Windows Vista: Laptop extrem langsam und ständig die Meldung "Wenig Speicherplatz"

Saschaico · 18.06.2015, 09:49

Hallo schrauber,

hier die Logdatei von Combofix:

Code:

ATTFilter

ComboFix 15-06-09.01 - nandel guckes 18.06.2015   9:45.1.2 - x86
ausgeführt von:: c:\users\nandel guckes\Desktop\ComboFix.exe
.
Manuelle Behebung ist notwendig, um CommonStartup wiederherzustellen.
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\pswi_preloaded.exe
c:\windows\Temp\log.txt
D:\install.exe
.
Infizierte Kopie von c:\windows\system32\userinit.exe wurde gefunden und desinfiziert 
Kopie von - c:\windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe wurde wiederhergestellt 
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-05-18 bis 2015-06-18  ))))))))))))))))))))))))))))))
.
.
2015-06-18 07:56 . 2015-06-18 07:56	--------	d-----w-	c:\users\Default\AppData\Local\temp
2015-06-17 06:45 . 2015-05-03 03:42	9265072	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F0C80336-1E13-426C-AE90-A74522B1945B}\mpengine.dll
2015-06-16 15:23 . 2015-05-03 03:42	9265072	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-06-13 12:21 . 2015-06-17 06:43	--------	d-----w-	C:\FRST
2015-06-12 18:37 . 2015-03-27 08:48	908832	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1CC1D0EB-BF40-43C4-A517-DE22623EC9D7}\gapaengine.dll
2015-06-11 18:39 . 2015-06-18 08:06	119512	----a-w-	c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-06-11 18:39 . 2015-04-14 07:37	51928	----a-w-	c:\windows\system32\drivers\mwac.sys
2015-06-11 18:39 . 2015-04-14 07:37	92888	----a-w-	c:\windows\system32\drivers\mbamchameleon.sys
2015-06-11 18:39 . 2015-04-14 07:37	23256	----a-w-	c:\windows\system32\drivers\mbam.sys
2015-06-11 18:39 . 2015-06-11 18:39	--------	d-----w-	c:\program files\ Malwarebytes Anti-Malware 
2015-06-11 18:39 . 2015-06-11 18:39	--------	d-----w-	c:\programdata\Malwarebytes
2015-06-11 18:23 . 2015-06-11 18:26	--------	d-----w-	C:\AdwCleaner
2015-06-11 06:15 . 2015-04-24 15:54	532480	----a-w-	c:\windows\system32\comctl32.dll
2015-06-11 06:14 . 2015-05-21 14:22	2066432	----a-w-	c:\windows\system32\win32k.sys
2015-06-11 06:01 . 2015-05-04 22:50	7680	----a-w-	c:\windows\system32\spwmp.dll
2015-06-11 06:00 . 2015-05-04 22:50	4096	----a-w-	c:\windows\system32\msdxm.ocx
2015-06-11 06:00 . 2015-05-04 22:50	4096	----a-w-	c:\windows\system32\dxmasf.dll
2015-06-11 06:00 . 2015-05-04 21:21	107520	----a-w-	c:\program files\Windows Media Player\wmpconfig.exe
2015-06-11 06:00 . 2015-05-04 21:21	168960	----a-w-	c:\program files\Windows Media Player\wmplayer.exe
2015-06-11 06:00 . 2015-05-04 21:21	107520	----a-w-	c:\program files\Windows Media Player\wmpshare.exe
2015-06-11 06:00 . 2015-05-04 21:21	8147456	----a-w-	c:\windows\system32\wmploc.DLL
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-04-30 16:03 . 2015-05-14 08:38	279040	----a-w-	c:\windows\system32\schannel.dll
2015-04-30 13:14 . 2015-05-14 08:32	102608	----a-w-	c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-04-19 21:24 . 2015-05-14 08:34	219648	----a-w-	c:\windows\system32\d3d10_1core.dll
2015-04-19 21:24 . 2015-05-14 08:34	189952	----a-w-	c:\windows\system32\d3d10core.dll
2015-04-19 21:24 . 2015-05-14 08:34	160768	----a-w-	c:\windows\system32\d3d10_1.dll
2015-04-19 21:24 . 2015-05-14 08:34	1029120	----a-w-	c:\windows\system32\d3d10.dll
2015-04-19 20:19 . 2015-05-14 08:34	1172480	----a-w-	c:\windows\system32\d3d10warp.dll
2015-04-19 20:18 . 2015-05-14 08:34	486400	----a-w-	c:\windows\system32\d3d10level9.dll
2015-04-19 20:13 . 2015-05-14 08:34	682496	----a-w-	c:\windows\system32\d2d1.dll
2015-04-19 20:12 . 2015-05-14 08:34	1072640	----a-w-	c:\windows\system32\DWrite.dll
2015-04-19 20:12 . 2015-05-14 08:34	801792	----a-w-	c:\windows\system32\FntCache.dll
2015-04-14 00:35 . 2015-04-14 00:35	875720	----a-w-	c:\windows\system32\msvcr120_clr0400.dll
2015-04-14 00:35 . 2015-04-14 00:35	536776	----a-w-	c:\windows\system32\msvcp120_clr0400.dll
2015-04-10 23:22 . 2015-05-14 08:28	279552	----a-w-	c:\windows\system32\services.exe
2015-03-27 08:48 . 2013-05-01 13:20	908832	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-07-29 15:52	121392	----a-w-	c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ProductReg"="c:\program files\Acer\WR_PopUp\ProductReg.exe" [2008-11-17 135168]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-07-18 451872]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-01 153136]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-12-18 68856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-25 1049896]
"BkupTray"="c:\program files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" [2008-04-25 28672]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]
"RtHDVCpl"="RtHDVCpl.exe" [2008-09-19 6294048]
"Skytel"="Skytel.exe" [2008-09-19 1833504]
"PLFSetI"="c:\windows\PLFSetI.exe" [2008-07-29 200704]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2008-12-17 858632]
"ePower_DMC"="c:\program files\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2008-11-28 417792]
"eDataSecurity Loader"="c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-07-29 526896]
"eAudio"="c:\program files\Acer\Empowering Technology\eAudio\eAudio.exe" [2008-09-11 544768]
"ArcadeDeluxeAgent"="c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2008-10-08 147456]
"CLMLServer"="c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe" [2008-10-08 167936]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2011-03-14 2565520]
"CanonSolutionMenuEx"="c:\program files\Canon\Solution Menu EX\CNSEMAIN.EXE" [2011-08-04 1612920]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2015-04-29 981688]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - MBAMSWISSARMY
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	FontCache
HPZ12	REG_MULTI_SZ   	Pml Driver HPZ12 Net Driver HPZ12
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-07-18 16:53	451872	----a-w-	c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-06-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-11 07:41]
.
2015-06-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-11 07:41]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = https://www.google.de/
mStart Page = hxxp://www.google.com
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MI1933~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\nandel guckes\AppData\Roaming\Mozilla\Firefox\Profiles\a6vdj7l2.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKCU-Run-AdobeBridge - (no file)
HKLM-Run-eRecoveryService - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2015-06-18 10:08
Windows 6.0.6002 Service Pack 2 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-4207484042-2425227553-2540443312-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*æ*Ë*%\OpenWithList]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-4207484042-2425227553-2540443312-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\. % 
 ]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-4207484042-2425227553-2540443312-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\. % 
 \OpenWithList]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-4207484042-2425227553-2540443312-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.**%½*k*]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-4207484042-2425227553-2540443312-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.**%½*k*\OpenWithList]
@Class="Shell"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'Explorer.exe'(2676)
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\sysenv.dll
c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files\Microsoft Security Client\MsMpEng.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
c:\program files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
c:\program files\Acer\Empowering Technology\Service\ETService.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\ Malwarebytes Anti-Malware \mbamscheduler.exe
c:\program files\ Malwarebytes Anti-Malware \mbamservice.exe
c:\acer\Mobility Center\MobilityService.exe
c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
c:\windows\system32\PSIService.exe
c:\program files\ Malwarebytes Anti-Malware \mbam.exe
c:\program files\Cyberlink\Shared files\RichVideo.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\system32\DRIVERS\xaudio.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\conime.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-06-18  10:15:45 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-06-18 08:15
.
Vor Suchlauf: 4.411.392 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 15.742.185.472 Bytes frei
.
- - End Of File - - C62A2279424640C0B9AA0328593C277F
BB9D3A6A13C5010348DA7C900BB6AF50

Beim Starten kam wieder eine mittlerweile gewohnte Warnmeldung (Screenshot in der Anlage) die mit klicken auf "OK" verschwand und dann hat Combofix auch schon losgelegt

Folgende Meldungen die auf Programme in der Taskleiste gezeigt haben sind während des Scans erschienen:

NTI Backup Now 5:
Scheduler-Dienst ist gestoppt.

Windows Sicherheitscenter:
Überprüfen Sie die Computersicherheit.
Es sind mehrere Sicherheitsprobleme auf dem Computer vorhanden.
(diese Meldung kam zweimal - nach dem selbstständigen Neustart während der Combofix-Arbeit dann nochmal)

Eine Zeit vor dem Neustart kam der Bildschirmschoner und ich konnte nicht weiter verfolgen ob noch weitere Meldungen kamen - habe es brav unterlassen die Maus zu bewegen

Außerdem hat Combofix während des Scans seins und andere Ikons auf dem Desktop anders sortiert (auch die Bilder im Windows-Ordner Bilder haben nun eine andere Reihenfolge - aber das ist normal, nicht wahr?)

Liebe Grüße
Saschaico

schrauber · 18.06.2015, 18:34

Das ist normal

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Saschaico · 18.06.2015, 21:20

Hi schrauber,

Hier die Logdatei von MBAM:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 18.06.2015
Suchlauf-Zeit: 20:35:13
Logdatei: mbam.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.06.18.05
Rootkit Datenbank: v2015.06.15.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows Vista Service Pack 2
CPU: x86
Dateisystem: NTFS
Benutzer: nandel guckes

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 338043
Verstrichene Zeit: 21 Min, 0 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 0
(Keine schädliche Elemente gefunden)

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 0
(Keine schädliche Elemente gefunden)

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)

die von AdwCleaner:

Code:

ATTFilter

# AdwCleaner v4.206 - Bericht erstellt 18/06/2015 um 21:13:55
# Aktualisiert 01/06/2015 von Xplode
# Datenbank : 2015-05-31.5 [Lokal]
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (x86)
# Benutzername : nandel guckes - NANDELGUCKES-PC
# Gestarted von : C:\Users\nandel guckes\Desktop\AdwCleaner_4.206.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Internetbrowser ] *****

-\\ Internet Explorer v9.0.8112.16659


-\\ Mozilla Firefox v38.0.5 (x86 de)


*************************

AdwCleaner[R0].txt - [2903 Bytes] - [11/06/2015 20:23:14]
AdwCleaner[R1].txt - [980 Bytes] - [18/06/2015 21:12:21]
AdwCleaner[S0].txt - [2879 Bytes] - [11/06/2015 20:26:00]
AdwCleaner[S1].txt - [901 Bytes] - [18/06/2015 21:13:55]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [959  Bytes] ##########

die von JRT "1.Teil" (es mit einer beliebigen Taste zu starten hatte nicht funktioniert. Ich hatte erst h gedrückt und weil's nicht angelaufen ist nochmal auf h - es gab jeweils beim Drücken so einen döt-Ton. Ich habe dann das JRT-Fenster geschlossen, es nochmal geöffnet und diesmal die Leertaste gedrückt - das hat dann funktioniert)

:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 7.0.2 (06.18.2015:1)
OS: Windows Vista (TM) Home Premium x86
Ran by nandel guckes on 18.06.2015 at 21:45:33,11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0055EA5D-05AD-407B-AABA-858298593242}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{00BA8191-CE81-4971-9938-51142648B156}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{00CDF192-E1C9-488C-904E-FBD79515E3AD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{00EAE6A0-0044-445A-8D5B-E7F10E210C8E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{01061AF5-28C7-4F84-A582-1796E7010515}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{01170417-4C62-4095-B96C-B720DBBC6651}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{013DD8B7-88C3-415A-8D96-35366EDECF67}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{019DA28B-A0A3-48C0-9197-982E52CE8968}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{01D13093-3AC3-44D6-8EA0-61E0FA86CF81}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{01E63BDD-D894-4886-8584-ACCEFB9CE707}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{02D934B3-09BD-47D8-AF87-2AA333603C9C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0307DB0D-3208-4443-B439-6EAF748D57C8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{033AD925-DCC0-46CE-A432-C0E11A2C8A72}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{03A3F060-FB62-45B6-A8C6-97DBDA6064A3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{03A86497-295E-44B3-884F-458A9BD972D3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{03CDCC15-EEBD-4407-99AA-415C2352662F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{03DFDFC7-4B7B-4193-8929-5061222EA829}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0465B88C-A334-449F-A99F-A14C9C6C0B19}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0472169F-57FF-4888-A0D7-20FBB1E20A93}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{04998D3D-90CC-4735-8C81-9C90A77CE222}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{050E3C12-2C8C-4258-8BCD-F66F054C4353}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0574995F-7260-4963-A430-BE45EB0F17A3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{05E892BC-3C1D-4550-B143-3CF16A28CB74}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{05E8E239-1559-419C-82A8-9585D18743E1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{060894F6-E7BB-48C0-BD29-4816CC2F04C4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{062BC6DA-901E-4943-88CF-C897B0CDB8A4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{062E9B4C-CAFC-4316-8CCF-5E18A1A1D28E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{06975766-850D-473B-9F97-59EAAB2BA316}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{06C8B1E3-6629-40B9-9ADE-FF0C7889E3BF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{071D06C5-B8A1-4FE8-8F37-8FB42894EC70}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{074FBB85-1642-42F5-B0F8-DC2403CB92A1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{079C7838-263A-4F72-9CE3-17866E88A098}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{07A8945B-2D9C-4023-842C-45A38C5AE5C4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{07CD34E3-578F-4B45-A586-A1364EF9512A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{07E1B308-12CB-4239-ABD4-42C67DBD7560}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{07EA3502-B3D8-48F4-B71F-17B01E482107}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{08653F55-72D4-44EB-B911-EA608BC5C9CB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{087BD5F2-4261-4D3A-ACFB-48B7AAAD66F4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{08D45AA4-BC00-49E1-A65C-A3864F6A190A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{08DF58C5-36E7-4B5F-95BD-78657310BB79}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0901B373-D432-4FAC-B45B-BB86561B2EC9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{091EC21C-603B-43B4-8066-8362ECC9558E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{094625DB-B868-4CE2-BFEC-F05CDD8CF097}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{09642886-227F-48B2-9748-7F7B5DDB8D52}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{09A3EF12-3225-4FB4-9C4B-DFB56D646783}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{09C73D75-95F1-4DCC-821A-D5E65FBCBFD8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0A43F240-8594-4BB9-A313-802A3AEF8D92}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0A4C0127-0456-4A4F-8E2F-D0F1BC4F4F19}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0AB3D20E-3F1A-4166-ABF1-F0B687CACBF6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0AC3235D-E8E3-4634-884B-4021C4B4EAD3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0AD11DDE-195B-4960-86DA-216201E1D61A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0AD1C7B8-5BF0-4F72-BFD4-1E142207783A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0B016412-6C0E-4A2C-834F-3A96901DE299}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0B01F9A6-9383-4679-9007-8E87C5628F4C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0B81AFDE-8A99-4173-8BB4-D538D6FF85BA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0BBDDC0D-5335-41D8-B4D6-5501250EAC43}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0C05E92E-0A86-4656-8B2F-7A62537DF87F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0C0ADB56-04E6-49FC-BD6C-D02E555EE765}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0C53F6D5-E3B4-49CB-B69D-7E157CB690D7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0CA5B319-1AAE-4B23-8692-5C9390311580}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0CAE76FE-2DD3-4B61-8FFC-47734DBB0F95}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0CCF9C49-CEA6-4651-AD5B-DDFC6D603FFD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0CDC7A00-E3AB-4478-8519-55D6BF5B97B6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0D1379D8-9CF6-4862-BA01-A588ED1FBBB3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0D180C76-DCAD-4645-AF37-48ACAE95F8AD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0D4646EC-FC7B-41DB-9735-BFF7C73F90D5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0D8CA7AC-CBAC-418C-AD2E-EBECA66FAD62}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0D93B861-229D-40A1-A1AD-02832815743F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0D9C3BFB-FC52-46FC-AACC-95D83E33411E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0EA0DA8D-89CA-49DC-AD0F-33AB21C2DF5F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0EA6EF69-318D-4FC9-88E4-45627645D382}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0F4F372A-D798-4C8D-89DF-BDE4D20A5F55}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0F9342D1-B5B9-46FC-B53E-66AE58F5031E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{0FF9A78A-C356-4FCF-BF96-6D8F59F58F66}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{10595311-A2B0-4EC9-8572-772E7816FFA3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{10D29E71-07E9-4F4A-9A71-491F9D5C2F0D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{10E4D09F-5C60-45FC-A5EB-E6B641AD8850}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{10EDE525-916C-4EE1-BD4E-28FC53B87E67}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{10FE6510-79EB-44B6-B1D8-2DDA8D73DE2D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{11498631-F2DD-49D0-B058-ABA2E6C58925}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1161EC43-FF99-4A9E-9F54-CB8F610C826C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{116E52B7-9326-4646-9EB0-914ADEF7FBD8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1180EBB2-ED6E-4544-A426-ED6644D79F10}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{11A917C5-6104-4F08-8092-D4BF8C504E95}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{11B88A83-07AB-48CB-BADC-CB5AE6AB88ED}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{11BBA7F9-EAD6-4909-9E6A-9AB2AE6D7E79}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{120BAEEB-3746-43B7-874C-1307867826A9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{12221598-8848-4FC0-9BAA-9F9FF7F633E3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{122EBB44-E20A-49EC-B07A-58277F400FA7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{123376E3-188D-4416-8D1F-A804A1F24BC3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{126DEB4E-4C40-4C3A-B08F-773AA1B2E0DC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{12BBD373-BBCB-4216-8F3F-60F06E19A0D0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{12C23F5C-CCFF-459F-A794-46C11FE3FD4F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{12C4C3DE-0D27-4DB6-9585-D5DB758F2144}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{12C6D6DF-F5C3-415B-81BD-09BEECFC3BE3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{12ED8A5D-5532-4A3C-BFEB-4BCE00580981}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1308208A-0C84-41C4-BD7E-3273D6B3EFDC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{13824FC1-C416-4ECF-926E-8427D519E16B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{13B9C7BE-C8FC-4A81-9D15-2B79E5A2FD8D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{13E68404-3360-40FB-9160-7E716036B180}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{13EB64A3-6841-4569-A2BE-706EAE53E729}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1464A073-068C-4055-B208-9869066A79D5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{14841D24-1B4A-400F-BEC2-7312CF7E92F4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{14AC43E8-CD29-42CA-90A0-BBAD7A349049}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{14EA49BA-DA1D-4071-BB84-34D4DFBBFB6F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{14EE589A-238A-4CE8-ABF0-C0C6F6752ED4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{14F78EDB-61D1-4B96-8B9F-597DA885C2CC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{15084113-2811-4D5A-AE47-41BBADBBE2C8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{153E1175-1B0F-40E8-9348-9601BD60F85D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1556122E-9BE8-4704-9407-C91BEE602203}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{155A3120-6A5E-4B35-BE02-D2FA5A6E723B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{155EA994-FEA1-4745-BC15-08CF661AADE8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{157DD638-14EC-4E42-AB6D-66212872F811}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{15E41628-3778-4DA0-95BA-979E0BCAA215}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{15F16BCF-983B-47B3-BF32-A2F9C25812A3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{16045D44-CABE-49F6-BD23-F8F63AE7D759}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{16B1BFC4-CFAB-4411-BD0E-08C10CE24F5B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{172B71F4-2CF6-4F7A-883F-5D8398FBDE5B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{173A4044-A7CE-48C5-B38A-71E21FB62B13}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1783127E-8FE8-40D9-8C60-86233EA4D6AF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1795D3FA-6AD8-4D6F-877F-6B2C14FBA89D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{17D90FA5-5697-4E0B-B9C8-A47001E30517}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{181A656E-F11E-4501-9372-19BE4643709A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1829947E-53D5-487C-92A5-34CA80A7FFDC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{183C213D-0105-4522-928C-5370B64A445C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{18AFA5A7-D02A-4EE8-82C9-A0636BBE325E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{18BFBFB3-345E-4F89-BF10-BE182D7A0E7D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{18C1B4B3-97BB-4E7A-A6F9-7E80629A73C8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{18E6F2BB-16F0-4F6E-87C3-E9F65818299A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{194EBBDF-0B71-4EAD-95F4-33DB01CD39B2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{19DA7BC0-A25B-4BE8-A250-1E3B968D913E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{19EB3B85-A5B9-4E85-89ED-504EA037A195}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{19F362D1-0722-40E0-A027-E987C28EA2C7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{19F609D8-05E7-4868-A367-A990C29BAF87}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1A071B07-11F5-4976-AC8C-AAB082EF7D0E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1A2D0D3C-922D-441C-BAF6-38FB46E5B524}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1A6F0331-72AA-4447-9A4A-514709130D61}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1A83C551-E0B4-4987-A1E6-A1377CF9B57C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1A961AE1-EA4C-4D8D-8F80-54281E24D841}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1ADBD574-52F2-45E2-9F42-26B781684CE2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1AE11CE1-34E2-4D39-86D8-53467D0CF67F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1B029A76-0981-4864-B6DA-3D74725BC8D4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1B04BF4B-2DF6-4469-A046-B74434F7EF16}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1B073E1E-0B94-4B71-A30C-4C83C59C2F98}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1B6C749B-D7CA-4236-95BC-E2A6109D18A7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1B921180-02BD-4B86-9E8F-DE78A9D8A3D1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1BA2C8DF-C9E9-4A82-ACEB-84C3DF72D048}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1BC1CAEA-096C-4402-AEA1-E203A3F44F0D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1BD6470A-902E-429A-977C-049F7D332BDC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1BD94443-671E-463A-BC50-C0310215D6D0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1BEA3081-E9CD-46E5-B6B2-44B7C40E51F8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1C2EA6BE-8031-4E2C-87F0-7AB4680ED7B7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1C35320C-9458-437E-9DEB-5903D4C4C87B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1C7A407B-8BA0-4C65-BE0C-81641BB33472}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1C7B2770-EA2A-4B33-8FE4-FE5090F30DE1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1D3FC83F-7713-4F3F-BCD6-A7E4FFD9F647}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1DA95B3A-99C0-4476-B37D-9E28A4923406}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1DB4C61E-64CE-401A-B0E8-5A2A8974BA4C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1DDDDBC1-CE61-41F5-A2EF-3DF15A87A9B1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1DF28CFE-2E31-494B-8A09-F1D3FB9BA7A0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1E163863-153D-4A65-B4B4-D0B766D2C9D3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1E7EE74C-D609-45E1-A56B-0BEF2406F1A5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1F32E69B-23DE-42EA-9746-AB90A5D65AFB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1F4C1D6C-66A8-421D-B163-D47B27220BEA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{1FA8379B-7EB8-47FB-8D6C-CE12BEF7A63D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{203AF843-E660-4445-B05E-43157E8EFC52}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{203E13FC-EA3C-434E-9656-F61772123909}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{204E2B40-06A8-454F-9915-0449784E6A9E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{204F9097-263E-489F-9F2F-B710671A8D41}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{208A4DE1-9E35-4CB8-9DF5-0BA1DD329B4D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{20932252-DBFB-4DBF-A784-8BD0EE3289A6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{20A0F4EB-C331-4044-A40E-99179A31D7E6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{20A50899-5259-4056-9722-C3CCBF507C1D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{20B12063-E3AC-43E0-8C80-477CE288E610}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{20E9C70B-FB43-4B42-B9DA-2029C4ACAFE1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{211A062D-FD1B-429C-8472-5F529B5070B3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{211A659D-F0F3-44FB-884B-7BA094C8CCAC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2141EB7D-A782-4C06-AA7E-27F7103A26CC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{21CCA87A-6EDC-4F60-BDAB-73FBB0C26E16}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{21D92DCF-D999-4005-802D-18324B057FB5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{21F208F1-D595-4D11-B0BE-211BEA04C4BF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{220EE210-81AB-4B44-AC72-C693B7BC9EFD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2259A29B-BDBE-4860-9FF6-BF7BD275E54F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2277A3ED-03D8-431D-8523-A1F3CF778C1B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2291A160-2390-45B7-9ABC-0EEBE69A25D3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{22F080D1-3DBB-4C0A-B628-F1B7FB13C34E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{22F4877B-E332-4CF8-81D3-A3D6A599CB2D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{23229D41-76E4-4F2E-98C6-9CE5B826BFD1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{23252BAA-74AC-4545-8962-D4BC0CE3BBA2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{23A0962E-6F10-4A30-827B-01285816A5CE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{23A1FC52-1B11-4DE0-927E-0F60072BC021}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{23A49303-B3FC-4BD2-A5DB-653CA1B1B2FC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{23AB46D1-0384-4401-9EC9-70D7F3592532}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{23C2D359-1C19-4564-8A35-58D79D930D6C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{24358CAF-BE70-47DB-93E7-C4082FFF38A5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{24A9363A-0985-46C4-9D74-F2878DF38C84}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{24B4CDE5-2CD4-4393-8BEA-7334F986EC93}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{24D42142-F8C4-4359-9985-B307AB0F0108}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{24DECA3E-755A-42ED-874B-977F40079A47}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{24E840F3-9CEC-4AB3-94AE-67081634079B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{252AD4DC-5F97-4D51-9867-B42A9BDE5276}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{25A9E3BC-2CE3-41D8-95D2-E6773BE4A49C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{25BF2BA4-712D-40E6-AA33-6FAE83FA58B6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{25D6FE19-0076-486D-A7AA-CD421124278D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{262DF3D1-3A3F-42AA-9774-268FDF2A66C9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{26804CDD-CB8D-45FD-9B7C-6416C4271AC1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2693B2A0-8E8C-456C-9ABE-55D5936897B4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{26D2091E-63B9-45B4-85C7-D1BFB43A67B5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{26F4B9D2-4654-4F91-98EC-3AD908B69F38}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{273532C7-1A7E-40F7-9A3D-2DB73616ED1C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{274543E6-3551-4AB8-87DC-60785D91C820}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2790FEE4-7B4F-4174-873D-BADBC79EEF03}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{27E14B42-A614-434D-A351-CD7E51B8542B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{28041877-028C-4757-B069-EFD642534AC4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{28079301-ACD5-452B-8F71-0F436A1F6ADE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{280AF69F-0110-40C2-88B7-A915007B5454}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{28780142-3063-448F-B70D-9590990B913B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{289F3BC9-5759-4EC2-BE9E-4FF7D55F2EFD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{28C61C73-5281-4749-AF9E-232D67BA364C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{28D369C4-5621-43FA-A404-64614B6AA2A3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2941D25A-F1A1-4AC8-8507-7834B9418246}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{29674C6B-916E-4B12-BC69-7F1CCAC5EA86}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{296A39CA-A2CC-4703-BFCE-BDEFA78D5E34}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{297AE203-6F10-4637-B9DB-6CB47D0A5C38}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2985F418-E8E0-45FD-BDE0-1B0AFCCEECA2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{29D5C9B7-F8C0-4D2F-BFB1-19F6AA423915}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2A5F28A4-1857-42AE-B038-84315C435552}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2AF3901C-06BD-4420-80C9-655F991139F7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2B0A567E-7951-46A7-AB57-747838A0EEF1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2B281A2A-7B4A-4AC7-99B0-B0B60121A299}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2B2B01FC-FEAF-45F4-80C9-B141C82522E1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2B718E78-D9F2-4373-A4FC-014717D34940}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2C11C504-0F0F-443D-AEE4-A9C65B007FBE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2C3285CD-1195-428B-A841-C6B8C9186A14}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2C3C12CE-F263-447E-81E9-C66287B4956C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2C7F21B2-DB9A-4BED-B266-A134E0DFC308}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2C920932-66A3-4EB5-A6C9-37589115723A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2C974BE6-8B26-45D1-9AA1-A824DF3369BE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2CD30E7A-B42B-4F07-9BC1-3438DC5B7F3C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2D15E79C-9DAB-4364-9D14-BB96CAD557F1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2DCAC319-238D-4F31-9D23-8E74D049CA0C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2E19ED6C-F251-400A-9AB4-4E81E2745B31}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2E2E9948-2AA5-497E-AEBE-2FD4E03B2CD0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2E5F6616-D2BA-45E9-A784-ECFEB6F9AAEA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2EA3189E-BB0E-4386-9966-420836E7EF74}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2F2A1FA2-788F-4A4A-B5DD-F8992954F359}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{2F3F96F3-71C3-474E-9528-CC830B4E6B8B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{30342C72-2DA1-46E4-84F8-6B91D648FC80}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{306961C0-104D-4ECE-8CDF-E4C954FCC765}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3074FB15-F65D-4EDB-B83A-4EA271CDCC67}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{308C3116-5A8A-4DD2-B607-DE588B9BBC5A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{30AA0811-F6E3-4A3F-AB37-2E45ED7B7D3E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{30C0F76D-66DE-4B1D-B83C-D82C4294CE66}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{312C5091-2732-4016-9300-467B83EA214C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{314B2A7D-AD3D-41CD-AF00-3EA97ABD274F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3153B008-A0C9-4C13-AE61-B0923D8CCE0B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{31DF25BA-0093-48CF-A212-04FEC794FE9D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{31E0B5AC-5CC3-4C1B-A933-2197907BB2D5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{320C259C-D40F-4A31-BA36-F79CD108777F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3210353D-4894-4D4A-9EA3-091B763EEA6F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{324F2779-AFB5-479F-BEA8-D615BF45EF7A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3262FB1D-8C72-447D-B154-0E43EEB7DA6D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{32A5C3D5-A713-4E79-9C87-F6677E2310F7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3308F7A4-AF67-40DB-8C31-DE6E225701DD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{330C2DE6-26A1-40D3-B6A6-A05EDCBF2058}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3325F69E-5901-4377-A348-E4F28D1FF44B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3389AD0F-06D2-4A9A-8C6B-970FD8D60627}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{33C2E861-8BD0-456D-89B3-D2D96044337F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{33EDAE62-2D71-41DB-A84A-8662FE675DE5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{341A8EE0-0D94-4269-9C44-5E742C686417}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{34313C65-5983-4044-A6D2-05EE621C78A0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{344AA1A8-E3A4-4B80-9510-B897075AED9D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{346D00A8-F240-458A-B8D8-DAEDE7FA1642}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{34740432-89DC-4B6F-88A3-852DAF6212DA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{34F4F47F-728D-458E-A1A9-E3A58AB355AA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{353A8983-0282-4E48-B48A-07B7BA2891DB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{357DCE30-4FE4-403A-BD00-7C826C191668}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{35910765-0842-4367-919E-F4F732DAD313}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{35C23A32-7B62-4AE0-945C-808B30024196}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3633715D-BA98-4ED9-AC9A-8104C353B0F7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{36374F12-6CBC-46B0-A4DE-5CC25D990F7B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{364B4430-7E35-4722-B896-734A2FD7B29F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{364C3224-3745-41BD-BC85-F53C89CD0460}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{36C1D34A-492F-4FE2-B31E-61E0C2F8F8AA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{36C6624B-3A11-428B-A686-1D485045D9FD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{36CB80FF-E3CE-4763-8D03-8E267AB1CA12}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{36CCDB87-E03F-4511-9FDB-A6564E1EDD70}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{37170299-B056-4ECB-8C25-FA436B399C26}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{372D65F2-5237-4CD6-B6FA-A922F2834B10}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{374552DF-E9FD-49A9-8B82-C61801F4760D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{374B3B53-2F3D-49DA-A7CE-D19D34283657}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{37C700CC-E76B-47C3-BDEF-B621AEDB988A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3803A483-C45D-4994-9C05-F6C0DBF83FE7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3861D73E-560B-42CB-94B7-40418F76624B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{39215361-02A5-47BF-B12E-CFF58AE82A00}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3986C331-6C5F-478C-8897-2ABC8C4F0E92}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{39DA220A-9260-4A95-9D50-E9DF94E11B74}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{39F6146D-D2A1-42C0-9240-BF3CD9475305}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{39FB6B78-0676-4449-B954-349345DFA737}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3A32C162-2839-420F-BA73-C19C10A2ACA6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3A9496CA-E1E7-4256-8001-30BBD6BD7510}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3AAE12D5-6147-4719-9BFA-CBA28AEF3B55}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3ACD6232-7B6B-4435-BB45-C825B78DD9E8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3AD29C6C-7ABD-4F12-B5A5-0118BB38735A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3AF1058D-D1A6-45F9-92A6-AAF72FC8DFE5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3B0027EA-0107-4A13-8D12-0396C273D520}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3B8C1D26-0BAA-4225-855C-5A88466F55AC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3BA2BD5B-B9C9-4640-AB2E-877DAEB6EF15}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3BB62061-D976-4F37-A228-A36A933EEBE0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3BDAE197-AC16-4479-A183-0DFE54E6AC64}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3BDD7FCD-33A4-4C54-87D3-5B7707849125}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3C220F28-5380-4070-AB59-D479629619CF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3C88F7BE-2F3C-41F4-A2C7-37E20BF9AEFE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3D5B48FD-A541-446E-ABDA-C7AA73A096D2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3E55B714-10DC-4F8C-A67F-1FAA10A09182}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3E69FE47-0AE7-4548-8508-5CE969CDA9D1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3E8E26F3-6BF4-46E0-B7DA-AAEE3E6C45AE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3ED05E7D-98AB-49C1-8DB6-4413C8A2A602}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3F76894A-FCA9-4692-9D0D-C154DBF7141D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{3FEF789C-06BD-4B3C-B8C7-5D2BE8E5BA5D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4042A039-A5B7-4C8F-BD15-84C994CC47F9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{40525ACC-DBA6-43C4-BC1B-91457F657CF0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4101E315-D31D-4D4F-BE0B-7D9B0EB81D3B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{41415D88-5147-470A-9F04-02CB55867974}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4149F41D-BFAE-4DA8-A8B2-0A3C41872E7E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{41A11057-91AD-4F63-999E-A19A78F2F89D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{41B688CF-C1D9-4161-9D07-F19257E38D98}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{41CD2170-2DBE-4EAA-86E9-8065B852B714}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4266F61B-2562-4168-AEAB-F7D4F5EEE45F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{42A993A0-2A1E-458D-A623-B2083C6F3E97}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{42B9E337-2E72-4211-AAEF-0BE480DA0BC2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4310E9BB-FDDC-4D4B-89AB-79D952F65D3E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{434FAF7C-1307-4308-805B-32C895A8ADD8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{438771D2-D716-437C-A464-3BA7BDE546F9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{43A02FEC-524E-4E2A-B000-1AD31E59BD58}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{43ABDB94-1914-43EB-9663-314840F3B2FF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{43B064CF-00E0-4FDA-BA6B-4C3C13D627F2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{43F75353-5F88-4D97-8789-346C147216B7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4421BE5E-A0F6-443A-AD42-97232309C56E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4422EF6F-AD0D-496D-9F7A-EEF24195332F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{442B1AF0-15A6-4EEA-A7EE-061D