Windows 7: Chrome öffnet automatisch Tabs mit Werbung

Apfeltasche · 10.07.2015, 12:20

Hallo

ich habe seit einigen Tagen das Problem, dass Google Chrome ständig neue Seiten öffnet mit Werbung zu Spielen, Lotto oder Wetten.
Ich habe Microsoft Security Essentials, das findet aber nichts.
Und leider hab ich auch ansonsten absolut keine Ahnung von Computern

Ich habe jetzt die Anleitung befolgt und das hier rausbekommen:
Ich habe die LogFiles aufteilen müssen.

FRST.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-07-2015
Ran by valeria (administrator) on VALERIA-VAIO on 10-07-2015 12:17:14
Running from C:\Users\valeria\Downloads
Loaded Profiles: valeria (Available Profiles: valeria)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
() C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
(Sony Corporation) C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
() C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancer.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Dropbox, Inc.) C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
(iolo technologies, LLC) C:\Program Files\Sony\VAIO Care\Iolo\ioloTools.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Apple Inc.) C:\Program Files\iTunes\iTunes.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
() C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe
() C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe
() C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\2\Plugin.exe
() C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\Plugin.exe
() C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\5\Plugin.exe
() C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\Plugin.exe
() C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\4\Plugin.exe
() C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\Plugin.exe
() C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\Plugin.exe
() C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\8\Plugin.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\10\Plugin.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\valeria\Downloads\Defogger.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10134560 2010-04-07] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [226160 2010-07-30] (Alps Electric Co., Ltd.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-07] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-03] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [597792 2010-01-21] (Sony Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-03-20] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-05-31] (Geek Software GmbH)
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-12-06] (Google Inc.)
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Run: [Facebook Update] => C:\Users\valeria\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-10-09] (Facebook Inc.)
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Run: [BackgroundContainerV2] => "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\valeria\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Run: [Viber] => "C:\Users\valeria\AppData\Local\Viber\Viber.exe"
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Run: [Dropbox Update] => C:\Users\valeria\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)
IFEO\DatamngrCoordinator.exe: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2010-12-06]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\valeria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-05-16]
ShortcutTarget: Dropbox.lnk -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
ProxyServer: [.DEFAULT] => http=127.0.0.1:64373;https=127.0.0.1:64373
ProxyEnable: [S-1-5-21-557923668-3065560405-1829487697-1000] => Internet Explorer proxy is enabled
ProxyServer: [S-1-5-21-557923668-3065560405-1829487697-1000] => http=127.0.0.1:64373;https=127.0.0.1:64373
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=SVED&bmod=EU01
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=SVED&bmod=EU01
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2625848
URLSearchHook: HKLM-x32 - DVDVideoSoftTB DE Toolbar - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\valeria\AppData\LocalLow\DVDVideoSoftTB_DE\prxtbDVD2.dll (ClientConnect Ltd.)
URLSearchHook: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File
URLSearchHook: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 - DVDVideoSoftTB DE Toolbar - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\valeria\AppData\LocalLow\DVDVideoSoftTB_DE\prxtbDVD2.dll (ClientConnect Ltd.)
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> DefaultScope {EB3C667B-F36E-4BA5-9C7D-F5AB1F35654D} URL = hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> bProtectorDefaultScope {EB3C667B-F36E-4BA5-9C7D-F5AB1F35654D}
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> 5EFE506AEABD46DC935A929E49AF61A6 URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> x-osid:1:search:5EFE506AEABD46DC935A929E49AF61A6 URL = 
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {0D8B3C4E-A058-4F24-B61C-95BC52C6ED0C} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=119370&babsrc=SP_ss&mntrId=3a2ca24900000000000078843c312b61
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {16267E4B-17AB-459B-91E2-C01600553737} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {209C3720-5DC6-410E-B94A-B52C220BD417} URL = hxxp://search.softonic.com/INF1205T01/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=344
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {3355EF21-A527-432F-9379-88E34E6CA581} URL = hxxp://de.shopping.com/?linkin_id=8056363
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = 
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {EB3C667B-F36E-4BA5-9C7D-F5AB1F35654D} URL = hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ± vË°!×—(ä¼48Ð¸patm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†x¢8€ÙjÀÿþ*´Ñ;áa´[¦†8*º~RÙxœòÜ8'£-)x*ä* URL = 
BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-06] (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-12-06] (Sun Microsystems, Inc.)
BHO: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} ->  No File
BHO-x32: DVDVideoSoftTB DE Toolbar -> {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} -> C:\Users\valeria\AppData\LocalLow\DVDVideoSoftTB_DE\prxtbDVD2.dll [2014-09-23] (ClientConnect Ltd.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21] (Adobe Systems Incorporated)
BHO-x32: Razor Web -> {2e22e1c9-9ddb-40da-85c7-0753217fff76} -> C:\Program Files (x86)\Razor Web\Extensions\2e22e1c9-9ddb-40da-85c7-0753217fff76.dll [2015-07-04] ()
BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\SysWOW64\mscoree.dll [2010-11-05] (Microsoft Corporation)
BHO-x32: No Name -> {84FF7BD6-B47F-46F8-9130-01B2696B36CB} ->  No File
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: DealPly -> {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} -> C:\Program Files (x86)\DealPly\DealPlyIE.dll [2013-01-16] (DealPly Technologies Ltd)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-06] (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: delta Helper Object -> {C1AF5FA5-852C-4C90-812E-A7F75E011D87} -> C:\Program Files (x86)\Delta\delta\1.8.10.0\bh\delta.dll [2013-01-23] (Delta-search.com)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-04-01] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-06-29] (Sun Microsystems, Inc.)
BHO-x32: Softonic Helper Object -> {E87806B5-E908-45FD-AF5E-957D83E58E68} -> C:\Program Files (x86)\Softonic\Softonic\1.6.4.3\bh\Softonic.dll [2012-07-10] (Softonic.com)
BHO-x32: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} ->  No File
BHO-x32: Yontoo -> {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} -> C:\Program Files (x86)\Yontoo\YontooIEClient.dll [2012-03-27] (Yontoo LLC)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-06] (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-04-01] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files (x86)\Softonic\Softonic\1.6.4.3\SoftonicTlbr.dll [2012-07-10] (Softonic.com)
Toolbar: HKLM-x32 - DVDVideoSoftTB DE Toolbar - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\valeria\AppData\LocalLow\DVDVideoSoftTB_DE\prxtbDVD2.dll [2014-09-23] (ClientConnect Ltd.)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.10.0\deltaTlbr.dll [2013-01-23] (Delta-search.com)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-06] (Google Inc.)
Toolbar: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-06] (Google Inc.)
Toolbar: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> No Name - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} -  No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{45ED9C09-732A-4F0C-A778-61AAAFD82BB3}: [DhcpNameServer] 193.175.39.242 193.175.39.246
Tcpip\..\Interfaces\{A35F455B-5668-4676-9BE3-74A32BB9A2C8}: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_191.dll [2015-07-09] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_191.dll [2015-07-09] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2011-10-17] (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-08-13] (Google, Inc.)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files (x86)\Sony\MSS\3.8.130\npMcAfeeMss.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-04-14] (VideoLAN)
FF Plugin HKU\S-1-5-21-557923668-3065560405-1829487697-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\valeria\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Firefox\Extensions: [{0F827075-B026-42F3-885D-98981EE7B1AE}] - C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension

