsen\Desktop\OTL.Txt 2013-08-04 14:53 - 2013-08-04 14:53 - 00602112 _____ (OldTimer Tools) C:\Users\RONsen\Downloads\OTL.exe 2013-08-04 14:45 - 2013-08-04 14:45 - 00003733 _____ C:\Users\RONsen\Desktop\gmer.log 2013-08-04 13:12 - 2013-08-04 14:09 - 00000000 ____D C:\Users\RONsen\Downloads\Petterson und Findus 2013-08-03 13:53 - 2013-08-03 13:53 - 00377856 _____ C:\Users\RONsen\Downloads\r0fxw2wg.exe 2013-08-03 13:51 - 2013-08-03 13:51 - 00008218 _____ C:\Users\RONsen\Desktop\prozessliste.txt 2013-08-03 13:50 - 2013-08-03 13:50 - 00000126 _____ C:\Users\RONsen\Desktop\prozessliste.bat 2013-08-03 13:42 - 2013-08-03 14:13 - 00016153 _____ C:\Users\RONsen\Desktop\Dienste Win 7.ods 2013-08-03 13:10 - 2013-08-04 15:33 - 00000336 _____ C:\Windows\setupact.log 2013-08-03 13:10 - 2013-08-03 13:10 - 00000000 _____ C:\Windows\setuperr.log 2013-07-31 22:35 - 2013-07-31 22:35 - 00013876 _____ C:\Users\RONsen\Desktop\hijackthis.log 2013-07-31 22:34 - 2013-07-31 22:34 - 00388608 _____ (Trend Micro Inc.) C:\Users\RONsen\Downloads\HiJackThis204(1).exe 2013-07-28 15:23 - 2013-07-28 15:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-07-28 15:14 - 2013-07-28 15:14 - 21703480 _____ (Mozilla) C:\Users\RONsen\Downloads\Firefox Setup 22.0.exe 2013-07-28 15:13 - 2013-07-28 15:13 - 00120272 _____ C:\Users\RONsen\Desktop\bookmarks.html 2013-07-28 15:12 - 2013-07-28 15:12 - 00100680 _____ C:\Users\RONsen\Desktop\bookmarks-2013-07-28.json 2013-07-28 00:40 - 2013-08-04 15:33 - 00133247 _____ C:\Windows\WindowsUpdate.log 2013-07-21 21:57 - 2013-03-05 20:28 - 00001929 _____ C:\Users\RONsen\Desktop\gamemodes_server.txt 2013-07-18 17:15 - 2013-07-18 17:19 - 00000000 ____D C:\Windows\system32\MRT 2013-07-17 18:56 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-17 18:56 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-17 18:56 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-17 18:56 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-17 18:56 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-17 18:56 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-17 18:56 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-17 18:56 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-17 18:56 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-17 18:56 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-17 18:56 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-17 18:56 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-17 18:56 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-17 18:56 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-17 18:56 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-17 18:56 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-17 18:56 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-17 18:56 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-17 18:56 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-17 18:56 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-17 18:56 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-17 18:56 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-17 18:56 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-17 18:56 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-17 18:56 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-17 18:56 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-17 18:56 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-17 18:56 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-17 18:56 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-17 18:56 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-17 18:56 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-17 18:50 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-07-17 18:50 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-07-17 18:50 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2013-07-17 