76822E1D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{44321C64-E7D5-4007-B292-51788E3279CD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{44754AF1-05EC-4AE3-AE19-239BEDAE2984}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{448F5538-F686-40F4-8CC7-25E622164EAE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{44A3CADD-3684-47CE-867F-79D9CD63B222}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{44E4CFC4-7F71-4F1F-A5F9-570C4E4EDEB4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4504DC42-3A21-4674-82E5-2DC491ED3F84}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{45158345-39AE-4796-94C2-50E8CE0BB751}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{453F8DDF-91F5-4D07-BFBD-636604A7AA24}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{454ADE1C-8BC6-43C0-A5F4-583161CB2DD3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4561B77F-77A5-43B2-8045-EFFAA60367EC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4616D301-8E59-4BC3-ADD6-742DA58A5E3E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4669A76E-E829-4D74-99B2-43B4DBAB7BC2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{46720E8C-4455-4B39-ACA2-C438B9A15D63}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{46877E23-2A5D-490A-88D1-CDB7FE0FB96C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{46F6E528-5A8B-4870-891C-D4F0283BACBD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{473C1D5F-D122-41A2-BF31-B18C505455DE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4742A5B4-D00D-4AD6-B3F1-D4C1A4BAE56F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{474FAB28-2504-48B8-871B-8FDEB7296EA1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{475D4D5C-8671-47D8-B461-5B02D2EFBAD8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4792B98C-DE57-43F6-8B15-EEB107A364B5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{47B70F75-DF0C-4F08-8C27-DBE8EFF42B3B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{47EEE796-0F22-41E9-98FD-BC2F2C2A8A35}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{48173BAB-F284-48DC-BDFF-3EF8B29FCDAE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{482D8CE3-9ACB-49A3-A6ED-5B07A52F65AB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{483C9D39-9437-4BB8-A4FE-236A7F5245BA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{486E6890-0D62-45AA-A002-ECFC38CDDE73}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{489FC95B-3B7C-458C-A1D0-0DFEADD390E4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{48CAAB22-0C02-48FB-B451-D7A2CF13EE97}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{48CB44F2-5595-4681-AC75-4CA4B76E54BB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{48CFEC78-4B4E-4303-8CFC-EFBDB57E4383}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{48D09ABE-0869-4777-BB0B-CA28E846454B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4915F27F-EFCB-4D87-A1BB-58B1638FFFCA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4921423C-F9EB-4A3B-9AD5-0E26E7AD0D68}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4923B0E4-4FDF-4801-89F5-7114C1A99A02}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{49367374-8CF4-4EAB-848D-8DB7341098AA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4937CC37-7601-4F09-8905-F6C421877DB3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{497B013C-7F2F-4474-B903-726CA30ECA38}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{49AE8000-B1D0-4F1C-BB26-C614D2338CCD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{49B94AD0-65D7-4F2A-8815-DCE32F8CB987}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{49FB21CA-7F9B-4964-9AC0-EB97D7FB06A3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4A34432C-0A42-40C3-BD55-C59425FB8CE1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4AE059BF-E7BF-4A2E-B4C5-52D9C889F76D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4B6E8D28-F54B-4C7C-BC17-D3B9BAB1752C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4BAE80CB-3894-4955-9A5E-D9C93A3995B0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4BF07F16-9160-4C4F-8E9E-B83E211F3ACC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4BF705D6-7096-44AA-8811-E2002CA360AF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4C28EA15-E1DB-4578-AF94-69F2BED4C1F5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4C2AEE75-1B8D-4D02-A2B2-C3EB15079BA7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4C5C7502-99C0-4AAC-8886-201BE9A5B62F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4C8771C1-16DF-418D-BB24-ABFEB467A4E0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4CAA327F-0BD8-49AF-9AE9-F84B383A70D2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4D5D9EF8-2352-4FF2-B148-C52C31413C74}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4D743702-9CFE-40B3-BCB6-848DCF515959}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4DF498E0-2AC1-4699-AD8E-F91CDB641A3F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4E19BB1A-D84A-4F3D-B619-EEA685A92DF6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4E44D882-BF63-4C3A-AA32-E47A5A203379}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4E8BBAAB-E316-487B-A8C2-BCD794D03176}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4E9507AC-A5F8-45F6-965C-D3C8272FD292}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4EAAF237-9F87-4506-AA32-2E3C35C2752B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4EC980A5-73CC-4BC2-A443-86C90ED6BE80}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4F2D33B6-E65D-4875-A15A-48F6E559861F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4F4DBB01-3B68-4FA3-A56F-C2BF3F50D15C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4F54E4B3-47AB-4BBF-8B9A-C8733F98768A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4FA8B5CD-60D7-45F2-A898-1DD7F7906107}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4FB1EA5D-B588-4752-83AC-C9BAC9B81F55}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4FB4ADA9-4C3F-4A04-9181-F9FF6F989E9B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4FB8233B-9A50-433D-B229-0C067B02B503}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4FC99548-1CC4-47BC-9B44-027856DF9F6C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4FD92FDC-750E-4B02-A278-26ACADB1842B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{4FE477EA-7557-4017-A42B-3B924DBAEC7F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{500C901D-5C7C-4A26-898A-731197981CA6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{50490776-25ED-4BE0-A9F6-57BD5763DC68}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5055260C-7282-4B6D-AFE9-EC947202E86D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{50A117A4-FEB7-4A72-92DD-A892EC138F8D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{50BCABDD-E2AA-4557-9A72-A9C59DF682A7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{50C78A27-C4FD-4E38-8BEF-019FBCFC006D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{50CE4507-670C-4335-8A63-FD5255830C1F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5124EF05-E7D9-4E73-B03C-A981E4402A06}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5152848B-A9BB-42F9-B8C9-7C92AD16408B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{51747373-7CD5-46E6-A276-894F6E2579E8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{51945D77-1914-4975-ADDA-0154D37CB9CD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5229FEDD-606C-47A2-96C1-885DB243756A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5338BD48-0367-44CE-AB1B-48AA5924A1EF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{533CF63D-558F-4840-A5EE-94ADD9190377}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{54164176-D503-4786-9E93-4D0CCE4C91CA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{543CF1C4-1C13-490D-B0FC-6009934B1F9B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{546D6EF7-2FC7-4CFF-8A91-FDCFAC56437A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5489BE3F-FCAF-4617-9A05-932FA71CDAF8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{54B8CC0E-FF31-4821-AF3E-7C3A5017BFEC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{54C84B8B-EEB9-4CCA-AECC-14D6BC087206}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{54DEEF6B-C2F0-4CE0-A033-9688C06331D2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{550CBB93-D910-4B29-AF1F-DF6C73EC1684}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{550D109F-0FC5-45B1-AC6B-3D2213E65978}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{552D6D40-6FE9-463E-929D-DB81A0CD00A6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{55363BA5-2BC9-4F5D-A2C3-A57AF4BC62B7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5560D65D-0912-4168-8C91-3FC157F265BA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5595C45F-555E-4BAB-9B88-13F3C42BF2BA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{55B2625C-0FEE-41C7-A361-A24867766028}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{55C7CE44-8E21-4EE4-9718-F1ABF2C9863B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{55D76690-93C3-4FB0-BCF7-B209D33CFEC7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{55FEE0DB-AD8A-41CF-BBCC-9CB74260CE46}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5625A93F-7417-4A0F-B9D9-95C9642CB3FD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{564C33B9-5E84-46EA-AC05-824169617288}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{569E976D-1530-48D3-A472-1BB744459AEA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{56B00C52-AFE4-4579-8FAF-800408FBEB76}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{56B263EC-33CF-4F5A-8DC3-C5B06D4B3BFA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{56D24D32-CD43-4E30-9B78-B36803A9655B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{56F74F49-0B46-4B6E-91BF-5383B49F6841}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{57375E5E-9F8F-499D-A2AD-F0E9A0BEEF69}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5739F1F0-C1A5-4145-B0C1-B75CC4DE5820}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{575D88AE-E6E3-4F37-B4DD-746789F05789}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5792E40A-903A-4B0E-98D2-1A913700F90A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{57CED7DA-7B0D-43DD-80C1-FCB26E8CBF55}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{57DC81BB-B8AA-44BA-9004-694B87890982}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5802874A-7C7C-4155-8A8A-96D6C89BB739}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5808F1EB-B3A6-4174-BAC6-EF03C39364B5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{581F6E77-84FB-4D0C-919C-8C8031D8E214}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5834649B-D445-421F-A477-56DD06E8CA14}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{587ADBDD-D462-4D0A-99B8-A08BBB0C0E17}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{588D7E96-B04C-4152-9256-845F8E1E9894}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{58E6BA63-4EEA-49F4-AC4D-945BCAB1E613}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{58E75F0F-BD75-4EA3-AF29-C3E1B57FDE67}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{58EE4062-9CAF-4FD3-97A4-C01AED7BD6CF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{59150DF1-DE5D-4B33-B8E3-067EFB8BDF9F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5932F1FD-81E4-413C-AA3A-84378CFC1421}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5944C3AB-4350-4EE2-A788-AE61ED6E51B3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5951F453-F00D-4447-B0C8-2CE32B917008}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{595CF85A-DBD0-42C2-96F3-DBEF71D7119E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{59D7282E-F38A-4699-96C4-B80E059AEB2C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{59DA80F2-37A6-47A6-A36A-8C3B3967BBC6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5A90AECE-66E1-4033-B1AA-97ABB08144B5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5ABFF25D-9752-4B76-8400-055DBEE177A3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5AD570BF-6CC6-4872-BA26-C9CBFAE0C4DF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5AE0752D-8152-4C8F-9CE0-E6A0D99E7815}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5AFEDE8C-FA1E-4DC9-A00A-DE4C500C694D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5B0D32E7-262F-4CB1-909C-F6E8BA4D923A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5B329311-9575-4028-9F57-326B7F8C9EF9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5B337982-48F0-4C68-8CB6-8F00AA8E90C7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5B886EFF-CCB1-4551-B753-E631C4ED3EA3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5B90194E-C5E4-420D-8329-6DBC5F84921E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5BA9050C-7E14-4999-81BE-2D033F4AA064}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5BBAEF7C-08A1-4ECC-A7ED-08C055CF174D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5BBF8FDB-AEC7-4E2B-A273-1CCDCCDF7078}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5BD6F1A9-A966-4744-8D2C-FE695C26ADE1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5BE1CEE0-552A-4FB5-B30F-895B30CAF6D0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5BFD714C-89F6-46D4-BB4B-57B0A89A7FA5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5C59BB9D-EE2A-4455-AC8C-E22B92855D1F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5C8C8640-C907-49E1-9715-B5CC92CCE574}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5CB12149-FF3D-40AE-9DDE-FC0D3A9C288C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5CCBDD7B-5FFA-4E30-BEE4-A7D81DAB4FA1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5CCC9AA0-F1EE-4BAE-A918-5862F6AB4E1F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5D3313C2-93D8-4E2C-BC78-85182F97EA43}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5D6EB924-AB5A-4B97-A4C3-4F799CF044FB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5D8C1E2F-935F-483F-A20C-8B6B9AA148DB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5DA17814-DD08-4BDB-B2F1-8628383D4069}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5DAA63F9-0B95-4518-9401-96A74CA2B15F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5DC00785-2CF4-47CE-9AF3-300C701DBD56}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5E40121B-24FD-4176-950B-09C569D78318}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5E9D91BC-BE0E-4E44-BF24-BAC9384E0096}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5EB0DD30-7367-47FF-8F9B-6DA313F9F382}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5F0C271D-E7FA-4C94-90E1-4F7EF82D751B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5F1CBCE1-0DA0-44F0-9F42-F8E1E8794F91}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5F8FE379-A6B2-4411-8B61-66A90C01CD63}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{5FA820E6-C6CE-4A57-969E-4679D7EAD613}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6040B59D-3C79-4F93-9A0A-3296ECCD440E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6069E48F-6B58-4564-95D5-4E19955FA25A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6075EF6E-9D81-470A-89F9-0257EB87D85A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{60949FD4-6401-4CC5-862D-3CC565F362DC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{60990FA0-22E1-4FAD-9611-174EC316DF5D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{609F28F9-72B1-4A15-8D62-740857543FFE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{60A3A265-C2FA-43C0-B133-DC09B2082261}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{60CA3F9B-B5C8-4B31-AE3D-0BF7AE390D4A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{610DD637-3601-43EC-ADD3-1AF2FA7947D8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{611164AB-E0EA-4509-83BB-3B0D8DAC8BB7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6165A6E5-8A64-4084-AA02-6CD53BCE2B37}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{61EA284A-4666-4F63-A8D4-855CE939949B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{62051305-A98D-4682-B611-9A072A23CC9D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{62091E67-DB05-4E16-928F-47A550ED1A01}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6213CC57-3F35-42F4-9B04-D2FF2F2623F0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{62328A1B-1E94-4B8E-8620-BC369B5ED5CB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{628FAAA5-8187-45A3-9757-0138CD0D8353}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{631132CE-F80C-4208-99FC-0006391885F3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6364FF21-1332-4A3E-91F6-850A6B1A35CA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{63CAFAC6-E548-4A4F-BE0B-B63D895389B5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{64014ECF-D0F3-4A98-AB9F-24FBA402F778}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6404AAF1-AC90-4610-AECD-8193AB903DDB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{642485B6-D3D9-4BFF-BC45-E8F9891C27A7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6464D4E5-BDD6-4813-A994-E45E7DCE037B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{64A0E1D1-C4BE-490A-AFD1-FC8DA0E7E3AF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{64CF14AD-312E-41BE-8A19-AC8F6196CF4C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{64E9177A-C6F9-466E-9CE6-5D8FD7E1179F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{64FD9C7B-6198-42E5-9E50-799F3597BA10}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6591C307-CC92-45B7-87AA-FE05EBF171CD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{65A3DE47-E7F9-46E3-B09B-EEB960C491A7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6604D373-90D6-4C2C-8407-6A5331B07164}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{662A77B8-DF88-4FBB-B879-001B8E957C49}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{66D844F3-262D-4538-8222-AE950DBFAECA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{67064476-DBC5-4AF0-BB5F-DC1243A79377}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{678D3BD1-EB5D-4DC3-9249-3C8FEDDC7D86}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{67F5D93A-385A-4032-96D9-7075DE35A258}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{68A38F59-F058-4A66-A818-B79E6FCB336E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{68A57272-F19B-4221-B7C3-BD8DE3A1CECD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{68C1CC2B-A892-46C7-BAC9-3836327B33F1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{691AA323-5216-4905-A255-160ABE4259EB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6938DE54-99A6-4838-B948-7DC23A730A7A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{698627A1-19D5-4BB2-A70F-077FE6DAAF06}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6993D2EB-A9F6-46D8-B3C2-C68E04CD222E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{69D30870-2F07-4A0F-AE05-803F819C3640}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6A02CA1F-EA60-407A-9BF5-D3653FAFA57D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6A1681CB-9BC8-4CE5-91B5-98774BB7B926}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6A36BDE2-C0FA-430E-96EF-E71750177C0B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6A9695B1-E2FB-46EA-A7E1-0BDB406260E5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6AB63538-3401-4735-AEFE-1787108192C8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6ABE4D64-7BC6-4C25-B266-55AD63FC85F2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6AC6E1A4-1C4A-496C-8B0C-51D00B42EC02}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6AF16021-0DC1-4E92-82DE-8A29BDC50A97}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6B7FA689-309B-48A5-AFB7-01E271CEC10D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6BAB4E08-3450-4215-9080-A8C2E861DA38}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6BBAB501-8287-42B2-888B-85FE8056BDC9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6BC46788-849F-4E78-9BB8-806704A60574}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6BFE65E2-5574-460E-A09E-3F9A53467169}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6C0118E1-4964-47B0-BDC3-43B30AFD53BC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6C0CA160-513C-4121-BD88-CDBFD9CE6CA1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6C7CF4C6-6DF2-4E0F-AD91-90C6C974E11A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6CCD5A50-AF11-4A12-B354-CB17C62738E8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6CEA4103-962D-4C82-9805-FDD8640EDAEE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6CF2F99B-BFA3-4683-9E86-9FDAA5973683}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6D163AAE-CF44-4A23-9572-5BEEF7C72AF3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6D352C90-78D9-453A-8748-F07576B5BF1B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6D90FFF8-CFE8-4CBB-B613-5339DEFE490A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6D97F47E-45FF-435B-91DE-D0D1CF7BD0B9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6E6D17BB-0E45-4E4F-8DB6-B04ED13C1F75}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6E9D743F-2CD5-4DF8-8990-5F18D2C63A30}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6EB42951-944E-4C99-BD5D-D848FE5844E4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6EDA7179-6219-4350-B16A-1598E1120344}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6EF5F1EE-42D4-45C8-A6DD-1A3936568CAB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6F65D868-393B-4484-8CA7-A957FF80201D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{6F98D4E7-D5E5-427C-99E3-3A001BC3CEF5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{702BFB6E-224E-4F9E-BBD5-44C48B585DA4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7044AFAB-48D9-4791-8D0C-981C4B388C9E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{704C7D48-2ED4-446A-8B6D-4E12BD1CEF9A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7053703E-08EF-4BE3-881A-11F839A59694}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{70734B1D-67F1-4554-8C9D-B9DB9D9C28CF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7095A8CC-DB65-4BB0-84B3-21390956152A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{71A11EDB-A297-419A-AF8D-72C681C575C7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{71F306CB-1DA9-415E-B3E1-453A1C5A2D20}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{721AE248-F3E7-4523-8A71-4F4E2CD53A5E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{72557B54-F30B-4925-B678-A48249EFA670}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{72902E75-7A8E-482F-B2B3-0F1207440A46}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{72C2B760-3D92-41B4-B904-354D689DB321}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7374E0A7-A6F5-494C-A3BD-E0401004D9E1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{737519B4-BD27-43D1-900C-D4574C3EB388}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{738703EB-22D1-4D71-AB15-7B4EC8534D3F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{73D20F96-CB3A-48D8-B93A-114BE3E9A59C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{73E048AC-AB8E-410E-B574-37A01827CF69}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{74239B2E-956F-4E10-BC0D-CB421CC76300}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7441CC55-3C3D-4135-83F1-529DFB99706B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{74A09AE8-AAFF-412B-8D3A-6B5856B2A510}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{76353FE0-0C93-40AB-9E22-E36E317810FB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{76503254-4074-448A-B581-484CDB4FC1F4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{76666102-345F-45CD-95F2-381AB8EE58DB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{766701AC-6BA8-4C77-A9C1-92E51066C7FF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7688E4E7-FAED-4C43-85DD-AC554EEF8896}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{768D6D1F-EE15-45CC-B8F0-63C2D18029C1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{769C61E4-3D1B-4ACB-9DED-446310C46DD1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{76FFECCF-574F-4BA5-94C9-D432F8F4C251}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{77249275-E514-4DA7-8602-11DFAA7F211A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{772C7C2D-417B-486C-A0B3-5F8A94154E71}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{775584C9-B572-4D16-968A-8D78756D2DB3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{775ED181-12BC-44E8-AE8B-F447B2FE8E70}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{779A6F45-B8BE-47C1-894E-E65DBDC777DE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{780E8B14-4627-4C8F-91AF-ECC21CD58790}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7871DCE8-2C6D-4B75-BB27-A2A16525F663}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{789CF0F5-3F36-4052-BDB3-7DE285EB9149}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{790A185D-A61C-4F14-A650-65F1A882D4A8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{79BE52C0-B8ED-401A-9439-C32A5D9B2FEF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7A621DDF-4C95-41A6-9B99-A69B4BFE55A6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7A6C0671-7664-4FC1-90B0-014435A78AA0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7A817360-8552-479C-AA8A-957CD6CDC877}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7A8482EF-69DD-45B3-94F4-EABC6F289FF4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7ACE61C3-0D14-4CEC-BA89-D96351447A80}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7ADF1D8A-BCA7-4AD8-9E10-177501867131}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7AE2F552-DACB-4A9E-8D60-C83E1ED4FE37}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7AEA12E2-FBB1-450F-8BF9-B451CB22CF21}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7AF03E83-D381-4D1A-AB33-634C8E2BA779}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7B3B5C66-30AB-40DF-897C-4A141EC01347}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7B7CFFB6-36E2-435C-862C-DDD53F5F9DAA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7BEC8198-8C82-4768-A405-C2AD0C9AC109}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7C0E5E94-26C0-4A84-B981-276976B22D52}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7C0E9775-FFB2-4652-873C-3C4BEF8E862E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7C59D113-1320-475A-809B-F6D1749197AC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7C830F11-E65B-4BC8-B2B8-5A8597FE180B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7CC23B22-39C2-4F38-AD44-ED1355A6C58F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7CF0DF9C-32B5-4546-A29F-9685F2048ADB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7CF3C7A6-AA22-4701-A2E2-613BDAF2C612}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7D539CAD-D349-4EB5-A5F3-7A13E61AE0D9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7DBECDD0-E54E-4AE9-9BB1-73CEBA127F96}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7DE94445-C212-4405-8F9D-8C548398418D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7E2A08B1-48FE-49D6-9ECC-AAE6008B2250}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7E6E97D4-75CC-45AB-AC1F-38D8A59109FA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7EE856CF-6F37-46A1-82B2-3CB2E0F63D2B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7EF7C795-D714-48B9-94D0-0FCDEB70403B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7F363219-F231-481C-B3B2-09AFE0A69B66}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7F5025D7-10F6-40A7-AE3C-5724C06481C8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7F6744CE-DAFD-4861-A347-9C33EFEEF4A3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7FCFA370-49BB-418F-B879-00F87F8A5614}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7FDDDAE2-EEAC-4EE7-ACE7-8FFE25EFF141}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{7FFBE2F3-5F37-4F75-AEAF-237ACDC97C44}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{800FD73B-73D0-4ABE-93E6-4865B872B1BC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{801BA5D4-E272-4CB0-A8A8-299AA8FDFC48}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{802E4FA7-C4AD-40A7-822D-FDA99EB425CD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{80388E20-B17F-4170-A16C-7A44A61F2078}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{805776CE-7F4C-44D6-967C-A92522BFF072}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{80823DA7-09A3-4CD0-A1B6-E82B57A814C0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{80A54E52-86EC-459F-8C73-B4AADDDF4980}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{80BBAFE6-130C-414B-AB8A-5136D42A59C7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{80FACB57-5C2D-47E0-865B-20EA2674785B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{80FB1354-0BBD-4F04-BD0A-352A34EE8D7F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{811570E9-6350-4116-A69D-E9131118D10B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{813E505C-3FF5-4D12-BF2A-CFF61C27CCA2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{823ADF71-D1FC-4ED9-9883-049660DCED29}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8257C5B3-FEC5-40F9-8566-99598D064606}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{82744346-CBD6-420F-A943-2D906B7C8B08}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8294E357-4BD8-47F4-A26E-38505159AA87}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{82A0F047-C75B-4819-8DAD-4983E3A9FCFC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{82A572E0-E20C-4FF4-8DA0-0F4E1C3923FC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{82E32A94-FA64-4BEE-A1CD-5E29EAB32874}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{82F18817-C1A0-44EA-9596-DA3EE4B9F9BD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{831D4303-5153-4958-83FB-13461D1F7D39}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{834D1771-C9C0-4E9D-93DE-11EA1E16756D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8354A671-57FB-4678-9CE7-09D7E3D5B75C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{83A188A6-53A6-4798-9CAB-33F858C050A5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{83CFB1FA-F9AD-4066-A4E8-B0DF5DECB1CC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8416A415-2784-4912-8930-96112D040B72}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{842C4B2F-5F0A-4207-B1F3-50C5093A392F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{843700D2-D520-45EA-A0C6-D27AE601003C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{84562F01-A8B7-4CAB-A4B2-9AA4EEB659DB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{846EA799-2954-4A35-806B-AEBC4196D1F5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{846FFA84-40AB-4524-9965-89206305F0E8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{84BD3070-6A10-4D40-944D-15D02FC39C09}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{84C79A4F-DC47-4A7E-A213-120B388297F3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{84F27DFB-7F19-4270-BD2F-B3BDE97C2832}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8504C089-04A0-4F40-B71F-08351DA204E9}