Chrome: 
=======
CHR Profile: C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-08-13]
CHR Extension: (Pin It Button) - C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2014-12-05]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]
CHR Extension: (Google Wallet) - C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09]
CHR Extension: (Citavi Picker) - C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohgndokldibnndfnjnagojmheejlengn [2015-02-09]
CHR HKU\S-1-5-21-557923668-3065560405-1829487697-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx [2013-01-16]
CHR HKU\S-1-5-21-557923668-3065560405-1829487697-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\valeria\AppData\Roaming\BabSolution\CR\Delta.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx [2013-01-16]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
CHR HKLM-x32\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Users\valeria\AppData\Local\Temp\YontooLayers.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [ohgndokldibnndfnjnagojmheejlengn] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.crx [Not Found]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-01] (Intel Corporation)
R2 Internet Enhancer Service; C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe [312320 2014-12-19] () [File not signed]
S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe [235216 2013-10-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-11-25] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-11-25] (Sonic Solutions)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [266168 2013-11-01] (Intel Corporation)
R2 Service Mgr RazorWeb; C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe [647944 2015-07-10] ()
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
R2 Update Mgr RazorWeb; C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe [571144 2015-07-10] ()
S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-01] (Intel Corporation)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2010-04-08] (Sony Corporation) [File not signed]
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [852336 2010-03-18] (Sony Corporation)
R2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [845312 2010-08-11] (Sony Corporation) [File not signed]
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-28] (Sony Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-10 12:17 - 2015-07-10 12:19 - 00028789 _____ C:\Users\valeria\Downloads\FRST.txt
2015-07-10 12:16 - 2015-07-10 12:17 - 00000000 ____D C:\FRST
2015-07-10 12:16 - 2015-07-10 12:16 - 02112512 _____ (Farbar) C:\Users\valeria\Downloads\FRST64.exe
2015-07-10 12:14 - 2015-07-10 12:14 - 00050477 _____ C:\Users\valeria\Downloads\Defogger.exe
2015-07-10 12:14 - 2015-07-10 12:14 - 00000476 _____ C:\Users\valeria\Downloads\defogger_disable.log
2015-07-10 12:14 - 2015-07-10 12:14 - 00000000 _____ C:\Users\valeria\defogger_reenable
2015-07-10 11:53 - 2015-07-10 11:54 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2015-07-10 11:53 - 2015-07-10 11:53 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
2015-07-10 11:51 - 2015-07-10 11:52 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2015-07-10 11:48 - 2015-07-10 11:48 - 00000000 ____D C:\Users\valeria\Desktop\OpenOffice 4.1.1 (de) Installation Files
2015-07-10 11:45 - 2015-07-10 11:45 - 01198368 _____ C:\Users\valeria\Downloads\OpenOffice - CHIP-Installer.exe
2015-07-08 10:56 - 2015-07-10 09:31 - 00000000 ____D C:\Users\valeria\AppData\Local\{D646B76E-8950-441D-BAFC-F80E467B2277}
2015-07-07 14:14 - 2015-07-07 14:17 - 186350872 _____ (Microsoft Corporation) C:\Users\valeria\Downloads\msert.exe
2015-07-07 10:26 - 2015-07-07 22:27 - 00000000 ____D C:\Users\valeria\AppData\Local\{1C1C2429-CC2D-4CB0-9500-4C8604556233}
2015-07-06 11:54 - 2015-07-06 11:54 - 00000000 ____D C:\Users\valeria\AppData\Local\{41CBAE2E-A45E-4D0C-8645-94CC38D0988A}
2015-07-04 11:40 - 2015-07-10 09:31 - 00000000 ____D C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4
2015-07-04 11:40 - 2015-07-04 11:40 - 00000000 ____D C:\Program Files (x86)\Razor Web
2015-07-04 11:34 - 2015-07-04 11:34 - 00000000 ____D C:\Users\valeria\AppData\Local\TuneUp Software
2015-07-04 11:23 - 2015-07-04 11:23 - 00001532 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-07-04 11:22 - 2015-07-04 11:24 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2015-07-04 11:22 - 2015-07-04 11:22 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2015-07-04 11:22 - 2015-07-04 11:22 - 00000000 ____D C:\Users\valeria\AppData\Roaming\RPEng
2015-07-04 11:22 - 2015-07-04 11:22 - 00000000 ____D C:\Program Files (x86)\FreeCodecPack
2015-07-04 11:20 - 2015-07-04 11:21 - 36468360 _____ (DVDVideoSoft Ltd. ) C:\Users\valeria\Downloads\FreeYouTubeToMP3Converter (1).exe
2015-06-30 15:31 - 2015-06-30 15:31 - 00026112 _____ C:\Users\valeria\Downloads\Das+Alter+beim+1.Mal.dot
2015-06-30 15:29 - 2015-06-30 15:29 - 00026624 _____ C:\Users\valeria\Downloads\Prämissen.dot
2015-06-30 14:01 - 2015-06-30 14:10 - 169868481 _____ C:\Users\valeria\Downloads\101.536 15s 2SSt VO bioarchäologie_reader.zip
2015-06-30 13:58 - 2015-07-01 14:45 - 00000000 ____D C:\Users\valeria\AppData\Local\{ACD5AEB0-0027-4497-8CC5-6950509418EC}
2015-06-26 16:19 - 2015-06-26 16:19 - 00000000 ____D C:\Users\valeria\AppData\Local\{435152F2-85A4-4343-903B-4169F1A4E349}
2015-06-25 15:55 - 2015-06-25 15:55 - 01198368 _____ C:\Users\valeria\Downloads\Passbild Schablone - CHIP-Installer.exe
2015-06-25 12:06 - 2015-06-25 12:06 - 00000000 ____D C:\Users\valeria\AppData\Local\{41AF183E-AF1A-4FE3-B633-A930FB11B7FB}
2015-06-21 12:09 - 2015-06-21 12:09 - 00000000 ____D C:\Users\valeria\AppData\Local\{83E630A0-9907-4003-B8B5-FE3EC5F6DF0D}
2015-06-19 11:34 - 2015-06-19 11:34 - 00000000 ____D C:\Users\valeria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-06-19 11:30 - 2015-07-10 11:35 - 00001232 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000UA.job
2015-06-19 11:30 - 2015-07-10 11:35 - 00001180 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000Core.job
2015-06-19 11:30 - 2015-06-19 11:30 - 00004206 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000UA
2015-06-19 11:30 - 2015-06-19 11:30 - 00003810 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000Core
2015-06-19 11:30 - 2015-06-19 11:30 - 00000000 ____D C:\Users\valeria\AppData\Local\Dropbox
2015-06-19 11:30 - 2015-06-19 11:30 - 00000000 ____D C:\ProgramData\Dropbox
2015-06-19 11:28 - 2015-06-19 11:28 - 00000000 ____D C:\Users\valeria\AppData\Local\{FB4E2CB9-2C62-4A4D-AB96-26DAD6F46F11}
2015-06-18 12:46 - 2015-06-18 12:46 - 00000000 ____D C:\Users\valeria\AppData\Local\{29BA6FAC-1F95-45CD-A4FA-E9B6CB362E8B}
2015-06-18 12:45 - 2015-06-18 12:45 - 00000000 ____D C:\Users\valeria\AppData\Local\GWX
2015-06-15 11:37 - 2015-06-15 11:38 - 00385958 _____ C:\Users\valeria\Downloads\Molekulare Biologie Mitschrift.pages.zip
2015-06-10 19:14 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-10 19:14 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-10 19:14 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-10 19:14 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-10 19:14 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 19:14 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-10 19:14 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-10 19:14 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-10 19:14 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-10 19:14 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-10 19:12 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-10 19:12 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-10 19:12 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-10 19:12 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-10 19:12 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-10 19:12 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-10 19:12 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-10 19:12 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-10 19:12 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-10 19:12 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-10 19:12 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-10 19:12 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-10 19:12 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-10 19:12 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-10 19:12 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-10 19:12 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-10 