18:50 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-17 18:50 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-07-17 18:49 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-07-17 18:49 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll ==================== One Month Modified Files and Folders ======= 2013-08-04 15:37 - 2013-07-28 00:40 - 00133247 _____ C:\Windows\WindowsUpdate.log 2013-08-04 15:36 - 2013-08-04 15:36 - 00000000 ____D C:\FRST 2013-08-04 15:36 - 2013-08-04 15:35 - 01781485 _____ (Farbar) C:\Users\RONsen\Downloads\FRST64.exe 2013-08-04 15:34 - 2013-08-04 15:34 - 00014329 _____ C:\Users\RONsen\Desktop\AdwCleaner[S1].txt 2013-08-04 15:34 - 2013-08-04 15:34 - 00000000 ____D C:\ProgramData\boost_interprocess 2013-08-04 15:34 - 2011-07-09 22:17 - 00000000 ____D C:\ProgramData\clear.fi 2013-08-04 15:33 - 2013-08-03 13:10 - 00000336 _____ C:\Windows\setupact.log 2013-08-04 15:33 - 2012-01-21 14:29 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-04 15:33 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-08-04 15:32 - 2013-08-04 15:32 - 00666633 _____ C:\Users\RONsen\Downloads\adwcleaner(1).exe 2013-08-04 15:32 - 2013-08-04 15:32 - 00014329 _____ C:\AdwCleaner[S1].txt 2013-08-04 15:31 - 2013-08-04 15:31 - 00090549 _____ C:\Users\RONsen\Desktop\JRT.txt 2013-08-04 15:27 - 2013-08-04 15:27 - 00666633 _____ C:\Users\RONsen\Downloads\adwcleaner.exe 2013-08-04 15:27 - 2013-08-04 15:27 - 00000000 ____D C:\Windows\ERUNT 2013-08-04 15:27 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-04 15:27 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-04 15:26 - 2013-08-04 15:26 - 00561889 _____ (Oleg N. Scherbakov) C:\Users\RONsen\Downloads\JRT.exe 2013-08-04 15:05 - 2013-08-04 15:05 - 00111024 _____ C:\Users\RONsen\Desktop\OTL.Txt 2013-08-04 15:03 - 2012-10-24 14:20 - 00111024 _____ C:\Users\RONsen\Downloads\OTL.Txt 2013-08-04 14:53 - 2013-08-04 14:53 - 00602112 _____ (OldTimer Tools) C:\Users\RONsen\Downloads\OTL.exe 2013-08-04 14:45 - 2013-08-04 14:45 - 00003733 _____ C:\Users\RONsen\Desktop\gmer.log 2013-08-04 14:20 - 2012-01-21 14:29 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-04 14:09 - 2013-08-04 13:12 - 00000000 ____D C:\Users\RONsen\Downloads\Petterson und Findus 2013-08-04 14:04 - 2012-03-05 20:59 - 00000000 ____D C:\ProgramData\DVD Shrink 2013-08-04 13:18 - 2012-05-03 09:54 - 00569344 ___SH C:\Users\RONsen\Desktop\Thumbs.db 2013-08-04 13:03 - 2011-07-09 14:37 - 00000035 _____ C:\Users\Public\Documents\AtherosServiceConfig.ini 2013-08-03 14:13 - 2013-08-03 13:42 - 00016153 _____ C:\Users\RONsen\Desktop\Dienste Win 7.ods 2013-08-03 13:55 - 2011-07-17 01:17 - 00000000 ____D C:\Program Files (x86)\SpeedFan 2013-08-03 13:53 - 2013-08-03 13:53 - 00377856 _____ C:\Users\RONsen\Downloads\r0fxw2wg.exe 2013-08-03 13:51 - 2013-08-03 13:51 - 00008218 _____ C:\Users\RONsen\Desktop\prozessliste.txt 2013-08-03 13:50 - 2013-08-03 13:50 - 00000126 _____ C:\Users\RONsen\Desktop\prozessliste.bat 2013-08-03 13:10 - 2013-08-03 13:10 - 00000000 _____ C:\Windows\setuperr.log 2013-08-02 23:17 - 2012-12-14 22:20 - 00000000 ____D C:\Program Files (x86)\Steam 2013-08-02 22:23 - 2012-01-21 14:29 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-01 20:09 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-07-31 22:48 - 2011-07-10 00:53 - 00000000 ____D C:\Users\RONsen\AppData\Roaming\Skype 2013-07-31 22:40 - 2012-10-24 14:06 - 00000000 ____D C:\Users\RONsen\Downloads\backups 2013-07-31 22:35 - 2013-07-31 22:35 - 00013876 _____ C:\Users\RONsen\Desktop\hijackthis.log 2013-07-31 22:34 - 2013-07-31 22:34 - 00388608 _____ (Trend Micro Inc.) C:\Users\RONsen\Downloads\HiJackThis204(1).exe 2013-07-31 22:34 - 2012-01-15 14:33 - 02569216 ___SH C:\Users\RONsen\Downloads\Thumbs.db 2013-07-31 12:18 - 2011-07-10 00:04 - 00000000 ____D C:\Users\RONsen\AppData\Roaming\vlc 