Saschaico · 18.06.2015, 21:27

JRT "2. Teil":

Code:

ATTFilter

Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{85141848-A5F4-47C3-9AF1-6BCEE564AE69}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{85188B69-FCAA-4444-9A24-E45EB92E2A44}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8544458B-FC4E-4A1A-8209-3FCD50242C20}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{857EFEDA-946E-42E7-A98D-5D9F9034F23E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{85D00285-B8D9-49E7-8497-7DCDB39E36BD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8626C844-A3C2-4567-943B-46291CDE5B04}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{863AB692-ADCF-4C07-85C5-CB771C1E4CA8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{864C4F5B-0D8B-4755-8535-00F61680FAE6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{86892103-13B8-47E7-A02F-B74B441CD7C9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{868C5958-1F5B-4358-BAE3-AE827CD8DB3A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{86A36C6E-B84E-47E1-BD68-AF20F8E84091}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{86C5AC17-DF50-4631-903B-8AABE850EE97}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{87523B60-3D75-441D-BA71-FCCE266971C9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{875ED0B8-ED34-4F1C-9873-45C697369C18}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8794276F-E1E8-4328-A8F2-7316071143C2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{87AEE3D0-0FC3-4F09-AFF8-41E728B1F688}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{87E5B84D-502A-4074-B87C-BDA5DD81FBAE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{88054966-ED47-4C9E-8CA1-60E807D95C8A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8810BC30-6338-47CF-A9D8-64F101BF020C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8823A55F-3C4D-440F-8EE2-0013EB5DFE47}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{88A4421B-996F-42B4-84E2-6A5F84ACDD75}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{88F66E4B-8077-4180-BED7-5000C9074C26}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{890D3802-EE51-4649-892E-F7F95609F093}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8958DC2A-D852-4A96-9700-E437FE972202}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{898EAFDF-9C6C-4858-92C0-20771E3108F1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{899FD506-9E9F-4D02-A564-DB5528465EDF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8AE6DE68-508B-40A4-8174-E24AE35BC6B1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8AEC0B03-A549-4077-A450-17F1AD3A0A8E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8AF6CBD0-D4F5-4523-9D1D-38EAA759C6FF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8B3F3C90-95A2-4CAB-99DC-DCC26A68F426}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8B71734A-4150-4A59-AA00-CAC10CC41C97}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8BBE9307-E0E8-4D87-9F1D-F7CDD2C709E0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8BCDB1FF-EBCC-4E51-9F48-D7FA36E007FD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8BE8EC52-C76E-4835-87A1-2EAD3FACC1A3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8BF8E041-3B70-4B10-9750-2B5766C7AEFB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8D22522E-E0A3-44B9-BF72-21A5EEDAA193}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8D818D7B-37C0-4A76-AC18-5CCA4B69BCEF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8D9F125F-8C44-489C-8FA7-9BE82E40EC1A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8DDCD106-3E7D-4E0A-BCD8-8448F8AA6C17}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8DF83DAF-06CB-4298-8B48-13717605A00E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8E191803-3490-4DFA-97A4-73740802709B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8E74FE1C-8C02-4818-B20C-6178B8A1A8F7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8E9EEAC4-CA48-4CF1-B11E-698BF0D654D8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8EF8B2E6-24C3-4DC3-94BF-B2CB15E22E97}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8EFA1571-B7FA-4FFA-9357-FE5200D9A146}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8EFD6B4B-1DB0-4872-9598-83D4284B0848}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8F4029A0-4933-4B69-BE05-E33231772231}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{8FBD8BE0-173D-4B8F-AA59-EE725AA9CC2B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{90039966-8A7A-4BB5-8DE4-93069D2AFCB2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9010C677-02BF-4FCA-BB74-6DEE4A57AEA2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9014F0C1-0412-4062-8743-255FD0D767D9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9019F744-A788-40D8-8A54-0B4159FCE373}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9063A748-99F9-4A1E-B39D-D8D6B5865889}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{90D66428-7264-4455-B485-2615F70E479E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9124296E-529D-49EE-AC95-AA5F47692BE4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{913377F2-719F-4388-9B96-46B71B6991AE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9148A76F-4B52-4B9D-935D-3DA96B391427}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9160F9D0-7E69-42EA-A01E-18B9B905E260}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{917BF4D2-1515-497B-B261-A3CD87DCD010}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{91AB5764-6A37-4715-AB04-9DD935D4269C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{91BDAA0E-EC42-4D83-B1C6-0BA54D357EE8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{91D1D91D-7901-47E1-B222-3F77F6C18C5B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{91D416F9-D6C4-4014-A3CB-76D051DC4FFC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{922F61CE-8F06-4259-B816-166A2E304AA7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{927018ED-EA37-4E44-B859-29854679558E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{92793248-E54B-4413-B4AD-F801435CD5AB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{92AB4C83-2C99-4173-822A-8F6B7FB93AAC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{92BECA1F-FA3E-44BF-9533-768B52F21235}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{92CE503B-1A44-4255-AB15-298F8D4CF80E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{92F545FA-5F81-4676-9219-803F7F54A46F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{93043942-3D92-401D-996C-7515BFDF0009}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{936F7E5F-0B33-486E-B11C-DB4A389FE5C3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{939080D0-E6F3-4982-92C5-A155C3828D90}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9462DA31-51E7-4333-BD8A-E049DD8F670A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{946D0D9D-96DF-46A1-8065-151E8EAC65A6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9490BAF0-7421-416D-B519-D8681D63C4C5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{94BA1E3A-266C-4034-98E4-9A97EFB8FC41}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{94C4FA98-F9EE-4BAE-80D1-BB193C506345}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{94DA26DA-A98E-44F7-AE8A-12F7EC5A6E1D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{95B2D2EE-C632-41D0-A36D-99F49D99B204}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{95C3E473-5C4A-4F36-9D1F-74B3B86D1810}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{95E5B049-0F2E-441C-B55E-F2A03D00F856}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{960E8915-50A7-4D60-8FDE-950D06234D88}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{962E89F8-C444-48B2-96DD-9615CC2E0C1D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{96AAC308-A6E8-4337-A8A1-80EBF535E7C3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{97517132-E96D-440E-BCA7-0CBFF9E8B578}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9755CEC5-7182-48A0-82C6-F6201278B14A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{976241DC-32FA-4CEF-83C2-F1B66DAE6CCF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9792C7EF-FCC3-42B3-8148-35F4442D014E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{97934309-0C4C-40EA-B967-97FACE3A489F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{97AE25D2-73CA-4364-B015-C29E579F84C9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{97F297D6-C84E-443C-A9A2-6E1F1F2B55EC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9803DBF6-90FA-4BC1-AB23-2FBC6B2B160A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{982AA500-83E7-4488-A924-FAF835E8576C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{983A850F-DB50-4729-9561-826B2EBBAF93}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{984FDC65-8E3F-4FCF-B60E-D3B8E646254D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{984FFCB4-FC1C-4E09-B43E-05F409F91508}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9850FFC3-E90F-4953-9F9F-2CE622D07117}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{98512EEF-7B57-4671-8431-F27800AB4CC4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{988416C2-F4BE-44B4-8E9D-84943C7A045D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{98A2EC9A-4549-4543-B099-83FB7AD9DCFB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{98AE76FD-5181-40AF-9A47-36C5B94B29D1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{98B072A8-7F9D-47D1-B199-4320FF82BF3A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{98FE8876-F784-4156-885D-5FE645A572A1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{992928F6-5A7B-42E4-AC84-06B4CDA17F60}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{99A33241-B11E-467C-A4A6-9B4600589301}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9A0BEAC7-E536-442D-BBCB-D3C3446CE784}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9A13B6DF-CEE9-4168-8D71-1E6A1769575F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9A29FCB0-EDF4-4263-B093-5631018E858C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9A462FBE-AF60-4783-963E-30BEF82B624D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9A7AD66D-0296-422D-8B6B-7F5AA2199923}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9ABB55BF-A9FC-4EF2-AAC6-25EAE7D496B2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9ACF4B7A-2753-4C21-A667-6DB144EE107D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9B2A073D-91C6-4A65-9EAF-7D934CC4E176}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9B39C4F0-D1EA-4FD3-8635-6B0D6B8D08C0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9B51B70C-8E8B-4D1C-A62C-90855577006C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9B71CB00-9B99-4C22-BADE-9587F4E475F8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9BCCA2CE-38F8-40BB-839B-343FF4DF0192}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9BD492BC-527C-4DCE-B967-C05E396C5698}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9BD86142-B57A-4DBA-9F2A-AB6F367CDAC6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9C124971-1EA0-484D-AF25-89153F53A488}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9C1E628D-932B-4266-9D4D-0E7CC339C4E5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9C6E4D48-E50D-4DC7-8D90-904BF8F0B162}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9C7505FB-46E0-48D1-A15D-10643AD00FA2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9CAC5E2E-945D-4D94-A50B-BAEDEC1EBD25}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9CAF56D6-3554-4642-BD61-03D681FCCA2B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9CC308EF-70EB-458F-BCA3-B194AB7D5B49}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9CDFA7B8-AE57-433D-A8C2-C9DD5353EE19}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9D289F1A-19CB-4B71-BD61-6ECB23E04643}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9D3311A4-EC50-4DAF-B9C7-D085EBFA5F6D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9D3988C6-7500-430E-9B05-79B66DADCA86}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9D6362B4-828D-44F6-BF96-50E32C4F3AF5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9D74E360-ECA0-4BB9-B150-0C97CEE1CC92}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9D76356F-49AF-4B9F-B2D1-5F993CA795F9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9DAD6013-8384-437A-9542-7DF8D3C7E2F0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9DD301A9-691B-44DF-9008-BC6DCB0AB346}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9DF093B0-1FCE-4029-A158-8647322F1B52}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9DF0BF09-ECD5-42E0-99C9-D2C09F11D1F4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9E51E13F-5358-4E8C-830E-2B3E4AA08B44}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9E5937F6-2A63-4D8C-A15D-535E88DF8A8E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9E88366D-D402-4BE9-BEB7-68C0E7434CCF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9EA46CC7-944B-4375-8EF3-49E89A7B6146}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9EC38287-26E3-4122-824A-616290E14285}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9EF379A2-8A85-4DF2-B2D0-9881F7F09546}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9F14D6CE-8346-495A-907E-7A764791817F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9F45C9FE-65F3-4154-A2F0-F9442FED826B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9F65AAD6-2BCB-4C71-91AB-BE0091639564}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9F7D8C56-2113-4DE5-8A42-3EFB2DD358AC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9F884A21-AB23-4653-9BA3-87B08647FD31}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9F925F1F-788E-46F7-AAA1-1EDF4EFA3F9B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9FC6D351-9C4D-4DF2-97AD-A9ACA13E2362}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9FEDD1AA-9C65-459E-B538-F036F6B4F934}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{9FEFD589-6F88-4EC6-809E-35EEDD0ECFCD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A00F8237-E2AE-4F7A-A783-34C8B773FDB4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A08F7816-79CA-4F7A-8AE5-DB1D2C9F434D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A0D35F0A-DD60-4D0E-A71B-103B3A4A1C86}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A148DD79-7A60-4E1E-BA57-398EB2F900C6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A15148D5-4FF3-4E8B-B12E-287FB352C050}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A1DA8889-7B85-4943-BAEC-A74741057A6A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A22ADD60-5CBB-4A0B-983F-FCE8130B5F5A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A273962B-69DD-40BA-9556-DBE452CEF179}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A2902040-29DA-4245-AE3B-4B5C56EAFA45}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A2A284FE-16B9-42EE-A753-C7E8E26DF4C8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A2CD0548-F47C-4E96-86D4-76C9041F03BE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A313F038-45BF-49CF-A24A-2E4340FE8BE9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A3164B23-F397-40D5-BFB6-93071D2F16CB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A325D69C-3790-4A40-9D03-8E0C1CA911CD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A339BE13-427E-4804-8AFA-5930F8EF87FA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A38E3023-A58E-49C1-BE44-1D4B1F40FDB7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A396FBCF-5895-4DDA-B2FD-91BEEBDAF6E6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A3B108FB-DEE4-415F-B747-3EAC56C534BB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A3D17800-829D-447A-99E5-D3459F77DE70}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A3E12B34-5500-4097-ADE1-0D7559A787F8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A3E35E44-EE0F-4321-8D47-98DF5629AEC0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A3E85565-4256-43C8-B73E-C4BF34DACA6F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A4161170-FA19-4B9B-A532-DA7A0A39CF15}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A43ADF34-1B45-4A8D-AD25-B035269AEF33}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A4A5DB6C-1F6B-4B3C-ADD7-146ED105468A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A4C607AC-BFBE-4247-B1BF-AD66353E90C8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A4CC114D-9FD6-46EB-8073-5D7935B03705}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A4D6912E-C900-426C-A5FE-669AC617484F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A4DA0B9C-420A-424E-85B8-F64988BF75C5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A4F33C66-2F70-406A-B34A-C7F75401F04C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A50AFB56-BA5E-41A5-9E60-CEACB87CA9AC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A51169EB-C95E-409F-879E-793DE57DFD28}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A5444ED8-C545-4131-A51C-78F3470E77BD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A5571744-071B-4809-A981-40CF2360B256}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A55D27DA-919B-4777-B7AD-1990A3DBD0BB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A568FCF5-8EB0-4BCA-B558-EC58A5FA64A0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A5861F99-4AF9-403E-A0D3-BA60C8E4A0F9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A5CF81FB-0FE6-4F73-8768-B324FAA2BE38}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A5EEF134-1A54-4EF3-A406-6126FC316585}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A5F147FD-72EC-492A-BA50-AEC5DF3E21A3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A61AE84F-0A4F-4F0A-9A5B-56F68FD5E2CB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A65AFB75-33DF-4029-86C9-54E6E065810A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A665BEC4-526A-46CD-85B4-806FE70BA987}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A69900A1-5394-457B-AC45-AAE9591B33C4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A711BEE7-AA2E-4330-BA48-6EFEDAB6F7AA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A722A081-78D0-402C-81BD-7296C8E7CEE8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A759EE8D-7457-4A4A-B591-689C7A311CD9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A75CD7C9-6E49-4CB9-A9BC-76A0F11A0309}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A76479C8-6014-439A-90C0-873830E080A0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A89FEAB0-7BE8-408F-9DA1-AD95C8A42083}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A9263557-539F-4D72-9730-6D9E1184F112}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A92B1B14-EB49-4715-ADC2-16006DE43B0F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A93AC29D-9BD4-49EE-9C6E-8DE7A2A7C416}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A97EF0E7-04B9-4F65-9B9D-F43C426A6927}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A99316AE-AABC-4190-B6D1-DE8746539DF2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A9A6779C-8720-4848-AB28-BCD1BBC81573}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A9DEED0E-FA4E-4DA0-BD7E-565FCB3556F7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{A9E13D7D-085C-4E9F-A334-EE9880313597}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AA42F2F3-AAB9-4981-AC1C-AA57E147E98A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AA7121A7-C18D-49D6-A1D0-9AB46D8191FE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AA79F51F-D37E-4CF0-A2C9-92C124A225D3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AA9607A9-A3C8-4D2F-9B9F-B168A122D117}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AAC0DBE2-0B91-46BF-8745-580DFB3DD5C4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AAC21F3B-1054-4345-8B2C-4C7D0BCBD876}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AAD674DB-C87D-41D4-A936-B77A7760A4C7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AAF86A33-1821-45B0-841C-81F301AC95A8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AB39C9E9-D4A0-4ED1-BEE0-9DF171738BF0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AB63D3B9-DDCB-436B-81DA-FDA244583CB0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{ABB47A3F-EAB7-43A4-B838-D8FDF210ADD3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{ABFD3EF5-95FE-4F25-8CAB-14811BEC10BF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AC449A67-3EA4-4829-8975-EF02014BCF9E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AC565896-4C21-4F83-A155-4B22260186AF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AC5D32E7-CBAD-4A31-96A8-D43DE912F675}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AC64D058-D1D7-4816-98D5-1936BFCE9BB3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{ACAD27C9-8F3D-47BB-A266-3AB0D8D7F0AE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{ACD576AA-0C84-44D9-AE65-8DD9DDE6A1B2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{ACF59D30-380D-4186-854A-50B10C50DD24}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AD59F1C7-7A88-4D16-B555-6C6F2EE983C9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{ADC2EEC7-E985-41A4-80D4-0CCF7C8B213D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{ADC351FC-AE31-45B8-9FDB-814DFC3BB015}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AE27E781-CA03-4DE7-A6E2-6EF0FAA065F2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AE4839DD-470F-4403-A315-10B5DC8200B9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AE754FCE-6513-42F1-B895-35193F418058}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AEA0EF29-D44C-4FFD-B421-65DE8997B5F5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AEA9D76F-0D2F-4332-9013-E5B19B950D26}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AED26B34-CF36-4940-B4DF-2CF1EEEBFC82}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AF28587B-B47C-4A44-974D-3B95141C3DA0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AF3FBD89-E106-46CF-A426-890AB27C23F9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AF435883-BD49-4D73-96E0-1B344F27E87D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AF8D57A8-F121-46CA-AE1D-31F8100FEF3C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AF9AF652-5423-451B-91D2-A87610CD411C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AFDDED83-953F-4496-B882-FD00981BF2E4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{AFF9C51C-143B-45EF-8B96-9C983BC938A3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B0AA0B31-1764-497E-B6BF-C9C4CA74A49E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B11DB54F-81C8-45B4-B194-A94F6F14941A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B1350F55-61B2-41CA-8514-B11E4BEE15E9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B1489333-F36B-4EE6-8D63-DB802C4CE817}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B152B129-EA84-4D96-AF6F-F2CF700654FD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B17B91F1-78D7-40BA-ADCA-8BA4FB62F3CE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B194D14A-6A5E-455B-83B6-F840DB593CEE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B1CB9464-48F3-4E60-820B-08610ED2D72A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B21F9EC6-E75E-43EA-BA8F-F19860970AB6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B227AA8E-808F-4ACE-9768-8E478F09F430}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B2605ECB-224C-461C-B882-78F972C6FD6D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B2608963-3AB4-42F0-82CB-9BC3299BF248}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B26CFC5B-EC16-4D8B-8776-7F3DE1B43C0F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B2B28ADF-A54D-4B48-9858-F447AC0D3007}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B31400B7-F051-4A6F-B75F-15C2BD2E70CE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B321FA77-A19A-4F86-9C28-15A98C6C9CC2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B38DBB1F-8FCA-44B7-8D6B-3ECC236DFC9D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B3BE7C9D-D44B-4425-AE4D-EE446DDC522F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B3CE3610-4DCD-45EB-BA7B-C7C6C545AE9A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B3E7D10A-D84E-464F-A996-B20899129AE4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B3FFE055-9BA3-4409-9512-9A9F73BCB701}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B420345B-7417-42D5-8548-FE3372444FD8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B4E50378-F002-4D4E-9572-E351C1203EDE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B4FFFF75-CD84-484D-B457-CEE8B6CB3DF1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B534365C-0EBE-47C8-A169-6FBD68B38BBC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B54D776A-4FC0-4EFA-AF93-B87F37AD0CE5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B564CA0A-C3CB-4F1E-881B-32C03B248994}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B5D80558-FC77-4F24-A657-6BF3863F9B8F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B646AAE7-34B1-4274-856F-2E8BAC0F99BC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B64F40EF-00D8-4CF7-80AE-08C350105EB9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B69026A9-94E4-4B1A-B8B5-750FB3C16C87}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B69F9D3F-9662-406C-8AC1-B835D6411B51}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B6F579BD-369E-4085-B650-A7B69BA1CECE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B71D5CC9-CC3B-48A8-93E1-4E7EFF36CB29}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B746BC96-54DD-45EA-ACAC-1BF8C188C931}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B7FA1AC7-6F2F-4FD7-9483-34AC609A97AB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B81E506B-EA6D-44B7-ABE0-8CF75B04DF76}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B8644C10-B43E-4261-A64F-DD605A4D347B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B8D60FA1-150E-428F-AA71-742BE76F24E3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B8D70771-E03C-42F4-A12C-044F7C298403}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B8E128ED-2B65-4243-9996-48662F735190}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B8EE6746-4B6C-4311-97B9-D63C28F9E28F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B92CD5FE-E94B-4C56-A0EB-1D4C031986E5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B97968EC-A4AB-4956-9F09-2AF610655DFB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B98BF62A-F61C-490A-8099-27EDB498D504}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B996DC8B-5D48-4F6B-A0CC-BEEF0D6A25ED}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B9A363D2-7E9E-4465-B686-F46840657BB9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B9AE5086-BCFE-46BE-BC33-B44F097CCA01}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B9D7C594-C363-47F6-A67F-5D4FA3AAF742}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{B9EBFAC5-C1C3-4C0B-B86F-8CB8D80D93BC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BA1AC118-BF2A-4685-9A9F-565E9454556F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BA3DD44B-ABB8-466F-AF6F-E238375F2F0F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BADF83AE-6B08-4E67-B9E6-9B59CDEF6A99}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BB2CDB06-CE79-45DB-9568-28F3EACBF8B8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BB33C00E-42AD-4096-B16E-A345A51CB71A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BB365B9A-BB48-4550-9732-E81514D745B4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BB4A85F2-BF89-4F1E-AD9F-754A76EAAC5E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BBB2FE1F-B06E-44D7-A698-FAC9A598514D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BBEBD8C1-DFB0-43BE-8E3C-C50ACCDE8484}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BC14AE9B-B1DE-42CA-A65A-C2BB880F5AE5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BC210DB2-B7E8-456E-84EE-E8011AD3CEC3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BC529776-F8E1-43CB-BAFF-B62295306AF0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BCACBBEE-B888-4A25-8D52-01C161725FC1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BCE473C1-E005-46F0-90A1-69E21D438FE4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BD0A4C8E-A76A-4DCE-B969-DC66E9FF7F02}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BD226AF2-4202-48AD-B7AA-0238AE56EAF6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BD2D2363-7F94-49F0-9BAA-3DE97C8D2586}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BD34CB23-3B66-4CD9-B961-EFC01B51B182}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BD94AF5D-1AED-4848-AC94-9575E0CD0246}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BDB2274B-B246-4CF6-BAED-B4265493D6E6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BDD2EBD1-7D9F-4146-A1EC-C7EFA20F5AD5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BDD37FDA-BDCA-4168-9132-0EB6E4C97763}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BDFC60D7-9CEF-42E8-A9D2-1F88E37F9C30}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BE002D15-F769-4572-8BB4-97B49128E60F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BE19D581-5531-4F0A-B15B-C2506B00761B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BE1D1218-3879-4ED5-BB17-B1E1E2EF1C91}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BE318C3A-FDC1-4E3E-B4D4-120E175DF3EA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BE7D0B60-A620-430A-A484-66B18FAA5C73}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BEAEC65B-0A9E-47DF-8FCB-3E0248F80D60}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BEC195CF-6F9B-4F63-BD2E-09E77EF06FC8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{BFBACD1F-F171-4D38-9990-90EB46945E67}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C068EFB2-FD38-49A5-BE4E-15AA862AD454}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C0984A99-BE38-4E22-80DB-ABAF34A68282}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C0BCC724-2BCD-452E-8810-2A6648CDA99B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C125D79D-6D12-483A-B720-E72B481E994E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C1CC1E27-9E98-46FD-8204-CF870D04BEBB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C2553459-1C43-4BFD-A7C4-56A3993117E8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C2E288F7-938F-433A-A9C2-E4E2026DD101}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C33180BC-B9BE-46FF-A311-C3D112BC06E0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C345105F-46FD-494A-86F6-21247A3D5D48}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C36069F5-3554-47E4-A88A-B03927DD888E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