19:12 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-10 19:12 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-10 19:12 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-10 19:12 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-10 19:12 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-10 19:12 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-10 19:12 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-10 19:12 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-10 19:12 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-10 19:12 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-10 19:12 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-10 19:12 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-10 19:10 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-10 19:10 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-10 19:10 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-10 19:10 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-10 19:09 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-10 19:09 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-10 19:09 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-10 19:09 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-10 19:09 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-10 19:09 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-10 19:09 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-10 19:09 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-10 19:09 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-10 19:09 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-10 19:09 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-10 19:09 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-10 19:09 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-10 19:09 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-10 19:09 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-10 19:09 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-10 19:09 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-10 19:09 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-10 19:09 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-10 19:09 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-10 19:09 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-10 19:09 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-10 19:09 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-10 19:09 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-10 19:09 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-10 19:09 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-10 19:09 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-10 19:09 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-10 19:09 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-10 19:09 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 19:09 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-10 19:09 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-10 19:09 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 19:09 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 19:09 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-10 19:09 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 19:09 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-10 19:09 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 19:09 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 19:09 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-10 19:09 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-10 19:09 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 19:09 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-10 19:09 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 19:09 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-10 19:09 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 19:09 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 19:09 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 19:09 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-10 19:08 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 19:08 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 19:08 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-10 19:08 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 19:08 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 19:08 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-10 19:08 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-10 19:08 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 19:08 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-10 19:08 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 19:08 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-10 12:14 - 2011-07-28 14:27 - 00000000 ____D C:\Users\valeria
2015-07-10 12:14 - 2011-07-28 14:26 - 01962914 _____ C:\Windows\WindowsUpdate.log
2015-07-10 12:02 - 2010-12-06 09:25 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-10 11:26 - 2013-02-27 19:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-10 11:15 - 2012-10-09 23:10 - 00000936 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000UA.job
2015-07-10 11:04 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-10 11:04 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-09 17:02 - 2010-12-06 09:25 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-09 16:44 - 2011-07-28 17:07 - 00003954 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{7C580DF8-E664-4C4A-A59F-BBE5283D5696}
2015-07-09 12:27 - 2013-02-27 19:15 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-09 12:27 - 2012-12-23 23:58 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-09 12:27 - 2012-12-23 23:58 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-08 10:57 - 2012-09-10 17:33 - 00000000 ___RD C:\Users\valeria\Dropbox
2015-07-08 10:57 - 2012-09-10 17:30 - 00000000 ____D C:\Users\valeria\AppData\Roaming\Dropbox
2015-07-08 10:55 - 2011-10-09 01:26 - 00000000 ____D C:\Users\valeria\Tracing
2015-07-08 10:54 - 2014-06-19 11:17 - 00018651 _____ C:\Windows\setupact.log
2015-07-08 10:54 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-08 10:53 - 2014-08-29 03:18 - 00010510 _____ C:\Windows\PFRO.log
2015-07-07 18:46 - 2014-09-27 18:41 - 00000095 _____ C:\Users\valeria\AppData\Roaming\WB.CFG
2015-07-07 18:40 - 2013-03-02 19:39 - 00000000 ____D C:\Program Files (x86)\DealPly
2015-07-07 10:26 - 2012-10-09 23:10 - 00000914 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000Core.job
2015-07-05 12:08 - 2011-07-31 17:01 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-07-04 11:54 - 2011-07-29 15:55 - 00000000 ____D C:\Users\valeria\AppData\Roaming\Skype
2015-07-04 11:34 - 2012-12-09 15:44 - 00000000 ____D C:\Users\valeria\AppData\Roaming\TuneUp Software
2015-07-04 11:27 - 2012-08-08 22:49 - 00000000 ____D C:\Users\valeria\AppData\Roaming\DVDVideoSoft
2015-07-04 11:23 - 2012-12-09 15:44 - 00000000 ____D C:\ProgramData\TuneUp Software
2015-07-04 11:23 - 2012-08-08 22:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-07-04 11:22 - 2012-08-08 22:49 - 00000000 ____D C:\Users\valeria\AppData\Roaming\DVDVideoSoftIEHelpers
2015-07-01 10:23 - 2012-06-03 22:13 - 00000000 ____D C:\Users\valeria\AppData\Roaming\vlc
2015-06-30 22:05 - 2011-08-02 20:20 - 00000000 ____D C:\Users\valeria\AppData\Roaming\SoftGrid Client
2015-06-30 19:05 - 2010-12-06 18:06 - 00700134 _____ C:\Windows\system32\perfh007.dat
2015-06-30 19:05 - 2010-12-06 18:06 - 00149984 _____ C:\Windows\system32\perfc007.dat
2015-06-30 19:05 - 2009-07-14 07:13 - 01622300 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-21 19:09 - 2012-11-11 21:43 - 00000000 ____D C:\Users\valeria\Documents\uni
2015-06-19 13:00 - 2010-12-06 09:37 - 00000000 ____D C:\ProgramData\Skype
2015-06-19 11:27 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-18 14:31 - 2009-07-14 06:45 - 00399664 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-18 14:27 - 2014-12-12 15:30 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-18 14:27 - 2014-05-08 03:01 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-18 14:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-18 13:30 - 2013-08-15 22:52 - 00000000 ____D C:\Windows\system32\MRT
2015-06-18 12:55 - 2011-08-03 15:00 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-15 23:53 - 2011-09-01 20:37 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-06-11 16:43 - 2015-06-08 14:26 - 00000000 ____D C:\Users\valeria\AppData\Local\{A665E061-3D0F-411B-ADF5-3732D408EEEE}