2013-07-31 10:33 - 2011-07-10 00:00 - 00654400 _____ C:\Windows\system32\perfh007.dat 2013-07-31 10:33 - 2011-07-10 00:00 - 00130240 _____ C:\Windows\system32\perfc007.dat 2013-07-31 10:33 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI 2013-07-30 18:43 - 2011-08-01 16:45 - 00000339 _____ C:\Windows\Brownie.ini 2013-07-28 15:23 - 2013-07-28 15:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-07-28 15:23 - 2013-06-27 21:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-07-28 15:21 - 2011-07-10 00:38 - 00000000 ____D C:\Users\RONsen\Documents\CCleaner 2013-07-28 15:16 - 2011-07-10 00:33 - 00000000 ____D C:\Users\RONsen\Downloads\Systemprogramme 2013-07-28 15:14 - 2013-07-28 15:14 - 21703480 _____ (Mozilla) C:\Users\RONsen\Downloads\Firefox Setup 22.0.exe 2013-07-28 15:13 - 2013-07-28 15:13 - 00120272 _____ C:\Users\RONsen\Desktop\bookmarks.html 2013-07-28 15:12 - 2013-07-28 15:12 - 00100680 _____ C:\Users\RONsen\Desktop\bookmarks-2013-07-28.json 2013-07-25 22:36 - 2011-10-01 14:48 - 00000000 ____D C:\Users\RONsen\AppData\Local\CrashDumps 2013-07-18 17:19 - 2013-07-18 17:15 - 00000000 ____D C:\Windows\system32\MRT 2013-07-18 17:13 - 2007-07-12 03:49 - 00000000 ____D C:\Windows\Panther 2013-07-17 19:12 - 2009-07-14 06:45 - 00309512 _____ C:\Windows\system32\FNTCACHE.DAT 2013-07-17 19:10 - 2012-10-11 13:03 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-07-17 19:10 - 2012-10-11 13:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-07-17 19:09 - 2009-07-14 09:45 - 00000000 ____D C:\Program Files\Windows Journal 2013-07-17 19:09 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2013-07-17 19:09 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-07-14 15:15 - 2012-01-21 14:29 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-07-14 15:15 - 2012-01-21 14:29 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-07-23 09:31 ==================== End Of Log ============================ --- --- --- --- --- --- [/CODE] |
04.08.2013, 14:49 | #5 |
| Ads not by this Site ProblemCode:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-08-2013 Ran by RONsen at 2013-08-04 15:38:04 Running from C:\Users\RONsen\Downloads Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) Acer Backup Manager (x32 Version: 3.0.0.69) Acer Crystal Eye Webcam (x32 Version: 1.0.1216) Acer ePower Management (x32 Version: 6.00.3000) Acer eRecovery Management (x32 Version: 5.00.3002) Acer GameZone Console (x32 Version: 6.1.0.9) Acer Registration (x32 Version: 1.03.3003) Acer ScreenSaver (x32 Version: 1.1.1206.2010) Acer Updater (x32 Version: 1.02.3001) Acrobat.com (x32 Version: 1.6.65) Adobe AIR (x32 Version: 1.5.0.7220) Adobe Flash Player 10 ActiveX (x32 Version: 10.1.102.64) Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224) Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7) Adobe Shockwave Player 11.6 (x32 Version: 11.6.7.637) AirMech (x32) Amazon MP3-Downloader 1.0.9 (x32) AMD Accelerated Video Transcoding (Version: 12.10.100.30328) AMD APP SDK Runtime (Version: 10.0.938.2) AMD Catalyst Install Manager (Version: 8.0.911.0) AMD Drag and Drop Transcoding (Version: 2.00.0000) AMD Media Foundation Decoders (Version: 1.0.80328.2204) Apple Application Support (x32 Version: 2.1.7) Apple Mobile Device Support (Version: 5.1.1.4) Apple Software Update (x32 Version: 2.1.3.127) applicationupdater (HKCU) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.36) Avira Free Antivirus (x32 Version: 12.1.9.2400) Backup Manager V3 (x32 Version: 3.0.0.69) Bluetooth Win7 Suite (64) (Version: 7.2.0.45) Bonjour (Version: 3.0.0.10) Brother HL-2030 (x32 Version: 1.00) Cake Mania (x32) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center (x32 Version: 