C385C09E-36E0-4B1B-93B6-EA9BFA977836}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C3DD32D7-6AF0-4A5E-A94E-EA7BA497E21E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C3F0D857-B658-416D-8A4D-E48968210CBC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C4587FFA-4125-4DC9-90A7-B6F50C17F0F8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C45A651E-C008-466F-88C1-11EFE052EE26}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C4872E19-0080-427E-A568-9B2EB916B501}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C4883B02-37ED-4A7A-A6A9-1734A6D424B6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C4B35435-4825-46E0-949F-23A60EDB3733}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C4C44CEC-41D4-4E65-809C-BC673D6F68BF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C5A5136F-F7F9-438B-91E7-E268B10C538E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C5B3A421-7D2E-4AF7-AD85-726366A60999}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C5BB3D3C-F28D-49E0-B2DE-69E79C49BC43}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C5DFA92D-0164-4347-ABBD-6EE0C9DB0A91}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C5F186DE-0092-4023-8266-FBBFF6E6E15A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C5FD03F3-229C-4C74-8AD7-0497AD8143E5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C6095E43-EFB4-4CA2-8EEC-02F20CE57A2B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C62F17D2-C867-4F70-94C4-F6060181B28C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C63EC0A5-DCC1-4094-82A9-8BECF089837C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C6447B3E-D2A0-40D8-B685-FC66C11280D0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C6D37A47-32BA-4C85-BDD9-4FA3634B5429}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C6FD5F1D-CB41-4936-B44D-E4AB65464E1C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C77DA556-DD93-4A8D-B030-3DE650FB914A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C79B3D1C-ED3E-40AE-9EBA-2FBACD442832}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C7AFDB9C-21FA-46E1-A3D3-85E06B18BE3C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C7F09E4F-15D1-4A95-AF76-196B107D78A3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C7FB1F2E-2384-4622-B12E-B77B23C7F27E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C830625A-F5BB-4D5A-9E3D-B0BF77CA00EC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C83F033D-0FB1-487B-906C-7DD9D08848F1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C873AD64-9BE6-4DCE-8B1B-87921EBF6275}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C8AE00BC-C287-459F-A041-9E707A700A54}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C90AA4E5-7413-4538-A848-77787992DF19}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C92A58A1-858A-4204-87AE-93C47DF2BA6E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{C96B67E9-CEB4-4870-96CA-5CC7EDD84083}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CA16006E-D765-4E95-93B7-8CBBB2DFEB10}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CA507327-599E-468D-B8F4-62BCA0462CF8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CA6A6AF8-6EE3-4B0C-9587-2DAEE22FBA1D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CA879B5E-136A-41F4-8E8C-85A137928AEB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CAA43190-32AA-448A-8CA5-779645268255}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CAF13CCC-E248-435A-9FA9-4629C8B01FAD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CB14A903-7C1E-4446-9942-3A7D44ADE25A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CB154510-615D-405F-96D9-E4DEDA7CBD56}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CB455652-A1C0-4D74-BFA8-0AFEB7A7DB39}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CBD9F637-6FD5-4829-A166-C8ADB94610EA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CC04F23D-31C2-4155-BB8A-11234DC73C53}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CC1BE42B-CC46-422F-AD44-3E71288DCBF5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CC60AFFF-7DC8-4A77-8F33-CAF55459B31F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CC666DD3-CF1E-408E-8A13-2792919474D2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CC93B3C8-E884-4D2A-9E77-A4F7B77E2270}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CCB7EC39-4F28-4E98-955A-BC8BBFAA7CBB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CD068B7C-1996-44C3-935F-78751738F563}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CD4D8047-D96B-4DEB-A3FE-39B7BDF5D8AC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CD6B240C-818F-451F-B51B-9DAD242CD7AA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CD788CCA-58C6-4D49-A989-E8AE74D13D90}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CD9B125E-2158-4E4C-96FF-71F1AFD8FDC2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CDE57AFB-DBAC-4A0D-B0A1-D903449B458B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CE6B82C4-FD44-4881-89A7-A7B7578CB339}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CE8D296D-14C6-4F3C-8C4B-1890BFDD8833}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CE902B1E-099D-42F9-9C7F-B1FA2D85E7A9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CEF05694-D2CC-432C-8BD4-94E6C5F51D18}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CEF47008-1F10-4B8F-835F-57FA2DCA33B4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CEFDEB95-C47B-4D8B-BE70-AC2902D5F523}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CF0E98A9-671A-4163-A4A5-6E7B3D42AFC8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{CFDDA336-6078-4E00-892E-7ABA9999BE3E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D0365595-20B4-4BC2-957F-6431C189E01F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D041428F-C10A-4F3A-9233-E51F0856BD83}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D0721F55-01B8-43BB-8B52-B69EC8F1C27A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D0A58A29-1CC3-4BF2-8167-EC9791679BD3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D0EA5C00-BED1-49AD-ADD5-EBC1229B91F9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D0F5A2FB-C0D1-4354-8996-B5184717380F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D153305A-A614-4523-8779-8EB61582BF8C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D1791454-18C0-4EAC-952A-D50A1C8F82D7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D17B7999-93B4-40ED-AE9F-DCA6D9EBA6A9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D1DC63F5-7A4E-4935-B22A-9D77A7AD19F0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D276064D-F6C6-4025-B984-50E2084EDADF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D2AB6DA8-B647-4D78-8812-D20368336873}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D2C88012-59A9-4A71-A62D-63B05F1AB53E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D2CA93F9-B703-4260-B23E-C019DD32D0C7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D2CBFD3C-B708-4E4D-AC08-54B0EFD7506F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D2D15478-0236-4D8E-A158-C1894A4F2602}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D2DBE5C3-B878-43F9-9D84-2B46DEEC65EC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D2E5681D-791C-4F55-85C9-D1DEC54EA8B7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D2E997C8-7471-426E-BB17-2328A2F8E1ED}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D2F7C042-F092-4184-BFC1-B9CE94F5DF56}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D33492F0-7EFB-420F-A17B-1C299D7C6C3D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D33F27D0-176A-442E-94B3-8A07925ACED8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D34220A2-D0CD-47AC-B94A-CA2464E70B23}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D35331A0-2619-42AB-B135-6C882870AC7C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D358206A-BBC8-46E6-B832-50D6A8BD7B4A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D38A411C-CB02-410F-AB7D-6E61DBB329A5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D3D62B41-073A-4BE0-8BB2-3617BE405658}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D428E56D-E3FE-43B5-9C21-DE08FA86E8B7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D43F1B36-3CB3-471B-B43C-30B5D6246A64}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D47DBDFA-F2AC-48EB-8D9C-C20865B3635E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D51B0FCA-6A51-48C4-8431-BF0A95CD3DF5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D52888C0-497F-494C-A057-28F203F83259}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D56B2AEF-2144-4331-A75A-FE43500EFCBB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D59AA461-D2A9-4048-8DC6-2B2E6F3F0753}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D5BC46C7-5493-4B9C-A729-B7E94E3D2EC7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D5F64B49-40F7-41EB-B598-36C55D50285C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D5FCC71D-7630-4FD4-8CBA-7C51523E544B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D6375BA1-AB26-4A71-9129-FA7638D56661}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D645355A-3999-4A42-B990-941A673141A2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D64FBE6F-574F-4DA8-8CCE-42387CD03B8D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D6C0FCDB-394B-4B72-A507-9DED1729CD14}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D6C2C8BC-2F97-4364-B037-2FFADB94E065}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D6C3359D-600E-4AAD-832C-F58DA18A8D89}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D6D5C059-4B4A-44A8-8C68-2596E7148B0A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D6E164C8-6AF6-4669-B963-78158B963308}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D6E5B25F-6B64-4653-A37F-82860433EA63}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D724D367-A46E-4641-8C92-35D354C0994D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D871A3B7-2B57-4DE2-A4A8-C81C9A13D400}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D8B53F1C-9CE7-442C-BC77-6716B0444728}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D8DBD664-7045-4044-A5C3-AB78F976728C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D8EC9C5A-79DC-4A12-A939-1BD6D9012A6B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D9150424-8137-4E5A-AD04-314B0F634963}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D951AD46-37C1-44FC-A506-46B1AE2C12C7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D9524C20-BB55-4677-87C5-AD368F768514}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D95CCE36-ED17-4B73-83E3-54432078BE80}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D971209B-E9BF-4DCC-B930-BDC0E85D8314}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D9846358-936A-4900-BC06-39FF752F5F12}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D9890A98-A059-435A-8108-90DE1B11507C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{D989B3AB-5808-491B-97FB-4CE212E132BF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DA5B8B45-F3AE-4EEE-9B4D-B5E00B3CBF7F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DA876C12-8B8C-4B83-AD01-C952AB66732F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DADE31E0-7363-4965-A168-068A530197E7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DAE403DF-B494-4D0A-B8CF-CD173728983D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DB40BBB5-009D-44D3-805A-FCAF581BE605}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DB5239CE-8C39-4957-A1BB-E80D4E26F20A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DB53FDEC-65C1-45F2-81C5-CABAE9EB6E18}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DB6CA71E-72E6-4B07-977A-3A62A4A534DF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DB70009E-2BF3-4290-995D-489FBF333A0E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DB8515B2-86F8-4DB3-9551-79A3D42F178A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DBECE1E2-BAB7-444E-8E7D-5BB29CE74933}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DC26E0AF-9762-43DE-BD88-82F14101882C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DC2FD68B-BD91-4704-8BDE-B3DECDE4D1F0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DC44314F-19D9-4FA6-96AD-CD93FABD5BAF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DC4637FC-F2F8-4BEB-ACBA-DAD615A972AC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DC478DD7-0206-4824-A117-B75A14B25B51}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DC4FF98A-A112-4254-BEBF-7A74C966ED7A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DC561930-FEED-4F4E-B410-3ABF8FF1A30E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DCAD1332-CB37-4ECE-8B83-10A017390C89}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DCE30404-09B3-4562-8159-A04C704BBAE3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DD5C6B17-1DE9-409F-9455-E64D6E9755F8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DD63524E-DD75-4434-95F1-5709395B0789}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DD84DA5E-7B0C-4593-881E-43A51D372695}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DD8F450D-082E-4CCA-A4CD-80F7A52CDB9C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DDB8C4E7-4805-4D03-938B-55984CA4C9B8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DDDDA699-0CCE-4708-B76C-1EFA0EC1AC3D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DDE98B09-FDD1-4195-B709-7A3389A48FDB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DE370433-7FDE-4249-B3AE-D50DD85FF56D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DE4E53AC-1A52-464F-80EF-0C1098D858B7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DE4E7C87-B263-492A-81DE-ACFB364143A1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DE55A6F4-B35C-4C14-90F1-172585D88714}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DE78A015-78F9-4177-BA2C-09BE9A3941E0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DE7A3813-E9A3-49AF-98AC-745C417A198C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DEACB6FE-B5FE-4D47-B107-FE6F79469B9A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DEB3932B-D212-4A63-87D2-4BBC228D9C57}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DEE0EAAF-F339-40EE-9C81-CC68E035531C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DEE33DCC-DCB1-4FF9-857C-717FFE41AA11}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DEF1274E-6911-4D6A-87A9-7BA472F08D07}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DF640255-52A2-454B-A4D1-F092B29DEB90}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DF6FC6E3-B7B0-434E-BBF6-1E0ACD36E4AF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DFA0188D-9357-40B1-B533-D6BC78C963CF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{DFEBBCEE-BC9F-478F-B2EE-9AEE71B71FB7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E0047DC1-D534-40EC-B2EA-A60D9F35D453}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E01ED94F-214D-4BD1-88DD-659E8B46464E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E031023D-364C-4EB0-ACCF-BB891C265130}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E084E548-DB46-4D83-B884-A06902FECADF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E09205E6-8F71-41ED-9A99-7D4F833F0377}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E0D1284A-FB7C-4327-A1E8-E2722A81A742}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E0F17B07-C751-4E87-A664-72CADC61E898}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E0FB190F-A765-413F-BE10-EA925FB9EAED}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E134C5E6-1B89-4B55-98F6-E29EC48C6E98}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E1D14D26-A4CF-45EE-B3C8-574620C99E9D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E1EDEB43-D8D8-4548-B36B-4C22012C5C16}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E256DA27-EE0B-4AA2-9885-D70559534E83}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E275FCCA-A085-44F8-B4C4-0F0EDEFB56B5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E28B44F5-15B6-45E2-9324-A7C60E344A54}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E2CB1AC6-A977-49A9-8394-CBFE6DF8CE05}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E2FEA0D6-D29F-403F-9953-419D81599A21}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E316FC35-895D-4A0B-AF1B-5A4FCFF7D53B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E34DA88D-874C-43A2-B196-59185AC9C483}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E3570234-C71D-4DB7-9FDB-EE2569930FF1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E389D24E-6E8B-48FF-AD68-2FB25FE0FEB4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E38FC974-2475-4090-AF25-C59785B313DF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E3B94E97-47DB-4639-AC4B-2F415CFE28E0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E3CD0F76-B4E3-4E40-A9D6-0801D6F84440}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E3DC88DF-3B77-4C7E-8199-4F41367FA678}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E42160E5-EE75-4130-ACBE-1D65110AD03E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E42CB009-EC0A-481F-B6B3-8BA2286D3741}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E44B63D5-8FBC-4D1E-A949-B0A1D46FF703}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E44CC6C4-FE64-4C62-80E3-DE482AD71D53}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E4867CBC-EC41-463D-A60B-96CCA5F3129E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E489BD55-B629-4CE9-BC53-BE507BF753F2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E4A652BE-F1AA-44B6-8F69-4947AC0FDF44}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E4ACEAD4-DC4E-4AB5-A6F8-B0B04782D610}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E4D15BE9-F498-4920-855A-4CCB285FE9AF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E4DE4760-1F38-4F84-813D-619B799B5BC3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E4E87DAE-9EB7-4694-B5E5-C96C2524C19F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E4F724BA-5C8E-4A14-A32A-366BA8C337B6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E4FBB1F0-E9D1-41D6-86E2-6B6066AE9D8E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E4FE0C5A-0557-4B22-85DB-BFE28BA87790}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E516500D-5281-4DE1-9C02-26953AFDDB9E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E51B7092-AC23-468F-ACEF-31320E22E651}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E51DA909-03CB-44E6-80A7-5FA984695BD5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E5F84AEF-E421-4D14-9FAB-490429747C10}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E60AC099-6E2A-4D36-9233-5DD94F6D6E5D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E626404F-DCB6-4E41-9A7A-155D057794ED}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E64CDF3E-ECA3-43A5-BE2A-584F3A660C07}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E64DAF53-54C7-4305-885A-D89682C026EB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E6A22AD8-9046-40CF-AAFF-7D3E59A3877C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E6CBDB91-D5EE-4F19-8AB8-0BA58922CBDD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E6DB618A-4B8E-4B27-A974-EA329F173D4A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E71FF5E7-B1C8-4BA8-A446-FE0081A506D0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E75DF50B-E273-41B8-8118-C73504EC3BC5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E8406179-F3BA-477E-A72C-3A981FC94BF8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E84632D2-9B2E-4B01-94FB-265CC8BFA308}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E8568C3B-D079-42D4-9B5D-694CDFE46711}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E8C78442-1B6B-44CD-9757-2D2FDF315897}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E8D7A8BF-9377-416A-BBAC-4783D7C9080C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E8EA5312-F0BB-4C6C-B535-E41BD9652B3E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E9AFFAFE-F603-4E7F-B3BF-E6454714EDF8}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E9B968BB-3357-42E4-878D-DF7A26F0454A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E9BDE969-0BA3-44E6-A5F0-B7048EB4AA51}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{E9DABBAA-ECD4-4C59-8357-3AA1C8D6E679}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EA54AAA5-6B45-4733-B8C3-14C64641926A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EA739001-3663-4DDE-AC32-3AF18013EB24}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EA8489ED-0F33-4F0B-B499-D79346D49E62}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EA88EEE3-B894-4531-A08D-A6A5133F1804}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EA92BC23-4887-4DF0-8302-4D5738DC46E9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EAB2F2F8-46A3-4E6B-9235-5C66AA0A2767}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EABC15FC-0A51-4E1D-837A-7B3B6F5EA9C6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EACC7C10-8552-499B-9DC6-19286F99BF5A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EACE1FF8-1F80-4CAD-8192-F1A34BBA088B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EB3901D1-12D1-4158-9183-D8F045909739}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EB8DFA08-42EE-4575-98CE-99C4CDAB0AAA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EBA25B2E-33E5-4D5F-B36D-04772F2ACF2E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EBE4512A-CC95-4DF1-A134-8A882FEBE15A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EC078D43-6077-41A4-B1F8-6D59D409FD35}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EC8B25CD-00FA-4FBD-8833-C4C12EACB963}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{ED5191A6-7ABB-4053-9228-732DC1E67EE5}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EDE63BE2-DA7C-4801-B68C-CB3BDF8809B1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EE2005CB-DEB7-4717-A5EA-6B71762422C7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EF5918FD-1261-4D26-AE5D-3E30AFE33D0C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EF61153C-2E82-4AAD-8288-C06950D41638}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EF61E9FE-6529-4B96-815F-85756DF45DD0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EFF3F864-1322-4DF8-B75A-5818AADBE0FE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{EFF936E2-2BC2-4394-9C67-37E319AFE668}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F01B5EB1-4CF2-47A1-950F-D40EE5930C91}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F01D336D-71BC-4FCF-A1F6-38B1A53FF34F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F05FF0F9-A20C-4FA6-ADF0-90A30C262838}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F0A69EA6-BCFA-4462-AAA6-F2FF0BD07C68}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F0B1F539-DC6C-4248-BCFC-88E1C706DBE1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F0C7CD59-1CC8-418C-B87E-80043BC991AC}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F0FB806C-964D-455F-84AD-BCF2CE5B73CA}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F11B2AE1-5936-4418-A79A-C7D00320D390}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F136D994-F0DF-438C-B0B7-71C72F814DC4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F142832B-3D0B-4E85-9808-675C7CF2020D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F1680092-0E29-4C08-B34A-8BABA9087ADD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F1829DEE-EBDD-4739-889C-1A461304268E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F1B18721-27D4-4CB7-90C7-2C1EF650F9AB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F1B5D45E-9F77-4245-9A4E-3CDB933CD484}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F247E2F2-B599-4E2A-8CB0-4E6C89DE3F88}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F3246308-E1F3-4E2F-955D-96D5853B119F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F32F2601-26DC-4D56-B808-AE3F198EA7CB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F353666B-0A10-4D6A-8F97-AC4DC51599CD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F35A84C2-AE95-4222-8A9A-4D699EC57E7D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F35DBD69-847E-4173-B260-EFF6CD0CC077}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F3DFF4B6-A7A7-475E-A7A5-765A238C74F4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F41F8AE2-D236-4BAF-8C7B-27437C094747}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F4466F52-3445-4082-8958-FB3FF5D02732}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F44DEE6D-8DDD-433E-B590-5C0EDAADC8E4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F45C4C9F-FDD3-4B8E-A30B-41CC6F1A92DD}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F46881FC-17AF-4F86-9FAC-C403572F51D4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F47F2EDD-ED82-4FF5-B53A-D9C714073604}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F49FF1D0-8408-4F8D-B830-F04B940E3AC0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F4B3AFDC-2548-49FE-A99B-4517D910607C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F4E29B09-7077-41DF-97A4-749566C77B4E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F5004117-B978-4964-B69E-BF6254CE037C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F5040968-306B-4E2E-B61C-7BA7E6AC74C2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F50A936D-E788-486D-982E-8DA62E0D3A9A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F518E0E9-211A-4EF3-8CB8-4D83E8614000}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F51CB33F-9DF7-4455-8978-CA4C18E9438E}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F53CB1A7-90E1-4553-ADBF-1A0C02D2B032}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F5649488-820B-4B03-B11E-B098CE80E17B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F569E924-7544-4366-8ED8-4A342DFB6B53}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F5A46617-E97F-47D7-80F9-8EB6CCEB48F9}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F5AB7F7C-8A28-4278-B487-0D27EED8F829}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F5C83F2F-951F-472E-A13E-7575C34B0405}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F5D51DC2-FFA1-4AA7-B5C5-93C995A8F05F}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F60A7B37-CAA0-4691-883A-08CF95B2F057}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F65E0FD0-4187-4925-BB60-A1D839793B5B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F6E287A2-6DF8-4638-B90B-D95A0EC3B6FB}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F70C34C8-0B5C-4A84-B9A8-6E2EC7B4B445}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F755EB34-D239-4068-8F20-632B1143A277}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F7692DA9-563B-4FAB-B900-A1CCFA6DCBD1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F7B243AD-3E67-44EA-B23D-1004F86B7BF1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F7B5156D-A452-4A86-BFC0-658AB8C1910A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F7B70891-2F62-4705-BE56-AF9CFCDC9974}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F7BF3FC6-9471-43CE-BBF3-A05AECB35D39}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F807DBFB-E68D-4899-8DCA-6A5EA2760ED2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F80A8EA4-049C-4554-A1CB-6368C4A112E4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F89709CA-2C95-47B2-A011-F1382821C87A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F8A5AD7B-219A-4757-B29E-A17E524E3767}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F8CC13E3-6AB8-4E86-9A42-37C9F3DAF9E3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F8D16C06-A0E1-4748-927E-CAA8B251897D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F9265394-11B6-430A-9D12-F112B75CC83B}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F94F6EC2-2A5C-4103-8CFE-74929D149D62}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F9821CFC-8975-45D1-B94F-6F356D735290}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F98AAAD1-0B5C-4405-8428-EA9B86BE0E6D}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{F99A7C35-7555-4377-8743-F9CCA187DA19}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FA01BB52-7B80-4A77-B961-165E3F03A164}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FA47B9DB-D638-484A-A390-0A8F975329CF}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FA713C43-9C13-4E7A-85E3-C9FBDFF9AC71}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FA74697A-1EBE-4D0D-8597-6FF79373BC40}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FAA360EE-C0E4-4FC0-B126-225D03BD1C26}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FAB83A21-85C7-4AD6-8470-D6D9685C2322}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FB6C531D-B67E-4125-AB58-CDBB46C58EAE}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FBB486DA-F5C9-4A9B-8000-0C15BE41E3F1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FBD021D6-DEAB-4DFA-905E-A96C8EA65F0A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FBE39744-16E7-46B2-AA54-2DAB6FB865E6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FC1EE6F1-A924-436A-AD6B-51E434CDA2F0}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FC2EAF61-3713-4FDA-A8D0-336D19A8A4D3}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FC7E48C1-DED5-4835-B3CB-EBFDBD552161}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FC9E575B-CEE0-414F-A469-D323A8A4A95C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FD22B0E0-B517-4878-865C-88F019CBB491}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FD363BAF-D270-440D-99B0-D1416DC97EB1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FD556362-92E1-4239-A1AF-867D13B0D2E2}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FDF9A551-B67E-4876-BBDC-AB1E9449D3B4}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FE49C43F-AAED-4C0D-BB71-3A9CEE0F4568}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FE5DA0AB-4C1C-4C8F-8CBE-25298EEED5E7}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FE80A284-C83E-428E-9121-A21F1EF9ADF1}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FECC19AE-F26B-474B-8E78-1C2D6FD83739}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FEDCD884-3A0E-422D-B232-4312BF5A52E6}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FEF333A1-C251-4B76-906A-A95879DE9C1A}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FF03C58B-389E-4B29-94EA-E4EC87309A61}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FF36D061-ACB7-468F-A80D-15F6D5DC074C}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FF689CA9-29C0-4471-B44D-0A96F71CBD95}
Successfully deleted: [Empty Folder] C:\Users\nandel guckes\appdata\local\{FFEC56E0-4DC6-4FDB-A142-DA4E242E71F8}