==================== Files in the root of some directories =======

2013-07-29 11:25 - 2013-07-29 11:25 - 5082084 _____ (The Public) C:\Users\valeria\AppData\Roaming\Avisynth.exe
2013-07-29 11:26 - 2013-07-29 11:27 - 5243208 _____ (                                                            ) C:\Users\valeria\AppData\Roaming\AvsP.exe
2013-04-02 19:09 - 2013-02-09 23:55 - 0114176 _____ () C:\Users\valeria\AppData\Roaming\BabMaint.exe
2013-07-29 11:25 - 2013-07-29 11:26 - 5514668 _____ (LIGHTNING UK!) C:\Users\valeria\AppData\Roaming\Imgburn.exe
2013-07-29 11:26 - 2013-07-29 11:26 - 1357348 _____ () C:\Users\valeria\AppData\Roaming\MatroskaSplitter.exe
2013-07-29 11:27 - 2013-07-29 11:27 - 7760687 _____ (Boraxsoft) C:\Users\valeria\AppData\Roaming\SetupGFD.exe
2014-09-27 18:41 - 2015-07-07 18:46 - 0000095 _____ () C:\Users\valeria\AppData\Roaming\WB.CFG
2011-09-17 18:03 - 2012-06-26 14:59 - 0000402 _____ () C:\Users\valeria\AppData\Roaming\wklnhst.dat
2013-07-29 11:26 - 2013-07-29 11:26 - 0117723 _____ () C:\Users\valeria\AppData\Roaming\yuvcodecs-1.3.exe
2011-09-07 12:43 - 2013-07-30 15:49 - 0009216 _____ () C:\Users\valeria\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-07-29 15:57 - 2011-07-29 15:57 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2011-07-28 14:39 - 2012-01-05 22:26 - 0020865 _____ () C:\ProgramData\MusicStation.log
2010-12-06 09:31 - 2010-12-06 09:31 - 0000221 _____ () C:\ProgramData\MusicStation.xml