2013.0328.2218.38225) Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225) Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225) Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225) CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225) CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225) CCC Help Czech (x32 Version: 2013.0328.2217.38225) CCC Help Danish (x32 Version: 2013.0328.2217.38225) CCC Help Dutch (x32 Version: 2013.0328.2217.38225) CCC Help English (x32 Version: 2013.0328.2217.38225) CCC Help Finnish (x32 Version: 2013.0328.2217.38225) CCC Help French (x32 Version: 2013.0328.2217.38225) CCC Help German (x32 Version: 2013.0328.2217.38225) CCC Help Greek (x32 Version: 2013.0328.2217.38225) CCC Help Hungarian (x32 Version: 2013.0328.2217.38225) CCC Help Italian (x32 Version: 2013.0328.2217.38225) CCC Help Japanese (x32 Version: 2013.0328.2217.38225) CCC Help Korean (x32 Version: 2013.0328.2217.38225) CCC Help Norwegian (x32 Version: 2013.0328.2217.38225) CCC Help Polish (x32 Version: 2013.0328.2217.38225) CCC Help Portuguese (x32 Version: 2013.0328.2217.38225) CCC Help Russian (x32 Version: 2013.0328.2217.38225) CCC Help Spanish (x32 Version: 2013.0328.2217.38225) CCC Help Swedish (x32 Version: 2013.0328.2217.38225) CCC Help Thai (x32 Version: 2013.0328.2217.38225) CCC Help Turkish (x32 Version: 2013.0328.2217.38225) ccc-utility64 (Version: 2013.0328.2218.38225) CCleaner (Version: 3.28) CDBurnerXP (x32 Version: 4.4.1.3243) CDex - Open Source Digital Audio CD Extractor (x32 Version: 1.70.4.2009) clear.fi (x32 Version: 1.0.1223.00) clear.fi (x32 Version: 9.0.7209) clear.fi Client (x32 Version: 1.00.3008) Command & Conquer Die ersten 10 Jahre (x32 Version: 1.00.0000) Counter-Strike: Global Offensive (x32) D3DX10 (x32 Version: 15.4.2368.0902) DAEMON Tools Lite (x32 Version: 4.45.1.0236) DC Universe Online Live (HKCU) Diablo III (x32 Version: 1.0.6.13644) Dota 2 (x32) dows-Treiberpaket - Nokia Modem (02/25/2011 7.01.0.9) (Version: 02/25/2011 7.01.0.9) Dream Day First Home (x32) Dropbox (HKCU Version: 1.6.18) DVD Shrink 3.2 (x32) DVDFab 8.1.3.8 (09/12/2011) Qt (x32) DVDx 4.0 Open Edition (x32 Version: 4.0 (Open Edition)) eBay Worldwide (x32 Version: 2.1.0901) eReg (x32 Version: 1.20.138.34) eSobi v2 (x32 Version: 2.0.4.000274) Farm Frenzy 2 (x32) FlashGet 1.9.6.1073 (x32 Version: 1.9.6.1073) Free Screen Video Recorder version 2.5.815 (x32) Free YouTube Download 3 version 3.0.5.712 (x32) Free YouTube Download version 3.0.20.1228 (x32) Freemake Video Downloader (x32 Version: 2.1.9) Galapago (x32) gamelauncher-ps2-psg (HKCU) GIMP 2.6.11 (x32 Version: 2.6.11) Google Earth Plug-in (x32 Version: 7.1.1.1888) Google Update Helper (x32 Version: 1.3.21.153) Heroes of Hellas (x32) HWiNFO64 Version 4.20 (Version: 4.20) Identity Card (x32 Version: 1.00.3003) Image Resizer Powertoy Clone for Windows (64 bit) (Version: 2.1.1) ImgBurn (x32 Version: 2.5.6.0) Intel(R) Management Engine Components (x32 Version: 7.0.0.1144) Intel(R) Rapid Storage Technology (x32 Version: 10.0.0.1046) iTunes (Version: 10.6.1.7) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Junk Mail filter update (x32 Version: 15.4.3502.0922) Launch Manager (x32 Version: 5.0.3) League of Legends (x32 Version: 1.02.0000) Logitech SetPoint 6.32 (Version: 6.32.20) MediaEspresso (x32 Version: 1.0.1210_33255) Merriam Websters Spell Jam (x32) Mesh Runtime (x32 Version: 15.4.5722.2) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office 2010 (x32 Version: 14.0.4763.1000) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1) Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1) Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0) Mozilla Maintenance Service (x32 Version: 22.0) Mp3tag v2.56 (x32 Version: v2.56) MSVC80_x64_v2 (Version: 1.0.3.0) MSVC80_x86_v2 (x32 Version: 1.0.3.0) MSVC90_x64 (Version: 1.0.1.2) MSVC90_x86 (x32 Version: 1.0.1.2) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MyWinLocker (Version: 4.0.14.11) MyWinLocker 