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 18.06.2015 at 21:47:21,57
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

und das FRST (da kommt nun - seit Combofix? - keine Warnmeldung mehr beim Öffnen)

:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-06-2015
Ran by nandel guckes (administrator) on NANDELGUCKES-PC on 18-06-2015 21:52:32
Running from C:\Users\nandel guckes\Desktop
Loaded Profiles: nandel guckes (Available Profiles: nandel guckes)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1049896 2008-04-25] (Synaptics, Inc.)
HKLM\...\Run: [BkupTray] => C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [28672 2008-04-25] ()
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-08-29] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6294048 2008-09-19] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1833504 2008-09-19] (Realtek Semiconductor Corp.)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [200704 2008-07-29] ()
HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [858632 2008-12-17] (Dritek System Inc.)
HKLM\...\Run: [ePower_DMC] => C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [417792 2008-11-28] (Acer Inc.)
HKLM\...\Run: [eDataSecurity Loader] => C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [526896 2008-07-29] (Egis Incorporated)
HKLM\...\Run: [eAudio] => C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe [544768 2008-09-11] (Acer Incorporated)
HKLM\...\Run: [ArcadeDeluxeAgent] => C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [147456 2008-10-08] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer] => C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [167936 2008-10-08] (CyberLink)
HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG)
HKLM\...\Run: [AdobeCS4ServiceManager] => C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2565520 2011-03-14] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenuEx] => C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-30] (Microsoft Corporation)
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\...\Run: [ProductReg] => C:\Program Files\Acer\WR_PopUp\ProductReg.exe [135168 2008-11-17] (Acer)
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\...\Run: [LightScribe Control Panel] => C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [451872 2007-07-18] (Hewlett-Packard Company)
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-06-01] (Nero AG)
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856 2009-12-18] (Google Inc.)
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Acer.scr [20221952 2008-11-11] (Acer)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Nikon Monitor.lnk [2010-12-31]
ShortcutTarget: Nikon Monitor.lnk -> C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe (Nikon Corporation)
ShellIconOverlayIdentifiers: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll [2008-07-29] (Egis Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-4207484042-2425227553-2540443312-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE361
SearchScopes: HKU\S-1-5-21-4207484042-2425227553-2540443312-1000 -> {D8F00CE7-E51F-4D50-AC8C-C1811CE5CECE} URL = https://www.google.com/search?q={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO: ShowBarObj Class -> {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} -> C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll [2008-07-29] (Egis)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-05] (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll [2008-07-29] (Egis Incorporated.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-05] (Google Inc.)
Toolbar: HKU\S-1-5-21-4207484042-2425227553-2540443312-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-05] (Google Inc.)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2001-06-21] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\nandel guckes\AppData\Roaming\Mozilla\Firefox\Profiles\a6vdj7l2.default
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-01-05]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 BUNAgentSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [16384 2008-03-03] (NewTech Infosystems, Inc.) [File not signed]
S2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [69632 2008-10-04] () [File not signed]
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2008-11-28] () [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-12-06] () [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [43520 2006-11-08] (Hewlett-Packard) [File not signed]
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)
S2 NTIBackupSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [45056 2008-04-25] (NewTech InfoSystems, Inc.) [File not signed]
S2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-25] () [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53248 2006-11-08] (Hewlett-Packard) [File not signed]
S2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [174656 2006-11-02] () [File not signed]
S2 RichVideo; c:\Program Files\Cyberlink\Shared files\RichVideo.exe [272024 2007-01-09] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 hidshim; C:\Windows\System32\DRIVERS\hidshim.sys [5632 2008-10-08] (Windows (R) Codename Longhorn DDK provider)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-06-18] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
R3 nuvotonhidgeneric; C:\Windows\System32\DRIVERS\nuvotonhidgeneric.sys [22528 2008-10-08] (Nuvoton Technology Corporation)
R3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [150560 2008-08-26] (Realtek Semiconductor Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-18 21:47 - 2015-06-18 21:47 - 00155659 _____ C:\Users\nandel guckes\Desktop\JRT.txt
2015-06-18 21:45 - 2015-06-18 21:45 - 00000207 _____ C:\Windows\tweaking.com-regbackup-NANDELGUCKES-PC-Windows-Vista-(TM)-Home-Premium-(32-bit).dat
2015-06-18 21:45 - 2015-06-18 21:45 - 00000000 ____D C:\RegBackup
2015-06-18 21:33 - 2015-06-18 21:33 - 02950477 _____ (Thisisu) C:\Users\nandel guckes\Desktop\JRT.exe
2015-06-18 21:10 - 2015-06-18 21:10 - 02231296 _____ C:\Users\nandel guckes\Desktop\AdwCleaner_4.206.exe
2015-06-18 21:02 - 2015-06-18 21:02 - 00001220 _____ C:\Users\nandel guckes\Desktop\mbam.txt
2015-06-18 20:33 - 2015-06-18 21:51 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-18 20:32 - 2015-06-18 20:32 - 00000903 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-06-18 20:32 - 2015-06-18 20:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-06-18 20:32 - 2015-06-18 20:32 - 00000000 ____D C:\Program Files\ Malwarebytes Anti-Malware 
2015-06-18 20:32 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-06-18 20:32 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-06-18 20:32 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-06-18 20:27 - 2015-06-18 20:28 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\nandel guckes\Desktop\mbam-setup-2.1.6.1022.exe
2015-06-18 10:15 - 2015-06-18 10:15 - 00012740 _____ C:\ComboFix.txt
2015-06-18 09:40 - 2015-06-18 10:15 - 00000000 ____D C:\Qoobox
2015-06-18 09:40 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-06-18 09:40 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-06-18 09:40 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-06-18 09:40 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-06-18 09:40 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-06-18 09:40 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-06-18 09:40 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-06-18 09:40 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-06-18 09:38 - 2015-06-18 10:13 - 00000000 ____D C:\Windows\erdnt
2015-06-18 09:26 - 2015-06-18 09:27 - 05628161 ____R (Swearware) C:\Users\nandel guckes\Desktop\ComboFix.exe
2015-06-17 08:43 - 2015-06-17 08:43 - 00033286 _____ C:\Users\nandel guckes\Desktop\Addition.txt
2015-06-17 08:42 - 2015-06-18 21:52 - 00014796 _____ C:\Users\nandel guckes\Desktop\FRST.txt
2015-06-15 16:54 - 2015-06-15 16:54 - 01148416 _____ (Farbar) C:\Users\nandel guckes\Desktop\FRST.exe
2015-06-13 14:21 - 2015-06-18 21:52 - 00000000 ____D C:\FRST
2015-06-13 14:12 - 2015-06-13 14:12 - 00000488 _____ C:\Users\nandel guckes\Desktop\defogger_disable.log
2015-06-13 14:12 - 2015-06-13 14:12 - 00000000 _____ C:\Users\nandel guckes\defogger_reenable
2015-06-13 14:05 - 2015-06-13 14:05 - 00050477 _____ C:\Users\nandel guckes\Desktop\Defogger.exe
2015-06-11 20:39 - 2015-06-11 20:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-11 20:23 - 2015-06-18 21:13 - 00000000 ____D C:\AdwCleaner
2015-06-11 20:19 - 2015-06-11 20:19 - 18733360 _____ (Microsoft Corporation) C:\Users\nandel guckes\Desktop\IE9-WindowsVista-x86-deu.exe
2015-06-11 20:12 - 2015-06-11 20:12 - 00000000 ____D C:\Users\nandel guckes\AppData\Roaming\Microsoft\Windows\Start Menu\alle auf startmenü
2015-06-11 08:15 - 2015-04-24 17:54 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-11 08:14 - 2015-05-21 16:22 - 02066432 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-11 08:14 - 2015-05-09 01:08 - 00894464 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-11 08:01 - 2015-05-05 00:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-11 08:00 - 2015-05-05 00:51 - 10628608 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-11 08:00 - 2015-05-05 00:50 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-11 08:00 - 2015-05-05 00:50 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-11 08:00 - 2015-05-04 23:21 - 08147456 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 08:59 - 2015-05-31 02:03 - 12385280 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 08:59 - 2015-05-31 01:55 - 01809920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 08:59 - 2015-05-31 01:54 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 08:59 - 2015-05-31 01:53 - 09750528 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 08:59 - 2015-05-31 01:50 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 08:59 - 2015-05-31 01:49 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 08:59 - 2015-05-31 01:49 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-10 08:59 - 2015-05-31 01:49 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 08:59 - 2015-05-31 01:49 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 08:59 - 2015-05-31 01:48 - 01804288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 08:59 - 2015-05-31 01:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 08:59 - 2015-05-31 01:48 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 08:59 - 2015-05-31 01:48 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-06-10 08:59 - 2015-05-31 01:48 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 08:59 - 2015-05-31 01:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 08:59 - 2015-05-31 01:48 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 08:59 - 2015-05-31 01:48 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-06-10 08:59 - 2015-05-31 01:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 08:59 - 2015-05-31 01:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 08:59 - 2015-05-31 01:47 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 08:59 - 2015-05-31 01:47 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-06-10 08:59 - 2015-05-31 01:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-06-02 16:12 - 2015-06-02 22:22 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-05-31 15:19 - 2015-05-31 15:19 - 00000000 ____D C:\Users\nandel guckes\Desktop\Training-Photoshop

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-18 21:47 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-18 21:47 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-18 21:46 - 2009-08-11 19:20 - 00000000 _____ C:\Windows\system32\LogConfigTemp.xml
2015-06-18 21:24 - 2009-08-11 19:01 - 01238675 _____ C:\Windows\WindowsUpdate.log
2015-06-18 21:16 - 2011-01-11 15:32 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-18 21:16 - 2009-01-22 20:14 - 00000147 _____ C:\Windows\system32\agent.log
2015-06-18 21:16 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-18 21:15 - 2008-01-21 04:47 - 09113396 _____ C:\Windows\PFRO.log
2015-06-18 21:15 - 2006-11-02 15:01 - 00032628 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-06-18 21:13 - 2011-01-11 15:33 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-18 10:15 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Default
2015-06-18 10:15 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public
2015-06-18 10:08 - 2006-11-02 12:23 - 00000215 _____ C:\Windows\system.ini
2015-06-18 09:42 - 2009-12-18 14:48 - 00000000 ___RD C:\Users\nandel guckes\Bilder
2015-06-15 09:51 - 2011-01-11 15:33 - 00000000 ____D C:\Users\nandel guckes\AppData\Local\Paint.NET
2015-06-15 09:42 - 2013-04-10 08:59 - 00000952 ___SH C:\Windows\system32\KGyGaAvL.sys
2015-06-15 09:42 - 2009-12-28 10:07 - 00000000 ____D C:\Users\nandel guckes\AppData\Roaming\Corel
2015-06-14 15:08 - 2013-09-21 16:49 - 00182768 _____ C:\Windows\KB893803v2.log
2015-06-14 10:29 - 2009-12-18 14:48 - 00000000 ____D C:\Users\nandel guckes
2015-06-11 21:12 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2015-06-11 14:37 - 2010-03-05 10:23 - 00000000 ____D C:\Users\nandel guckes\AppData\Roaming\PIE
2015-06-11 10:54 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2015-06-11 10:30 - 2006-11-02 14:47 - 02261464 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-11 09:54 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE
2015-06-11 08:15 - 2009-01-22 20:17 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-11 08:14 - 2013-09-23 10:49 - 00000000 ____D C:\Windows\system32\MRT
2015-06-11 08:04 - 2006-11-02 12:24 - 136900096 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2015-06-10 12:01 - 2014-11-11 16:29 - 00000000 ____D C:\Users\nandel guckes\AppData\Roaming\SoftDMA
2015-06-10 12:01 - 2009-12-18 14:49 - 00000000 ____D C:\Users\nandel guckes\AppData\Roaming\PowerCinema
2015-06-06 15:29 - 2006-11-02 12:33 - 01566088 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-05 10:09 - 2010-06-09 11:53 - 00006836 _____ C:\Users\nandel guckes\AppData\Local\d3d9caps.dat
2015-06-02 22:22 - 2013-10-23 11:34 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-05-25 15:40 - 2010-12-31 10:49 - 00000020 ____H C:\ProgramData\PKP_DLdu.DAT

==================== Files in the root of some directories =======

2010-12-31 10:49 - 2010-12-31 10:49 - 0000268 ___RH () C:\Users\nandel guckes\AppData\Roaming\Solid Colors
2010-12-31 10:52 - 2010-12-31 10:52 - 0000268 ___RH () C:\Users\nandel guckes\AppData\Roaming\Sounds
2010-06-09 11:53 - 2015-06-05 10:09 - 0006836 _____ () C:\Users\nandel guckes\AppData\Local\d3d9caps.dat
2009-12-18 15:34 - 2015-05-15 16:14 - 0012288 _____ () C:\Users\nandel guckes\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2009-08-11 19:22 - 2009-08-11 19:24 - 0006001 _____ () C:\ProgramData\ArcadeDeluxe2.log
2013-01-24 11:14 - 2013-03-06 16:46 - 0012221 _____ () C:\ProgramData\hpzinstall.log
2009-12-28 16:17 - 2013-04-22 10:28 - 0000000 ____H () C:\ProgramData\PKP_DLds.DAT
2010-12-31 10:49 - 2015-05-25 15:40 - 0000020 ____H () C:\ProgramData\PKP_DLdu.DAT
2010-12-31 10:52 - 2012-04-16 14:52 - 0000020 ____H () C:\ProgramData\PKP_DLdw.DAT
2009-12-28 16:58 - 2013-04-22 10:13 - 0000020 ____H () C:\ProgramData\PKP_DLec.DAT
2010-12-31 10:49 - 2010-12-31 10:49 - 0000268 ___RH () C:\ProgramData\Space Choir
2010-12-31 10:52 - 2010-12-31 10:52 - 0000268 ___RH () C:\ProgramData\Specifications

Some files in TEMP:
====================
C:\Users\nandel guckes\AppData\Local\temp\Quarantine.exe
C:\Users\nandel guckes\AppData\Local\temp\RtkBtMnt.exe
C:\Users\nandel guckes\AppData\Local\temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-18 21:24

==================== End of log ============================

Liebe Grüße
Saschaico

schrauber · 19.06.2015, 16:05

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Saschaico · 20.06.2015, 15:32

Hi schrauber,

meine Mutter vertraut mir (quasi Dir

) schon daß ich nichts mit dem Laptop anstelle wo dann alles hinüber ist aber als ich sie eben gefragt habe, ob sie mir die externen Festplatten und die USB-Sticks geben könnte zum reinigen, hat sie doch einen riesen Bammel bekommen und wollte von mir eine ganz sichere Zusage daß da auch nichts passieren kann (sie hat ja nun ihre ganzen Fotos auf den Festplatten und die sind ihr unendlich wichtig - auch viele der Textdateien). Das kann es doch nicht, nicht wahr?
Was ich auch noch fragen möchte wenn Du mir jetzt sagst "nein, da kann nichts passieren" - kann ich alle Festplatten gemeinsam anschließen (ca. drei) und wegen den USB-Sticks, das sind mehr als dann noch USB-Anschlüße am Laptop übrig sind, kann ich mehrmals mit ESET scannen?

Liebe Grüße
Saschaico

PS: Ich habe es jetzt mal mit zwei USB-Sticks die meiner Mutter nicht so wichtig sind ausprobiert (der Laptop hat zwar auf beiden Seiten zwei USB-Anschlüsse aber sie sind jeweils so dicht nebeneinander daß keine zwei Sticks nebeneinander passen).
Jetzt ist folgendes wo ich mich erkundigen möchte ob das in Ordnung ist:
Bis 30% ging's recht flott aber seit ca. der 30sten Minute ab ca. der 38030sten Datei braucht der Scan pro Datei ca. 5 Minuten und ist nun schon fast sieben Stunden bei immer noch 30% und der ca. 38134ten Datei.
Die Dateien seit der Scan so lange braucht heißen alle ähnlich C:\Program Files\Google\Update\Install\{...\nikcollection-1.2.8.exe - dort wo ich die drei Pünktchen gemacht habe sind Zahlen/Buchstaben-Kombinationen und dahinter die drei Pünktchen - die Zahlen/Buchstaben-Kombination ist bei jeder Datei eine andere aber der Rest bleibt identisch.

Saschaico · 21.06.2015, 07:41

Guten Morgen schrauber,

der 1. Scan ist fertig und es ist nichts von den Fotos auf den Sticks gelöscht - aber er hat drei Bedrohungen gefunden

(entschuldige bitte meine Nachfrage - Mama ist total ängstlich und es ist dann nahezu unmöglich ihr zu erklären daß sie sich keine Sorgen zu machen braucht und ihr Okay zu bekommen).

Hier mal der 1. Scan mit zwei angeschlossenen USB-Sicks (die anderen mache ich nach und nach aber es wird ein ganzes Weilchen dauern weil es sehr viele Sticks zu scannen gibt und ich glaube drei Festplatten - alleine dieser Scan hat von gestern morgen bis heute morgen zu tun gehabt

:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=72194ae967879842b78c4d9b28424f15
# end=init
# utc_time=2015-06-20 06:54:01
# local_time=2015-06-20 08:54:01 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.0.6002 NT Service Pack 2
Update Init
Update Download
Update Finalize
Updated modules version: 24416
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=72194ae967879842b78c4d9b28424f15
# end=updated
# utc_time=2015-06-20 06:57:41
# local_time=2015-06-20 08:57:41 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.0.6002 NT Service Pack 2
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=72194ae967879842b78c4d9b28424f15
# engine=24416
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-06-20 11:29:45
# local_time=2015-06-21 01:29:45 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 3250336 76156301 0 0
# scanned=197331
# found=3
# cleaned=0
# scan_time=59524
sh=8796021AC742D759EB6629CFA22D23820041FB2F ft=1 fh=626734ce82a4d729 vn="Variante von Win32/Systweak.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\system32\roboot.exe.vir"
sh=6B97D6844255D47302665BE4EB504893477EFA9C ft=1 fh=edd6a7ebcaa5d0c2 vn="Variante von Win64/Toolbar.Perion.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9YOGNDA1\WSSetup[1].exe"
sh=3FCDDDFFA523FD30995BD7F1EE90AD1DAFF05C22 ft=1 fh=eb68e71596000e50 vn="Variante von Win32/Toolbar.Perion.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S3P1EX97\SkywalkerSetup[1].exe"

Liebe Grüße
Saschaico

PS: noch eine Frage - es kommt gerade ständig das Fenster in der Anlage (wenn ich es schließe kommt es nach kurzer Weile wieder). Es kommt schon sehr lange ständig - nur ein paar Wochen/Monate bevor ich mich hier gemeldet habe war Ruhe aber dafür kam eben immer die Meldung es ist wenig Speicherplatz verfügbar. Was ist denn das für eine Meldung?