Some files in TEMP:
====================
C:\Users\valeria\AppData\Local\Temp\6f719uk0.dll
C:\Users\valeria\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp5pqlek.dll
C:\Users\valeria\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\valeria\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\valeria\AppData\Local\Temp\p6em2zyq.dll
C:\Users\valeria\AppData\Local\Temp\pdf24-creator-update.exe
C:\Users\valeria\AppData\Local\Temp\Runner.exe
C:\Users\valeria\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\valeria\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\valeria\AppData\Local\Temp\SkypeSetup.exe
C:\Users\valeria\AppData\Local\Temp\SpotifyUninstall.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-09 19:29

==================== End of log ============================

--- --- ---

Addition.txt:
[CODE]Additional
FRST Logfile:

Code:

ATTFilter

scan result of Farbar Recovery Scan Tool (x64) Version:09-07-2015
Ran by valeria at 2015-07-10 12:22:23
Running from C:\Users\valeria\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-557923668-3065560405-1829487697-500 - Administrator - Disabled)
Gast (S-1-5-21-557923668-3065560405-1829487697-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-557923668-3065560405-1829487697-1004 - Limited - Enabled)
valeria (S-1-5-21-557923668-3065560405-1829487697-1000 - Administrator - Enabled) => C:\Users\valeria