4 (x32 Version: 4.0.14.11) MyWinLocker Suite (x32 Version: 4.0.14.11) Nokia Connectivity Cable Driver (x32 Version: 7.1.78.0) Nokia PC Suite (x32 Version: 7.1.180.64) Nokia Suite (x32 Version: 3.4.49.0) Norton Online Backup (x32 Version: 2.1.17869) NTI Media Maker 9 (x32 Version: 9.0.2.8939) OpenAL (x32) OpenOffice.org 3.3 (x32 Version: 3.3.9567) Pando Media Booster (x32 Version: 2.3.6.0) PC Connectivity Solution (x32 Version: 12.0.17.0) Pixum Fotobuch (x32) Poker Pop (x32) PunkBuster Services (x32 Version: 0.990) PX Profile Update (x32 Version: 1.00.1.) QuickTime (x32 Version: 7.72.80.56) Ravensburger tiptoi (x32) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6254) Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30123) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0) RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition (x32 Version: v2.24 MSI Master Overclocking Arena 2009 edition) Shredder (Version: 2.0.8.7) Shredder (x32 Version: 2.0.8.7) Skype Toolbars (x32 Version: 5.3.7555) Skype™ 6.5 (x32 Version: 6.5.158) SpeedFan (remove only) (x32) Spin & Win (x32) StarCraft II (x32 Version: 1.4.1.19776) Steam (x32 Version: 1.0.0.0) SUPER © +Recorder.2013.55 (Mar 7, 2013) Version +Recorder.2013. (x32 Version: +Recorder.2013.55) swMSM (x32 Version: 12.0.0.1) Synaptics Pointing Device Driver (Version: 15.1.6.0) TeamSpeak 3 Client (Version: 3.0.10.1) Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (Version: 2.0.82.0) Unity Web Player (HKCU Version: ) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Veetle TV (x32 Version: 0.9.18) VLC media player 2.0.2 (x32 Version: 2.0.2) Welcome Center (x32 Version: 1.02.3007) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3538.0513) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows-Treiberpaket - Nokia Modem (02/25/2011 4.7) (Version: 02/25/2011 4.7) Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (Version: 08/22/2008 7.0.0.0) Xfire (remove only) (x32) Xiph.Org Open Codecs 0.85.17777 (x32 Version: 0.85.17777) ==================== Restore Points ========================= 31-07-2013 20:49:06 Windows Update 04-08-2013 12:22:07 O&O DiskRecovery wurde entfernt. 04-08-2013 12:22:56 O&O MediaRecovery wird entfernt ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {128508DA-FC87-4303-949C-DFEB8B05EF4C} - System32\Tasks\{27C6A3D1-A51E-4051-81C0-A16B186D2289} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-06-03] (Skype Technologies S.A.) Task: {15703B21-B9B5-4DBF-8DF5-11EE7528573A} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation) Task: {20691750-CA35-4522-B49C-B3F796AE5D54} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {361E7E64-4E9E-4E37-B17E-7C36A772A5D5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-02-25] (Piriform Ltd) Task: {40BDD85D-F835-4A39-836A-6611A18E2C2D} - System32\Tasks\{E4B5AFA0-5D1D-442A-A616-4727389504A5} => c:\program files (x86)\mozilla firefox\firefox.exe [2013-06-18] (Mozilla Corporation) Task: {43DB22AC-7FB7-4AF6-9BA0-BBA9DB2D4483} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2010-12-23] (CyberLink Corp.) Task: {71DC58EB-80CF-419E-BC63-6FCA6075829E} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2010-12-23] (CyberLink) Task: {BCEE935B-5C4B-428E-B0CC-30E10A260000} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-21] (Google Inc.) Task: {BF1F58A1-2650-4A7B-B0F7-67C348A36460} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-21] (Google Inc.) Task: {C786449A-B4AF-4177-BD76-83F0A1781783} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation) Task: {D793B829-BAB7-4C50-BFA7-4FB0A648AD40} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {DC308570-978F-49A1-A61B-2EDFC5246A71} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2010-12-23] (Acer Incorporated) Task: {E5A463B3-B70E-495B-BCC8-A275F2E16568} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2013-06-20 