Mir ist gerade noch eine Frage eingefallen - soll ich das mit SecurityCheck direkt im Anschluß nach einem ESET-Scan machen also ich meine bevor ich die USB-Sticks wieder vom Laptop trenne oder kann ich erst mal nach und nach alle ESET-Scans machen und im Anschluß SecurityCheck ohne angeschlossene Sticks/Festplatten?

schrauber · 21.06.2015, 11:19

Bitte mach noch den Rest aus obiger Anleitung, bei ESET passiert nix wenn Du den Haken raus machst bei "Funde direkt löschen", der scant ja nur

Du kanst die Externe auch später einfach mal mit dem AV Programm scannen, ESET hat die Systemplatte ja durch, also gleich weiter mit Securitycheck, frisches FRST log und meine frage von oben

Saschaico · 21.06.2015, 15:07

Hi schrauber,

das mit dem Fenster hat sich nach einem Neustart gegeben - erscheint nicht mehr

hier das SecurityCheck-Log:

Code:

ATTFilter

 Results of screen317's Security Check version 1.002  
 Windows Vista Service Pack 2 x86 (UAC is enabled)  
 Internet Explorer 9  
 Internet Explorer 8  
``````````````Antivirus/Firewall Check:`````````````` 
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Adobe Reader 9 Adobe Reader out of Date! 
 Mozilla Firefox (38.0.5) 
````````Process Check: objlist.exe by Laurent````````  
 Microsoft Security Essentials MSMpEng.exe 
 Microsoft Security Essentials msseces.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````

und hier das frische FRST-Log:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-06-2015 01
Ran by nandel guckes (administrator) on NANDELGUCKES-PC on 21-06-2015 15:57:24
Running from C:\Users\nandel guckes\Desktop
Loaded Profiles: nandel guckes (Available Profiles: nandel guckes)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
() C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
() C:\Acer\Mobility Center\MobilityService.exe
(NewTech InfoSystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
() C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
() C:\Windows\System32\PSIService.exe
() C:\Program Files\Cyberlink\Shared files\RichVideo.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
() C:\Windows\PLFSetI.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Acer Inc.) C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
(Egis Incorporated) C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
(Acer Incorporated) C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
(CyberLink Corp.) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(CyberLink) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Nikon Corporation) C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
(Realtek Semiconductor Corp.) C:\Users\nandel guckes\AppData\Local\temp\RtkBtMnt.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
() C:\Users\nandel guckes\Desktop\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1049896 2008-04-25] (Synaptics, Inc.)
HKLM\...\Run: [BkupTray] => C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [28672 2008-04-25] ()
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-08-29] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6294048 2008-09-19] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1833504 2008-09-19] (Realtek Semiconductor Corp.)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [200704 2008-07-29] ()
HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [858632 2008-12-17] (Dritek System Inc.)
HKLM\...\Run: [ePower_DMC] => C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [417792 2008-11-28] (Acer Inc.)
HKLM\...\Run: [eDataSecurity Loader] => C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [526896 2008-07-29] (Egis Incorporated)
HKLM\...\Run: [eAudio] => C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe [544768 2008-09-11] (Acer Incorporated)
HKLM\...\Run: [ArcadeDeluxeAgent] => C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [147456 2008-10-08] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer] => C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [167936 2008-10-08] (CyberLink)
HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG)
HKLM\...\Run: [AdobeCS4ServiceManager] => C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2565520 2011-03-14] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenuEx] => C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-30] (Microsoft Corporation)
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\...\Run: [ProductReg] => C:\Program Files\Acer\WR_PopUp\ProductReg.exe [135168 2008-11-17] (Acer)
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\...\Run: [LightScribe Control Panel] => C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [451872 2007-07-18] (Hewlett-Packard Company)
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-06-01] (Nero AG)
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856 2009-12-18] (Google Inc.)
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Acer.scr [20221952 2008-11-11] (Acer)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Nikon Monitor.lnk [2010-12-31]
ShortcutTarget: Nikon Monitor.lnk -> C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe (Nikon Corporation)
ShellIconOverlayIdentifiers: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll [2008-07-29] (Egis Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-4207484042-2425227553-2540443312-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-4207484042-2425227553-2540443312-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE361
SearchScopes: HKU\S-1-5-21-4207484042-2425227553-2540443312-1000 -> {D8F00CE7-E51F-4D50-AC8C-C1811CE5CECE} URL = https://www.google.com/search?q={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO: ShowBarObj Class -> {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} -> C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll [2008-07-29] (Egis)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-05] (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll [2008-07-29] (Egis Incorporated.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-05] (Google Inc.)
Toolbar: HKU\S-1-5-21-4207484042-2425227553-2540443312-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-05] (Google Inc.)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2001-06-21] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\nandel guckes\AppData\Roaming\Mozilla\Firefox\Profiles\a6vdj7l2.default
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-01-05]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 BUNAgentSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [16384 2008-03-03] (NewTech Infosystems, Inc.) [File not signed]
R2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [69632 2008-10-04] () [File not signed]
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2008-11-28] () [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-12-06] () [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [43520 2006-11-08] (Hewlett-Packard) [File not signed]
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)
R2 NTIBackupSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [45056 2008-04-25] (NewTech InfoSystems, Inc.) [File not signed]
R2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-25] () [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53248 2006-11-08] (Hewlett-Packard) [File not signed]
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [174656 2006-11-02] () [File not signed]
R2 RichVideo; c:\Program Files\Cyberlink\Shared files\RichVideo.exe [272024 2007-01-09] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 eapihdrv; C:\Users\nandel guckes\AppData\Local\temp\ehdrv.sys [135760 2015-06-20] (ESET)
R3 hidshim; C:\Windows\System32\DRIVERS\hidshim.sys [5632 2008-10-08] (Windows (R) Codename Longhorn DDK provider)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
R3 nuvotonhidgeneric; C:\Windows\System32\DRIVERS\nuvotonhidgeneric.sys [22528 2008-10-08] (Nuvoton Technology Corporation)
R3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [150560 2008-08-26] (Realtek Semiconductor Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-21 15:57 - 2015-06-21 15:57 - 00000000 ____D C:\Users\nandel guckes\Desktop\FRST-OlderVersion
2015-06-21 15:51 - 2015-06-21 15:51 - 00852639 _____ C:\Users\nandel guckes\Desktop\SecurityCheck.exe
2015-06-18 21:47 - 2015-06-18 21:47 - 00155659 _____ C:\Users\nandel guckes\Desktop\JRT.txt
2015-06-18 21:45 - 2015-06-18 21:45 - 00000207 _____ C:\Windows\tweaking.com-regbackup-NANDELGUCKES-PC-Windows-Vista-(TM)-Home-Premium-(32-bit).dat
2015-06-18 21:45 - 2015-06-18 21:45 - 00000000 ____D C:\RegBackup
2015-06-18 21:33 - 2015-06-18 21:33 - 02950477 _____ (Thisisu) C:\Users\nandel guckes\Desktop\JRT.exe
2015-06-18 21:10 - 2015-06-18 21:10 - 02231296 _____ C:\Users\nandel guckes\Desktop\AdwCleaner_4.206.exe
2015-06-18 21:02 - 2015-06-18 21:02 - 00001220 _____ C:\Users\nandel guckes\Desktop\mbam.txt
2015-06-18 10:15 - 2015-06-18 10:15 - 00012740 _____ C:\ComboFix.txt
2015-06-18 09:40 - 2015-06-18 10:15 - 00000000 ____D C:\Qoobox
2015-06-18 09:40 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-06-18 09:40 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-06-18 09:40 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-06-18 09:40 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-06-18 09:40 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-06-18 09:40 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-06-18 09:40 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-06-18 09:40 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-06-18 09:38 - 2015-06-18 10:13 - 00000000 ____D C:\Windows\erdnt
2015-06-18 09:26 - 2015-06-18 09:27 - 05628161 ____R (Swearware) C:\Users\nandel guckes\Desktop\ComboFix.exe
2015-06-17 08:43 - 2015-06-17 08:43 - 00033286 _____ C:\Users\nandel guckes\Desktop\Addition.txt
2015-06-17 08:42 - 2015-06-21 15:57 - 00016684 _____ C:\Users\nandel guckes\Desktop\FRST.txt
2015-06-15 16:54 - 2015-06-21 15:57 - 01148928 _____ (Farbar) C:\Users\nandel guckes\Desktop\FRST.exe
2015-06-13 14:21 - 2015-06-21 15:57 - 00000000 ____D C:\FRST
2015-06-13 14:12 - 2015-06-13 14:12 - 00000488 _____ C:\Users\nandel guckes\Desktop\defogger_disable.log
2015-06-13 14:12 - 2015-06-13 14:12 - 00000000 _____ C:\Users\nandel guckes\defogger_reenable
2015-06-13 14:05 - 2015-06-13 14:05 - 00050477 _____ C:\Users\nandel guckes\Desktop\Defogger.exe
2015-06-11 20:39 - 2015-06-11 20:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-11 20:23 - 2015-06-18 21:13 - 00000000 ____D C:\AdwCleaner
2015-06-11 20:19 - 2015-06-11 20:19 - 18733360 _____ (Microsoft Corporation) C:\Users\nandel guckes\Desktop\IE9-WindowsVista-x86-deu.exe
2015-06-11 20:12 - 2015-06-11 20:12 - 00000000 ____D C:\Users\nandel guckes\AppData\Roaming\Microsoft\Windows\Start Menu\alle auf startmenü
2015-06-11 08:15 - 2015-04-24 17:54 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-11 08:14 - 2015-05-21 16:22 - 02066432 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-11 08:14 - 2015-05-09 01:08 - 00894464 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-11 08:01 - 2015-05-05 00:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-11 08:00 - 2015-05-05 00:51 - 10628608 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-11 08:00 - 2015-05-05 00:50 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-11 08:00 - 2015-05-05 00:50 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-11 08:00 - 2015-05-04 23:21 - 08147456 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 08:59 - 2015-05-31 02:03 - 12385280 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 08:59 - 2015-05-31 01:55 - 01809920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 08:59 - 2015-05-31 01:54 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 08:59 - 2015-05-31 01:53 - 09750528 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 08:59 - 2015-05-31 01:50 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 08:59 - 2015-05-31 01:49 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 08:59 - 2015-05-31 01:49 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-10 08:59 - 2015-05-31 01:49 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 08:59 - 2015-05-31 01:49 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 08:59 - 2015-05-31 01:48 - 01804288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 08:59 - 2015-05-31 01:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 08:59 - 2015-05-31 01:48 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 08:59 - 2015-05-31 01:48 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-06-10 08:59 - 2015-05-31 01:48 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 08:59 - 2015-05-31 01:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 08:59 - 2015-05-31 01:48 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 08:59 - 2015-05-31 01:48 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-06-10 08:59 - 2015-05-31 01:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 08:59 - 2015-05-31 01:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 08:59 - 2015-05-31 01:47 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 08:59 - 2015-05-31 01:47 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-06-10 08:59 - 2015-05-31 01:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-06-02 16:12 - 2015-06-02 22:22 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-05-31 15:19 - 2015-05-31 15:19 - 00000000 ____D C:\Users\nandel guckes\Desktop\Training-Photoshop

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-21 15:45 - 2009-08-11 19:01 - 01412081 _____ C:\Windows\WindowsUpdate.log
2015-06-21 15:38 - 2011-01-11 15:32 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-21 15:38 - 2009-08-11 19:20 - 00000000 _____ C:\Windows\system32\LogConfigTemp.xml
2015-06-21 15:38 - 2009-01-22 20:14 - 00000147 _____ C:\Windows\system32\agent.log
2015-06-21 15:38 - 2008-01-21 04:47 - 09117046 _____ C:\Windows\PFRO.log
2015-06-21 15:38 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-21 15:38 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-21 15:38 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-21 09:11 - 2006-11-02 15:01 - 00032628 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-06-21 09:04 - 2011-01-11 15:33 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-21 08:19 - 2009-12-18 14:48 - 00000000 ___RD C:\Users\nandel guckes\Bilder
2015-06-21 08:00 - 2013-09-21 16:49 - 00185958 _____ C:\Windows\KB893803v2.log
2015-06-20 08:49 - 2006-11-02 12:33 - 01566088 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-20 08:46 - 2006-11-02 14:52 - 00309410 _____ C:\Windows\setupact.log
2015-06-18 10:15 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Default
2015-06-18 10:15 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public
2015-06-18 10:08 - 2006-11-02 12:23 - 00000215 _____ C:\Windows\system.ini
2015-06-15 09:51 - 2011-01-11 15:33 - 00000000 ____D C:\Users\nandel guckes\AppData\Local\Paint.NET
2015-06-15 09:42 - 2013-04-10 08:59 - 00000952 ___SH C:\Windows\system32\KGyGaAvL.sys
2015-06-15 09:42 - 2009-12-28 10:07 - 00000000 ____D C:\Users\nandel guckes\AppData\Roaming\Corel
2015-06-14 10:29 - 2009-12-18 14:48 - 00000000 ____D C:\Users\nandel guckes
2015-06-11 21:12 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2015-06-11 14:37 - 2010-03-05 10:23 - 00000000 ____D C:\Users\nandel guckes\AppData\Roaming\PIE
2015-06-11 10:54 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2015-06-11 10:30 - 2006-11-02 14:47 - 02261464 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-11 09:54 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE
2015-06-11 08:15 - 2009-01-22 20:17 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-11 08:14 - 2013-09-23 10:49 - 00000000 ____D C:\Windows\system32\MRT
2015-06-11 08:04 - 2006-11-02 12:24 - 136900096 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2015-06-10 12:01 - 2014-11-11 16:29 - 00000000 ____D C:\Users\nandel guckes\AppData\Roaming\SoftDMA
2015-06-10 12:01 - 2009-12-18 14:49 - 00000000 ____D C:\Users\nandel guckes\AppData\Roaming\PowerCinema
2015-06-05 10:09 - 2010-06-09 11:53 - 00006836 _____ C:\Users\nandel guckes\AppData\Local\d3d9caps.dat
2015-06-02 22:22 - 2013-10-23 11:34 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-05-25 15:40 - 2010-12-31 10:49 - 00000020 ____H C:\ProgramData\PKP_DLdu.DAT

==================== Files in the root of some directories =======

2010-12-31 10:49 - 2010-12-31 10:49 - 0000268 ___RH () C:\Users\nandel guckes\AppData\Roaming\Solid Colors
2010-12-31 10:52 - 2010-12-31 10:52 - 0000268 ___RH () C:\Users\nandel guckes\AppData\Roaming\Sounds
2010-06-09 11:53 - 2015-06-05 10:09 - 0006836 _____ () C:\Users\nandel guckes\AppData\Local\d3d9caps.dat
2009-12-18 15:34 - 2015-05-15 16:14 - 0012288 _____ () C:\Users\nandel guckes\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2009-08-11 19:22 - 2009-08-11 19:24 - 0006001 _____ () C:\ProgramData\ArcadeDeluxe2.log
2013-01-24 11:14 - 2013-03-06 16:46 - 0012221 _____ () C:\ProgramData\hpzinstall.log
2009-12-28 16:17 - 2013-04-22 10:28 - 0000000 ____H () C:\ProgramData\PKP_DLds.DAT
2010-12-31 10:49 - 2015-05-25 15:40 - 0000020 ____H () C:\ProgramData\PKP_DLdu.DAT
2010-12-31 10:52 - 2012-04-16 14:52 - 0000020 ____H () C:\ProgramData\PKP_DLdw.DAT
2009-12-28 16:58 - 2013-04-22 10:13 - 0000020 ____H () C:\ProgramData\PKP_DLec.DAT
2010-12-31 10:49 - 2010-12-31 10:49 - 0000268 ___RH () C:\ProgramData\Space Choir
2010-12-31 10:52 - 2010-12-31 10:52 - 0000268 ___RH () C:\ProgramData\Specifications

Some files in TEMP:
====================
C:\Users\nandel guckes\AppData\Local\temp\Quarantine.exe
C:\Users\nandel guckes\AppData\Local\temp\RtkBtMnt.exe
C:\Users\nandel guckes\AppData\Local\temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-21 15:45

==================== End of log ============================

Ob es noch Probleme gibt werde ich gleich mal austesten.
Habe ich gerade gemacht - gibt keine Probleme mehr

. Ganz ganz vielen lieben Dank!

Liebe Grüße
Saschaico

schrauber · 22.06.2015, 06:44

Adobe Reader updaten.

Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
Combofix deinstallieren

Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
Drücke bitte die + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
Klicke auf OK.
Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte

DelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...

und/oder das Forum mit einer kleinen Spende unterstützen.

Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:

Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:

NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.

Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.

Lade Software von einem sauberen Portal wie

.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .

Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Saschaico · 22.06.2015, 11:23

Hi schrauber,

nochmal ganz herzlichen Dank!

Werde ich gleich machen mit hier

und euer super Forum unterstützen.

Hier noch der DelFix-Log:

Code:

ATTFilter

# DelFix v1.010 - Datei am 22/06/2015 um 11:57:19 erstellt
# Aktualisiert am 26/04/2015 von Xplode
# Benutzer : nandel guckes - NANDELGUCKES-PC
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)

~ Aktiviere die Benutzerkontensteuerung ... OK

~ Entferne die Bereinigungsprogramme ...

Gelöscht : C:\32788R22FWJFW
Gelöscht : C:\Combofix
Gelöscht : C:\FRST
Gelöscht : C:\AdwCleaner
Gelöscht : C:\RegBackup
Gelöscht : C:\Users\nandel guckes\Desktop\FRST-OlderVersion
Gelöscht : C:\ComboFix.txt
Gelöscht : C:\Users\nandel guckes\Desktop\Addition.txt
Gelöscht : C:\Users\nandel guckes\Desktop\AdwCleaner_4.206.exe
Gelöscht : C:\Users\nandel guckes\Desktop\Defogger.exe
Gelöscht : C:\Users\nandel guckes\Desktop\defogger_disable.log
Gelöscht : C:\Users\nandel guckes\Desktop\defogger_enable.log
Gelöscht : C:\Users\nandel guckes\Desktop\FRST.exe
Gelöscht : C:\Users\nandel guckes\Desktop\FRST.txt
Gelöscht : C:\Users\nandel guckes\Desktop\JRT.exe
Gelöscht : C:\Users\nandel guckes\Desktop\JRT.txt
Gelöscht : C:\Users\nandel guckes\Desktop\SecurityCheck.exe
Gelöscht : HKLM\SOFTWARE\AdwCleaner
Gelöscht : HKLM\SOFTWARE\Swearware

~ Erstelle ein Backup der Registrierungsdatenbank ... OK

~ Lösche die Wiederherstellungspunkte ...

Gelöscht : RP #780 [Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 | 06/20/2015 11:09:40]
Gelöscht : RP #781 [Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 | 06/20/2015 16:10:00]
Gelöscht : RP #782 [Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 | 06/20/2015 21:10:53]
Gelöscht : RP #783 [Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 | 06/21/2015 06:00:37]
Gelöscht : RP #784 [Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 | 06/21/2015 14:06:35]
Gelöscht : RP #785 [Removed Nero 7 Essentials. Available with Windows Installer version 1.2 and later. | 06/21/2015 14:44:22]
Gelöscht : RP #786 [Windows Update | 06/22/2015 08:47:14]
Gelöscht : RP #788 [Konfiguriert PowerDirector | 06/22/2015 09:04:00]
Gelöscht : RP #790 [Entfernt CyberView X - SF v1.15 | 06/22/2015 09:12:21]

Ein neuer Wiederherstellungspunkt wurde erstellt !

~ Stelle die Systemeinstellungen wieder her ... OK

########## - EOF - ##########

Viele liebe Grüße
Saschaico

PS: kann ich in diesem Thema noch meinen Laptop von Dir prüfen lassen? (auf ihm wurde vor ein paar Wochen auch eine malware namens password... - den Rest des Namens habe ich leider nicht mehr in Erinnerung - von MBAM gefunden und ich bin mir nicht sicher ob sie wirklich völlig weg ist). Meine Mutter und ich haben den selben WLAN-Router (weiß nicht ob das von Bedeutung ist zu wissen).

schrauber · 23.06.2015, 05:48

Klar, poste mal FRST Logs davon

Saschaico · 23.06.2015, 06:23

Guten Morgen schrauber,

vielen lieben Dank - hier die beiden FRST-Logs:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:21-06-2015 01
Ran by säischel (administrator) on SÄISCHEL-PC on 23-06-2015 07:12:39
Running from C:\Users\säischel\Desktop
Loaded Profiles: säischel (Available Profiles: säischel & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [215400 2012-06-22] (NVIDIA Corporation)
Startup: C:\Users\säischel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk [2012-12-20]
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3587279700-3991696116-2316327246-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKU\S-1-5-21-3587279700-3991696116-2316327246-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\säischel\AppData\Roaming\Mozilla\Firefox\Profiles\31ey2q3x.default
FF Homepage: about:home
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\säischel\AppData\Roaming\Mozilla\Firefox\Profiles\31ey2q3x.default\searchplugins\unbubbleeu.xml [2014-11-06]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 HPSLPSVC; C:\Users\säischel\AppData\Local\Temp\7zS17C0\hpslpsvc64.dll [1039360 2012-11-14] (Hewlett-Packard Co.) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 bpenum; C:\Windows\System32\DRIVERS\bpenum.sys [84480 2011-11-30] (Intel Corporation) [File not signed]
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [104048 2012-03-02] (Qualcomm Atheros Co., Ltd.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-23 07:12 - 2015-06-23 07:13 - 00006203 _____ C:\Users\säischel\Desktop\FRST.txt
2015-06-23 07:12 - 2015-06-23 07:12 - 00000000 ____D C:\FRST
2015-06-23 07:09 - 2015-06-23 07:09 - 02109952 _____ (Farbar) C:\Users\säischel\Desktop\FRST64.exe
2015-06-17 11:05 - 2015-06-17 11:05 - 00000000 ____D C:\Users\säischel\Documents\Fax
2015-06-12 21:07 - 2015-06-12 21:09 - 00000000 ____D C:\Users\säischel\AppData\Roaming\Exif Viewer
2015-06-12 21:04 - 2015-06-15 09:18 - 00000000 ____D C:\Windows\uninstall
2015-06-10 08:53 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-10 08:53 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-10 08:53 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 08:53 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-10 08:53 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-10 08:53 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-10 08:53 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-10 08:53 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-10 08:53 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-10 08:53 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-10 08:53 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-10 08:53 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-10 08:53 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-10 08:53 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-10 08:53 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-10 08:53 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-10 08:53 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-10 08:53 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-10 08:53 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-10 08:53 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-10 08:53 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-10 08:53 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-10 08:53 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-10 08:53 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-10 08:53 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-10 08:53 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-10 08:53 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-10 08:53 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-10 08:53 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-10 08:53 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-10 08:53 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 08:53 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-10 08:53 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-10 08:53 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 08:53 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 08:53 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 08:53 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-10 08:53 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-10 08:53 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 08:53 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 08:53 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-10 08:53 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 08:53 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 08:53 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-10 08:53 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 08:53 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-10 08:53 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-10 08:53 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 08:53 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-10 08:53 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-10 08:53 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 08:53 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 08:53 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-10 08:53 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 08:53 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 08:53 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-10 08:53 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 08:53 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-10 08:53 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 08:53 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-10 08:46 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-10 08:46 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-10 08:46 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-10 08:46 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-10 08:46 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-10 08:46 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-10 08:46 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-10 08:46 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-10 08:46 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-10 08:46 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-10 08:46 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-10 08:46 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-10 08:46 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 08:46 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-10 08:46 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-10 08:46 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-10 08:46 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-10 08:46 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-10 08:45 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-10 08:45 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-10 08:45 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-10 08:45 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-10 08:45 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-10 08:45 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-10 08:45 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-10 08:45 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-10 08:45 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-10 08:45 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-10 08:45 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-10 08:45 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-10 08:45 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-10 08:45 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-10 08:45 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-10 08:45 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-10 08:45 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-10 08:45 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-10 08:45 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-10 08:45 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-10 08:45 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-10 08:45 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-10 08:45 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-10 08:45 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-10 08:45 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-10 08:45 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-10 08:45 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-10 08:45 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-10 08:45 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-10 08:45 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-10 08:45 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-10 08:45 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-10 08:45 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-10 08:45 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-10 08:45 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-10 08:45 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-10 08:45 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-10 08:45 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-10 08:45 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-10 08:45 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-10 08:45 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-10 08:45 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-10 08:45 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-10 08:45 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-10 08:45 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-10 08:45 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-10 08:45 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-10 08:45 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-10 08:45 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-10 08:45 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-10 08:45 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-10 08:45 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 08:45 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-10 08:45 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-10 08:45 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-10 08:45 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-03 14:05 - 2015-06-03 21:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-01 16:27 - 2015-06-01 16:27 - 00000000 ____D C:\Users\säischel\AppData\Local\GWX