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.191 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.191 - Adobe Systems Incorporated)
Adobe Reader 9.3 - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-A93000000001}) (Version: 9.3.0 - Adobe Systems Incorporated)
Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version:  - ALPS ELECTRIC CO., LTD.)
AMD USB Filter Driver (HKLM-x32\...\{987B04C4-B5AC-4AD6-A7E9-8D681085B850}) (Version: 1.0.15.94 - Advanced Micro Devices, Inc.)
Apple Application Support (32-Bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{7BB90344-0647-468E-925A-7F69F7983421}) (Version: 2.0.1.85 - ArcSoft)
ArcSoft WebCam Companion 3 (HKLM-x32\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.390 - ArcSoft)
ATI Catalyst Install Manager (HKLM\...\{FED99701-A3A5-CE6B-4D04-DECF94784B89}) (Version: 3.0.765.0 - ATI Technologies, Inc.)
AviSynth 2.6 (HKLM-x32\...\AviSynth) (Version: 2.6.0.2 - GPL Public release.)
AvsP (HKLM-x32\...\AvsP_is1) (Version:  - )
Bing Bar (HKLM-x32\...\{449CE12D-E2C7-4B97-B19E-55D163EA9435}) (Version: 7.0.619.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BRAINYOO (HKLM-x32\...\BRAINYOO) (Version:  - BRAINYOO Ltd.)
Buzzdock (HKLM-x32\...\{cfd32d46-7d3f-483f-bace-7172aec5592d}) (Version:  - Alactro LLC) <==== ATTENTION
ccc-core-static (x32 Version: 2010.0302.2233.40412 - Ihr Firmenname) Hidden
Citavi 4 (HKLM-x32\...\{CC0A85B2-734A-45B3-B678-05F6A6499AC7}) (Version: 4.5.0.11 - Swiss Academic Software)
Click to Disc MergeModules x64 (Version: 1.0.14230 - Sony Corporation) Hidden
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DealPly (HKLM-x32\...\DealPly) (Version:  - DealPly Technologies Ltd)
Delta Chrome Toolbar (HKLM-x32\...\Delta Chrome Toolbar) (Version:  - Visual Tools) <==== ATTENTION
Delta toolbar   (HKLM-x32\...\delta) (Version: 1.8.10.0 - Delta) <==== ATTENTION
doPDF 7.3 printer (HKLM\...\doPDF 7 printer_is1) (Version:  - Softland)
Dropbox (HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Dropbox) (Version: 3.6.7 - Dropbox, Inc.)
DVD slideshow GUI 0.9.5.4 (HKLM-x32\...\BE37E547-62DF-43C8-AE6A-D03E82BC67A2_is1) (Version: 0.9.5.4 - Tin2tin)
DVDVideoSoftTB DE Toolbar (HKLM-x32\...\DVDVideoSoftTB_DE Toolbar) (Version: 6.9.0.16 - DVDVideoSoftTB DE)
Einstellungen für VAIO-Inhaltsüberwachung (HKLM-x32\...\{23825B69-36DF-4DAD-9CFD-118D11D80F16}) (Version: 2.5.0.13220 - Sony Corporation)
Evernote (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.2.1525 - Evernote Corp.)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Fotor 1.3.0 (HKLM-x32\...\Fotor) (Version: 1.3.0 - Everimaging Co., Ltd.)
FotoWorks XL (HKLM-x32\...\FotoWorks XL_is1) (Version: Aktuelle Version - IN MEDIA KG)
Free YouTube to MP3 Converter version 3.12.59.616 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.616 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.132 - Google Inc.)
Google Earth (HKLM-x32\...\{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}) (Version: 6.1.0.5001 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
GUI for dvdauthor 1.07 (HKLM-x32\...\GUI for dvdauthor) (Version: 1.07 - Boraxsoft)
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
Helix YUV Codecs (remove only) (HKLM-x32\...\HelixYUVCodecs) (Version:  - )
Hotfix für Microsoft Visual C++ 2010 Express - DEU (KB2635973) (HKLM-x32\...\{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}.KB2635973) (Version: 1 - Microsoft Corporation)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.5.0 - LIGHTNING UK!)
Iminent (x32 Version: 4.10.0.0 - Iminent) Hidden
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java(TM) 6 Update 18 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416018FF}) (Version: 6.0.180 - Sun Microsystems, Inc.)
Java(TM) 6 Update 20 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216018FF}) (Version: 6.0.200 - Sun Microsystems, Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Media Gallery (HKLM-x32\...\{DD88F979-FA58-41AC-980C-A6E1A82B61D9}) (Version: 1.2.0.15040 - Sony Corporation)
Media Gallery (x32 Version: 1.2.0.15040 - Sony Corporation) Hidden
Media Gallery MergeModules x64 (Version: 1.0.14250 - Sony Corporation) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Foto 2006 Standard Edition (HKLM-x32\...\PictureItPrem_v11) (Version: 11.0.0422 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - DEU) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 English (HKLM-x32\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 x64 English (HKLM\...\{F83779DF-E1F5-43A2-A7BE-732F856FADB7}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Word 2002 (HKLM-x32\...\{911B0407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{4EA2F95F-A537-4d17-9E7F-6B3FF8D9BBE3}) (Version: 08.05.0822 - Microsoft Corporation)
MSI_SPF_x64 (Version: 1.0.0 - Sony Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MusicStation (HKLM-x32\...\{AB259D46-F851-41B0-9AFA-AED8998AD68A}) (Version: 2.0.4.1199 - Omnifone)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
PDF24 Creator 5.5.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.1.02.03310 - Sony Corporation)
PMB VAIO Edition Guide (x32 Version: 1.5.00.03020 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (HKLM-x32\...\InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}) (Version: 3.1.00.15080 - Sony Corporation)
PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.1.00.15080 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Image Optimizer) (HKLM-x32\...\InstallShield_{1873FFC1-FDCB-47E1-B7C7-F418211E3530}) (Version: 1.1.00.15040 - Sony Corporation)
PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.1.00.15040 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (HKLM-x32\...\InstallShield_{B25563A0-41F4-4A81-A6C1-6DBC0911B1F3}) (Version: 2.1.00.15080 - Sony Corporation)
PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.1.00.15080 - Sony Corporation) Hidden
R für Windows (HKLM-x32\...\R für Windows) (Version:  - )
Razor Web (HKLM-x32\...\Razor Web) (Version: 2.0.5662.41130 - Razor Web)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6034 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6069 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30116 - Realtek Semiconductor Corp.)
Remote Play mit PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.0.0.15090 - Sony Corporation)
Remote Play with PlayStation 3 (x32 Version: 1.0.0.15090 - Sony Corporation) Hidden
Roxio Easy Media Creator 10 LJ (HKLM-x32\...\{537BF16E-7412-448C-95D8-846E85A1D817}) (Version: 10.3 - Roxio)
Setting Utility Series (HKLM-x32\...\{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}) (Version: 5.2.0.15250 - Sony Corporation)
Setup-Start von Microsoft Works Suite 2006 (HKLM-x32\...\Works2006Setup) (Version:  - )
simfy (HKLM-x32\...\Simfy) (Version: 1.6.5 - simfy GmbH)
simfy (x32 Version: 1.6.5 - simfy GmbH) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.)
Softonic toolbar  on IE (HKLM-x32\...\Softonic) (Version:  - Softonic) <==== ATTENTION
Sony Home Network Library (HKLM-x32\...\{D03D02D8-AB64-4785-A48E-5AA8B0FB8C14}) (Version: 2.1.0.14240 - Sony Corporation)
Sony Home Network Library (x32 Version: 2.1.0.14240 - Sony Corporation) Hidden
Statistiklabor 3 (HKLM-x32\...\Statistiklabor 3) (Version:  - )
VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{339F9B4D-00CB-4C1C-BED8-EC86A9AB602A}) (Version: 1.5.00.03020 - Sony Corporation)
VAIO Care (HKLM\...\{D9FFE40D-1A85-4541-992C-5EF505F391A4}) (Version: 8.4.2.12041 - Sony Corporation)
VAIO Care Recovery (HKLM\...\{6ED1750E-F44F-4635-8F0D-B76B9262B7FB}) (Version: 1.1.1.13230 - Sony Corporation)
VAIO Content Monitoring Settings (x32 Version: 2.5.0.13220 - Sony Corporation) Hidden
VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.2.0.15020 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.3.0.13150 - Sony Corporation)
VAIO Data Restore Tool (x32 Version: 1.3.0.13150 - Sony Corporation) Hidden
VAIO DVD Menu Data (HKLM-x32\...\{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}) (Version: 2.1.00.13210 - Sony Corporation)
VAIO Energie Verwaltung (HKLM-x32\...\{803E4FA5-A940-4420-B89D-A8BC2E160247}) (Version: 5.1.0.15250 - Sony Corporation)
VAIO Entertainment Platform (HKLM-x32\...\{6B1F20F2-6321-4669-A58C-33DF8E7517FF}) (Version: 3.7.0.16080 - Sony Corporation)
VAIO Entertainment Platform (x32 Version: 3.7.0.16080 - Sony Corporation) Hidden
VAIO Event Service (HKLM-x32\...\{C7477742-DDB4-43E5-AC8D-0259E1E661B1}) (Version: 5.2.0.15020 - Sony Corporation)
VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.0.0.14050 - Sony Corporation)
VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.0.0.04160 - Sony Corporation)
VAIO Hardware Diagnostics (x32 Version: 3.9.1 - Sony Corporation) Hidden
VAIO Manual (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 1.0.0.03290 - Sony Corporation)
VAIO Media plus (HKLM-x32\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.1.0.15040 - Sony Corporation)
VAIO Media plus (x32 Version: 2.1.0.15040 - Sony Corporation) Hidden
VAIO Media plus Opening Movie (HKLM-x32\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 2.1.0.13220 - Sony Corporation)
VAIO Movie Story MergeModules x64 (Version: 1.0.14240 - Sony Corporation) Hidden
VAIO Movie Story Template Data (HKLM-x32\...\InstallShield_{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}) (Version: 2.1.00.14040 - Sony Corporation)
VAIO Movie Story Template Data (x32 Version: 2.1.00.14040 - Sony Corporation) Hidden
VAIO Original Function Settings (x32 Version: 2.1.0.13120 - Sony Corporation) Hidden
VAIO Original Funktion Einstellungen (HKLM-x32\...\{A63E7492-A0BC-4BB9-89A7-352965222380}) (Version: 2.1.0.13120 - Sony Corporation)
VAIO Premium Partners (HKLM-x32\...\VAIO Premium Partners) (Version: 1.0 - Sony Europe)
VAIO screensaver (HKLM-x32\...\VAIO screensaver) (Version: 1.0.0.0 - Sony Europe)
VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.3.1.08110 - Sony Corporation)
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.0.1.02280 - Sony Corporation)
VAIO Wallpaper Contents (HKLM-x32\...\{D60F97EC-EF06-4E1E-B0D1-C2CBABA62FA3}) (Version: 2.1.0.14090 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.1.1.13070 - Sony Corporation)
VLC classic (HKLM-x32\...\VLC classic) (Version: 1.14 - vlcplayerdownload.com)
VLC media player 2.0.6 (HKLM-x32\...\VLC media player) (Version: 2.0.6 - VideoLAN)
VMp MergeModule x64 (Version: 1.0.0 - Default Company Name) Hidden
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
Wajam (HKLM-x32\...\WInterEnhance) (Version: 2.21.2.23 (i2.6) - WInterEnhance)
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation)
Windows Driver Package - Broadcom Bluetooth  (09/09/2009 6.2.0.9405) (HKLM\...\930E4792BDAEAFB62A9514EE7578775658A5D07C) (Version: 09/09/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (HKLM\...\3BA80AB4C7E9F8497C115C844953A3D4BEB84D21) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Works Update (x32 Version: 8.0.0.0000 - Microsoft Corporation) Hidden
Yontoo 1.10.02 (HKLM\...\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}) (Version: 1.10.02 - Yontoo LLC)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)