19:42:44.441 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-20 19:42:44.323 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-20 19:42:43.163 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-20 19:42:43.062 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-20 19:42:41.934 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-20 19:42:41.823 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-20 19:42:40.688 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-20 19:42:40.582 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-20 19:42:36.565 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-20 19:42:36.465 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 23% Total physical RAM: 8173.86 MB Available physical RAM: 6289.93 MB Total Pagefile: 16345.9 MB Available Pagefile: 14350.47 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:450.66 GB) (Free:188.18 GB) NTFS (Disk=0 Partition=3) ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 75066CBA) Partition 1: (Not Active) - (Size=15 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=451 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Code:
ATTFilter GMER Logfile: |
04.08.2013, 16:38 | #6 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Ads not by this Site Problem Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM) Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren! Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt: ESET Online Scanner
__________________ --> Ads not by this Site Problem |
04.08.2013, 19:40 | #7 |
| Ads not by this Site Problem Erstmal danke für die Hilfe. Der Quickscan mit Malwarebytes Anti-Malware (MBAM) ergab nix. Den ESET Test mache ich morgen. Hoffe das dort was gefunden wird. |
04.08.2013, 21:57 | #8 | ||
/// Winkelfunktion /// TB-Süch-Tiger™ | Ads not by this Site ProblemZitat:
Zitat:
__________________ Logfiles bitte immer in CODE-Tags posten |
05.08.2013, 19:58 | #9 |
| Ads not by this Site Problem Hallo, habe heute festgestellt das "Ads not by this Site Problem " verschwunden ist. Anscheinend hat irgend ein der probierten Programm Wunder gewirkt. Vielen Danke für die vor Allem SCHNELLE Hilfe. MFG RONsen |
05.08.2013, 23:14 | #10 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Ads not by this Site Problem Ich vermisse immer noch beide Logs
__________________ Logfiles bitte immer in CODE-Tags posten |
07.08.2013, 19:59 | #11 |
| Ads not by this Site Problem ok, mache ich noch. |
10.08.2013, 18:41 | #12 |
| Ads not by this Site ProblemCode:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=fa7daf2dc14384438222dab908d061a3 # engine=14722 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-08-10 05:10:23 # local_time=2013-08-10 07:10:23 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1799 16775165 100 94 28311 121921243 21089 0 # compatibility_mode=5893 16776574 100 94 28341 127784473 0 0 # scanned=294517 # found=0 # cleaned=0 # scan_time=15416 Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.08.04.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16635 RONsen :: RONSEN-PC [Administrator] 04.08.2013 20:06:59 mbam-log-2013-08-04 (20-06-59).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 217841 Laufzeit: 5 Minute(n), 23 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) |
11.08.2013, 15:58 | #13 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Ads not by this Site Problem Sieht soweit ok aus Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie ) Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird. Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?
__________________ Logfiles bitte immer in CODE-Tags posten |
Themen zu Ads not by this Site Problem |
ads, ads not by this site, gefunde, gescannt, gmer, hoffe, logfiles, not, proble, problem, this, trotz, weiterhelfen, wenig, werbung, zuviel |