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-23 07:08 - 2009-07-14 06:45 - 00028720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-23 07:08 - 2009-07-14 06:45 - 00028720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-23 07:04 - 2012-12-25 12:18 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-23 06:57 - 2012-12-18 19:22 - 01804935 _____ C:\Windows\WindowsUpdate.log
2015-06-23 06:52 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-23 06:52 - 2009-07-14 06:51 - 00289861 _____ C:\Windows\setupact.log
2015-06-20 13:37 - 2012-12-26 11:24 - 00133861 _____ C:\Users\säischel\Documents\RaupenVordruckSascha_20112012.ods
2015-06-20 08:26 - 2011-04-12 09:43 - 00699682 _____ C:\Windows\system32\perfh007.dat
2015-06-20 08:26 - 2011-04-12 09:43 - 00149790 _____ C:\Windows\system32\perfc007.dat
2015-06-20 08:26 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-13 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-06-12 21:02 - 2014-12-12 12:26 - 00000000 __SHD C:\Users\säischel\AppData\Local\EmieBrowserModeList
2015-06-12 21:02 - 2014-06-07 15:46 - 00000000 __SHD C:\Users\säischel\AppData\Local\EmieUserList
2015-06-12 21:02 - 2014-06-07 15:46 - 00000000 __SHD C:\Users\säischel\AppData\Local\EmieSiteList
2015-06-12 18:19 - 2014-04-06 05:42 - 00016753 _____ C:\Users\säischel\Documents\Saatgut - Etiketten.odt
2015-06-10 18:33 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-10 18:32 - 2009-07-14 06:45 - 00294680 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-10 18:30 - 2014-12-10 07:40 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-10 18:30 - 2014-05-06 07:49 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-10 18:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-10 09:14 - 2013-08-14 08:06 - 00000000 ____D C:\Windows\system32\MRT
2015-06-10 09:12 - 2012-12-19 08:36 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-10 09:04 - 2012-12-25 12:18 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-10 09:04 - 2012-12-25 12:18 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-10 09:04 - 2012-12-25 12:18 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-07 10:52 - 2010-11-21 05:47 - 00134626 _____ C:\Windows\PFRO.log
2015-06-07 10:52 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-06-03 21:19 - 2012-12-19 11:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-02 06:50 - 2012-12-26 11:00 - 00071528 _____ C:\Users\säischel\Documents\FalterSascha_20112012.ods
2015-05-24 08:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PLA

==================== Files in the root of some directories =======

2014-09-01 10:18 - 2014-09-01 10:18 - 0001248 _____ () C:\Users\säischel\AppData\Roaming\KPAZAFYE
2014-09-01 10:18 - 2014-09-01 10:18 - 0002086 _____ () C:\Users\säischel\AppData\Roaming\TWCHXI
2015-01-24 18:01 - 2015-01-24 18:01 - 0613057 _____ (CMI Limited) C:\Users\säischel\AppData\Local\nsd3FF8.tmp
2012-12-19 13:22 - 2013-01-23 18:01 - 0001386 _____ () C:\ProgramData\hpzinstall.log

Some files in TEMP:
====================
C:\Users\säischel\AppData\Local\Temp\1DA9C8FB-2515-B7F3-F22D-78CDC92C4B98.exe
C:\Users\säischel\AppData\Local\Temp\1F930CC8-E339-2FC0-3339-A4A1A5F8D188.dll
C:\Users\säischel\AppData\Local\Temp\1F930CC8-E339-2FC0-3339-A4A1A5F8D188.exe
C:\Users\säischel\AppData\Local\Temp\4B629640-3B41-9E71-D1C6-7DCED476B714.exe
C:\Users\säischel\AppData\Local\Temp\BackupSetup.exe
C:\Users\säischel\AppData\Local\Temp\C391CEAA-62D2-D186-3F04-F3B00A2E6B2C.dll
C:\Users\säischel\AppData\Local\Temp\C391CEAA-62D2-D186-3F04-F3B00A2E6B2C.exe
C:\Users\säischel\AppData\Local\Temp\install_flashplayer11x32axau_gtba_chra_dy_aih.exe
C:\Users\säischel\AppData\Local\Temp\iv_uninstall.exe
C:\Users\säischel\AppData\Local\Temp\optprosetup.exe
C:\Users\säischel\AppData\Local\Temp\Quarantine.exe
C:\Users\säischel\AppData\Local\Temp\setup_337.exe
C:\Users\säischel\AppData\Local\Temp\SpOrder.dll
C:\Users\säischel\AppData\Local\Temp\sqlite3.dll
C:\Users\säischel\AppData\Local\Temp\vcredist_x64.exe
C:\Users\säischel\AppData\Local\Temp\_is4B51.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-13 07:58

==================== End of log ============================

--- --- ---

[CODE]Additional
FRST Logfile:

Code:

ATTFilter

scan result of Farbar Recovery Scan Tool (x64) Version:21-06-2015 01
Ran by säischel at 2015-06-23 07:13:42
Running from C:\Users\säischel\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3587279700-3991696116-2316327246-500 - Administrator - Disabled)
Gast (S-1-5-21-3587279700-3991696116-2316327246-501 - Limited - Disabled)
säischel (S-1-5-21-3587279700-3991696116-2316327246-1000 - Administrator - Enabled) => C:\Users\säischel
UpdatusUser (S-1-5-21-3587279700-3991696116-2316327246-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.14.15 - Atheros Communications Inc.)
Atheros WLAN Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2867 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed (HKLM\...\{2C0E6BD4-65B1-4E82-B2AC-43EFFC8F100C}) (Version: 15.0.0.0059 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
Lenovo_Wireless_Driver (HKLM-x32\...\{28ABE740-47F3-441B-9437-852F6A64EFF8}) (Version: 1.02.01 - Lenovo)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
NVIDIA Grafiktreiber 296.96 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 296.96 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.0613 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0613 - NVIDIA Corporation)
NVIDIA Update 1.7.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.7.13 - NVIDIA Corporation)
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

06-06-2015 19:49:10 Windows Update
10-06-2015 09:11:27 Windows Update
13-06-2015 11:56:44 Windows Update
16-06-2015 18:50:09 Windows Update
20-06-2015 06:47:40 Windows Update

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {37940419-F795-47E1-808C-1AB5E3BF8B2E} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {465BD38E-10A7-48E0-890C-9D5112C9C8B6} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {476180CF-BA37-4926-8A5F-372AB1BCC7D7} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {5494FAED-A236-4E70-8270-B403B853B890} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Time-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {922F416A-ECE1-413C-B01D-3F3A27896B17} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2015-03-16] (Microsoft Corporation)
Task: {946A3B73-40F0-4EDF-8FC3-E31125F0CD6E} - System32\Tasks\{53FFE9AA-C574-4D85-92F5-239363CFEBCE} => pcalua.exe -a E:\Setup.exe -d E:\
Task: {95C66ABF-C8D0-44BC-B4EF-BEA5971363DD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-10] (Adobe Systems Incorporated)
Task: {96EEC642-1F5A-49DA-A3B3-F8D026E26F02} - \upfs7235 No Task File <==== ATTENTION
Task: {97BD990C-412A-4CCB-ADCB-8ECC6B0F596F} - System32\Tasks\{9263E445-EBDE-448F-9B25-15EC1E99E9EE} => pcalua.exe -a C:\Users\säischel\AppData\Roaming\omiga-plus\UninstallManager.exe -c  -ptid=tugs <==== ATTENTION
Task: {9DBB8DBA-A1F8-4EDB-82E0-498F0EB877DA} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {AEFFD76F-1419-4AF4-AAE6-A1DFB8969086} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {BEDB3708-6CEC-4014-A370-E6C85A43548C} - System32\Tasks\arg3002 => C:\PROGRA~2\TabNav\arg3002.exe
Task: {D4101DFB-10D9-4418-82EF-0AC4CC16E453} - System32\Tasks\trik3004 => C:\PROGRA~2\TabNav\trik3004.exe
Task: {DED60BC3-619E-48E3-B879-AF6CE728A0F2} - System32\Tasks\{EE478443-F967-4250-B219-4241EA7ED1AE} => pcalua.exe -a C:\Users\säischel\Downloads\Setup.exe -d C:\Users\säischel\Downloads
Task: {E4AFB924-7231-4A60-A1FB-C54037C6FDCE} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {E6116F51-49B8-4F73-96FD-DE8DCA171D12} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {E77CD063-9540-4649-984A-A7108B7A806A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {FFA7518D-0B38-4D74-9FFC-4AFE2F30A7B9} - System32\Tasks\{8FDBECB4-55CC-4A72-9DCC-2B2805B951CB} => pcalua.exe -a "C:\Users\säischel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VDL0MVF2\l1egc02us24.exe" -d C:\Users\säischel\Desktop
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\KPAZAFYE.job => C:\Users\sýÿischel\AppData\Roaming\KPAZAFYE.exe <==== ATTENTION
Task: C:\Windows\Tasks\TWCHXI.job => C:\Users\sýÿischel\AppData\Roaming\TWCHXI.exe <==== ATTENTION

==================== Loaded Modules (Whitelisted) ==============

2012-10-10 03:22 - 2012-10-10 03:22 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-08-10 17:51 - 2012-08-10 17:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3587279700-3991696116-2316327246-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\säischel\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{55EC7B8A-EB9A-40A4-99F7-EFBACE843E80}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{DB408B16-6212-4EE1-BBB3-FAEF80EB4C28}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{53EB61D9-0E18-4415-823E-969D417F67C0}] => (Allow) C:\Users\säischel\AppData\Local\Temp\7zS17C0\hppiw.exe
FirewallRules: [{83353248-19CA-435C-A95D-C792CFEAC253}] => (Allow) C:\Users\säischel\AppData\Local\Temp\7zS17C0\hppiw.exe
FirewallRules: [{EA175FAE-5F25-44AC-B419-C173E01AB461}] => (Allow) C:\Users\säischel\AppData\Local\Temp\7zS2507\hppiw.exe
FirewallRules: [{E266B666-3430-4578-BC29-D1A095E2D7EC}] => (Allow) C:\Users\säischel\AppData\Local\Temp\7zS2507\hppiw.exe
FirewallRules: [{2A21BED0-7E21-4879-AB4A-FB914CE6AEF2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{2DAAC41F-350F-4368-A9A5-0C1AFD68CE64}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{A369B46B-78DE-487D-8B19-C50A0534C672}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{0AB2A0EE-CFF7-4982-8575-7623A46A253E}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/23/2015 06:53:52 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/22/2015 04:16:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/22/2015 08:56:45 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/22/2015 06:19:24 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2015 05:18:05 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2015 03:26:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2015 11:25:39 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2015 11:09:23 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2015 09:26:57 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2015 07:18:32 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (06/23/2015 06:55:06 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (06/23/2015 06:55:06 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (06/22/2015 04:17:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (06/22/2015 04:17:38 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (06/22/2015 08:57:50 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (06/22/2015 08:57:50 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (06/22/2015 06:20:35 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (06/22/2015 06:20:35 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (06/21/2015 05:19:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (06/21/2015 05:19:10 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).


Microsoft Office:
=========================
Error: (06/23/2015 06:53:52 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/22/2015 04:16:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/22/2015 08:56:45 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/22/2015 06:19:24 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2015 05:18:05 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2015 03:26:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2015 11:25:39 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2015 11:09:23 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2015 09:26:57 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2015 07:18:32 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2014-06-18 13:07:32.330
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\säischel\Documents\testdisk-6.14.win\testdisk-6.14\recup_dir.18\f9266375_consent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-18 13:07:32.299
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\säischel\Documents\testdisk-6.14.win\testdisk-6.14\recup_dir.18\f9266375_consent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-18 13:07:32.237
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\säischel\Documents\testdisk-6.14.win\testdisk-6.14\recup_dir.18\f9266375_consent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-18 13:07:32.174
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\säischel\Documents\testdisk-6.14.win\testdisk-6.14\recup_dir.18\f9266375_consent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-18 13:07:26.355
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\säischel\Documents\testdisk-6.14.win\testdisk-6.14\recup_dir.19\f9438631_FVEAPI.DLL" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-18 13:07:26.309
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\säischel\Documents\testdisk-6.14.win\testdisk-6.14\recup_dir.19\f9438631_FVEAPI.DLL" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-18 13:07:26.262
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\säischel\Documents\testdisk-6.14.win\testdisk-6.14\recup_dir.19\f9438631_FVEAPI.DLL" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-18 13:07:26.215
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\säischel\Documents\testdisk-6.14.win\testdisk-6.14\recup_dir.19\f9438631_FVEAPI.DLL" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-18 13:07:26.153
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\säischel\Documents\testdisk-6.14.win\testdisk-6.14\recup_dir.19\f9439167_FVEAPIBASE.DLL" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-18 13:07:26.059
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\säischel\Documents\testdisk-6.14.win\testdisk-6.14\recup_dir.19\f9439167_FVEAPIBASE.DLL" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
Percentage of memory in use: 28%
Total physical RAM: 3998.36 MB
Available physical RAM: 2876.24 MB
Total Pagefile: 7994.92 MB
Available Pagefile: 6811.53 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:871.83 GB) (Free:788.6 GB) NTFS
Drive d: () (Fixed) (Total:29.3 GB) (Free:29.21 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: C3FFC3FF)
Partition 1: (Active) - (Size=29.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=29.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=871.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1.1 GB) - (Type=12)

==================== End of log ============================

--- --- ---

Ein Fenster (in der Anlage) kam beim Starten, welches ich mit "Ja" beantwortet habe - war doch sicher so richtig?

Liebe Grüße
Saschaico

schrauber · 23.06.2015, 12:19

genau

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Saschaico · 23.06.2015, 17:03

Hi schrauber,

hier kommt das Combofix-Log

:

Code:

ATTFilter

ComboFix 15-06-23.01 - säischel 23.06.2015  17:45:38.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3998.2893 [GMT 2:00]
ausgeführt von:: c:\users\sõischel\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
SP: Microsoft Security Essentials *Disabled/Updated* {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
c:\users\SISCHE~1\AppData\Local\Temp\7zS17C0\HPSLPSVC64.DLL
c:\users\säischel\AppData\Local\nsd3FF8.tmp
c:\users\säischel\AppData\Local\Temp\7zS17C0\HPSLPSVC64.DLL
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_HPSLPSVC
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-05-23 bis 2015-06-23  ))))))))))))))))))))))))))))))
.
.
2015-06-23 10:08 . 2015-05-03 03:16	12214312	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7A0D474F-B38D-4DFC-8DE3-A2F35B20293A}\mpengine.dll
2015-06-23 05:12 . 2015-06-23 05:13	--------	d-----w-	C:\FRST
2015-06-22 07:06 . 2015-05-03 03:16	12214312	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-06-17 17:15 . 2015-03-26 08:40	1187344	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{0A2C1814-ABDB-4A60-BAA1-158D14410E91}\gapaengine.dll
2015-06-12 19:07 . 2015-06-12 19:09	--------	d-----w-	c:\users\säischel\AppData\Roaming\Exif Viewer
2015-06-12 19:04 . 2015-06-15 07:18	--------	d-----w-	c:\windows\uninstall
2015-06-10 06:46 . 2015-04-29 18:22	14635008	----a-w-	c:\windows\system32\wmp.dll
2015-06-10 06:45 . 2015-05-25 18:19	1255424	----a-w-	c:\windows\system32\diagtrack.dll
2015-06-01 14:27 . 2015-06-01 14:27	--------	d-----w-	c:\users\säischel\AppData\Local\GWX
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-06-10 07:12 . 2012-12-19 06:36	140135120	----a-w-	c:\windows\system32\MRT.exe
2015-06-10 07:04 . 2012-12-25 10:18	778416	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2015-06-10 07:04 . 2012-12-25 10:18	142512	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-05-25 18:01 . 2015-06-10 06:45	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2015-05-01 13:17 . 2015-05-13 06:43	124112	----a-w-	c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-01 13:16 . 2015-05-13 06:43	102608	----a-w-	c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-04-20 03:17 . 2015-05-13 06:38	1179136	----a-w-	c:\windows\system32\FntCache.dll
2015-04-20 03:17 . 2015-05-13 06:38	1647104	----a-w-	c:\windows\system32\DWrite.dll
2015-04-20 02:56 . 2015-05-13 06:38	1250816	----a-w-	c:\windows\SysWow64\DWrite.dll
2015-04-18 03:10 . 2015-05-13 06:42	460800	----a-w-	c:\windows\system32\certcli.dll
2015-04-18 02:56 . 2015-05-13 06:42	342016	----a-w-	c:\windows\SysWow64\certcli.dll
2015-04-13 03:28 . 2015-05-13 06:40	328704	----a-w-	c:\windows\system32\services.exe
2015-04-08 03:29 . 2015-05-13 06:37	275456	----a-w-	c:\windows\system32\InkEd.dll
2015-04-08 03:29 . 2015-05-13 06:37	24576	----a-w-	c:\windows\system32\jnwmon.dll
2015-04-08 03:14 . 2015-05-13 06:37	216064	----a-w-	c:\windows\SysWow64\InkEd.dll
2015-03-26 08:40 . 2013-03-12 10:30	1187344	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-12-19 1022152]
.
c:\users\säischel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.4.1.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2012-8-13 1199104]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protokoll;c:\windows\system32\DRIVERS\amppal.sys;c:\windows\SYSNATIVE\DRIVERS\amppal.sys [x]
R3 bpenum;Intel(R) Centrino(R) WiMAX Enumerator;c:\windows\system32\DRIVERS\bpenum.sys;c:\windows\SYSNATIVE\DRIVERS\bpenum.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed - Virtueller Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys;c:\windows\SYSNATIVE\DRIVERS\AMPPAL.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUVStor.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2015-06-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-25 07:04]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-10-10 171040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-10-10 399392]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-10-10 441888]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2015-04-29 1337000]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = https://www.google.de/
uDefault_Search_URL = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mDefault_Page_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\säischel\AppData\Roaming\Mozilla\Firefox\Profiles\31ey2q3x.default\
FF - prefs.js: browser.startup.homepage - about:home
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_188_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_188_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_188_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_188_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_188.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.17"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_188.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_188.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_188.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-06-23  17:55:24 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-06-23 15:55
.
Vor Suchlauf: 11 Verzeichnis(se), 846.567.088.128 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 846.976.892.928 Bytes frei
.
- - End Of File - - 042DB3B5903E28DC5D1334839FCDD892
A36C5E4F47E84449FF07ED3517B43A31

Eine Frage zu der Logdatei: Warum steht in der 3. Zeile "ausgeführt von:: c:\users\sõischel\Desktop\ComboFix.exe" - sollte da nicht säischel stehen? (so hatte ich es jedenfalls beim Einrichten des Laptops angegeben/geschrieben)

Liebe Grüße
Saschaico

23.06.2015, 05:48	#27
schrauber /// the machine /// TB-Ausbilder	Windows Vista: Laptop extrem langsam und ständig die Meldung "Wenig Speicherplatz" Klar, poste mal FRST Logs davon __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Windows Vista: Laptop extrem langsam und ständig die Meldung "Wenig Speicherplatz"

Log-Analyse und Auswertung: Windows Vista: Laptop extrem langsam und ständig die Meldung "Wenig Speicherplatz"