==================== Restore Points =========================

16-06-2015 00:18:14 Windows Update
18-06-2015 12:48:39 Windows Update
23-06-2015 22:05:12 Windows Update
30-06-2015 14:28:46 Windows Update
30-06-2015 19:04:26 Windows-Sicherung
04-07-2015 11:54:12 Windows Update
06-07-2015 19:55:12 TuneUp Utilities 2014 wird entfernt
06-07-2015 19:58:27 TuneUp Utilities 2014 (de-DE) wird entfernt
07-07-2015 10:35:02 Windows-Sicherung
08-07-2015 11:26:11 Windows Update
10-07-2015 11:49:49 OpenOffice 4.1.1 wird installiert

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2012-10-01 22:35 - 00000822 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {08DD0973-93C8-43AF-8D19-77CD121358B8} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {0A6EE03D-2BEB-488A-A90D-A6DC70C5D9A8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-24] (Google Inc.)
Task: {0FBB38BE-3741-401F-8D63-2A4CCF34BD85} - System32\Tasks\DealPlyUpdate => C:\Program Files (x86)\DealPly\DealPlyUpdate.exe [2013-01-16] (DealPly) <==== ATTENTION
Task: {1B1F9E3B-4965-4E75-A4B5-C604867275C1} - System32\Tasks\USER_ESRV_SVC => Wscript.exe //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"
Task: {1B347A0A-BEEC-4F1A-89A0-520CCC0A27A8} - System32\Tasks\SONY\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2010-02-06] (Sony Corporation)
Task: {231346F8-E1E0-4EBA-BE69-81C6785C7B4D} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {2A2920AA-56A4-4FDE-8E39-1F7C8736D34C} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [2014-01-16] (Sony Corporation)
Task: {2BAA8C6A-84DC-4EF9-B71F-4069D58B2E9F} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {3246C43E-9298-4DEB-9855-68C47ABE871A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-09] (Adobe Systems Incorporated)
Task: {33947199-291A-4411-8D08-13C966CEB860} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-02-18] (Sun Microsystems, Inc.)
Task: {3C697940-40AC-4983-86D4-7493D146F953} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect <==== ATTENTION
Task: {48DD426F-C051-42DD-9F8A-BF08F6C8A7A3} - System32\Tasks\Sony Corporation\VAIO Care\ActiveStatusCollect => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {49A8CE8C-DCCA-41AE-95FA-24B68D361B3B} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {547BF970-B845-44C0-9200-ED765DF3945A} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {606C73D7-9136-4438-9509-7B0608C1D87C} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2010-02-06] (Sony Corporation)
Task: {61A5A931-6A0D-4E59-9813-AEE72A4AF26D} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000Core => C:\Users\valeria\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-10-09] (Facebook Inc.)
Task: {63B10F1C-1321-4548-8DA9-07F09A9EB42A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-24] (Google Inc.)
Task: {65A1C3F3-401D-48F3-B268-71E14F0DC233} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6C1CD2F0-D764-4AE4-AEA8-E11EBDE0B828} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {7358E44E-3246-4C16-A30A-A1E5F24B8B1E} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2014-02-28] (Sony Corporation)
Task: {7A266E56-2774-42E5-853F-84156B386595} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000Core => C:\Users\valeria\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {8981DA70-F31C-4CA6-A50B-1D61F3077045} - System32\Tasks\{896169C4-AE6B-436B-8CDF-A49196755DE0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.0.119.259/en/abandoninstall?page=tsPlugin&amp;installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:notoffered;systemlevelpresent
Task: {8E98103E-7A76-4297-924B-B12552B68F6C} - System32\Tasks\{87289292-3F16-45A8-AF1B-C7355CEF68BB} => pcalua.exe -a "C:\Users\valeria\Documents\uni\Bachelor\GPS Afrika\MapSource_6163.exe" -d "C:\Users\valeria\Documents\uni\Bachelor\GPS Afrika"
Task: {994268B2-8F67-4D3D-AE11-E1DB1BD07C0C} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {9E7129BE-0913-4DF0-9151-B6369D669CE3} - System32\Tasks\DSite => C:\Users\valeria\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {A764F67E-69CC-4A34-9D9C-2F9D94A1F3A2} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {ACBD940E-D9F3-49D4-B1A5-7EA389A92A13} - System32\Tasks\Sony Corporation\VAIO Care\UpdateSolution => C:\Program Files\Sony\VAIO Care\Solution.Updater.exe [2014-12-03] (Sony Corporation)
Task: {AEDC234E-A4B3-4DFC-9C09-912BA5B08235} - System32\Tasks\{9CCDC08A-7E73-4C86-8424-D90999C3083A} => Chrome.exe hxxp://ui.skype.com/ui/0/6.11.0.102/en/go/help.faq.installer?LastError=1618
Task: {BD5335D7-470A-4C22-92FC-5DD0B9D7905F} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000UA => C:\Users\valeria\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-10-09] (Facebook Inc.)
Task: {BEF50634-C34D-413B-B034-20579CB71453} - System32\Tasks\DealPly => C:\Users\valeria\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe [2013-01-16] () <==== ATTENTION
Task: {C66C1724-2CA9-4A61-8D45-2D14E0E529C6} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11] (Adobe Systems Incorporated)
Task: {C9234186-039D-4E0D-9E9D-5AB56AAFDED6} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000UA => C:\Users\valeria\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {C9484808-A0CB-4804-897B-F4813F8114FE} - System32\Tasks\{3268092D-AD17-4C73-A05B-7CAC009974C8} => Chrome.exe hxxp://ui.skype.com/ui/0/7.0.85.102/en/abandoninstall?page=tsProgressBar
Task: {CCDA5C4F-5617-4CF4-ACD4-352335418028} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2014-03-01] (Sony Corporation)
Task: {E68D45EE-1247-45F8-BACB-2097BD80EE19} - System32\Tasks\{1EE40875-10A5-4C8D-B023-410F07370605} => C:\Program Files (x86)\iTunes\iTunes.exe
Task: {F9876B65-01EB-4BC1-9967-894E0D202AA5} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {FBA3165D-2319-4F9B-A763-FC07BDCFFA47} - System32\Tasks\VAIO Care Support => C:\Program Files\Sony\VAIO Care\VCSpt.exe
Task: {FCF99C2B-C3D2-4EF8-A559-E8B39D43DD9E} - System32\Tasks\EPUpdater => C:\Users\valeria\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-02-25] () <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000Core.job => C:\Users\valeria\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000UA.job => C:\Users\valeria\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000Core.job => C:\Users\valeria\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000UA.job => C:\Users\valeria\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-03-20 18:12 - 2015-03-20 18:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-12-19 18:54 - 2014-12-19 18:54 - 00312320 _____ () C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe
2014-12-19 18:54 - 2014-12-19 18:54 - 00083456 _____ () C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancer.exe
2008-08-26 12:41 - 2008-08-26 12:41 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-12-06 09:19 - 2010-12-06 09:19 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 00306984 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxslt.dll
2013-11-01 15:59 - 2013-11-01 15:59 - 00062464 _____ () C:\Program Files\Sony\VAIO Care\listener.exe
2015-07-04 10:54 - 2015-07-10 09:31 - 00571144 _____ () C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe
2015-07-04 06:51 - 2015-07-10 09:31 - 00647944 _____ () C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe
2015-07-10 09:31 - 2015-07-10 09:31 - 01174280 _____ () C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\2\plugin.exe
2015-07-10 09:31 - 2015-07-10 09:31 - 00614152 _____ () C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe
2015-07-10 09:31 - 2015-07-10 09:31 - 00788232 _____ () C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\5\plugin.exe
2015-07-10 10:37 - 2015-07-10 10:37 - 00423176 _____ () C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\4\plugin.exe
2015-07-10 00:53 - 2015-07-10 00:53 - 00459528 _____ () C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe
2015-07-10 10:37 - 2015-07-10 10:37 - 00651016 _____ () C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\8\plugin.exe
2015-07-10 11:37 - 2015-07-10 11:37 - 00509704 _____ () C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\10\plugin.exe
2015-07-10 12:14 - 2015-07-10 12:14 - 00050477 _____ () C:\Users\valeria\Downloads\Defogger.exe
2010-12-06 09:42 - 2010-03-02 17:22 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll
2010-12-06 09:42 - 2010-03-02 17:22 - 00013312 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll
2015-07-08 10:55 - 2015-07-08 10:55 - 00043008 _____ () c:\users\valeria\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp5pqlek.dll
2015-03-04 23:45 - 2015-03-19 09:15 - 00750080 _____ () C:\Users\valeria\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-03-04 23:45 - 2015-03-19 09:15 - 00047616 _____ () C:\Users\valeria\AppData\Roaming\Dropbox\bin\libEGL.dll
2015-06-19 11:33 - 2015-03-19 09:15 - 00865280 _____ () C:\Users\valeria\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2015-06-19 11:33 - 2015-03-19 09:15 - 00200704 _____ () C:\Users\valeria\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2015-06-19 11:33 - 2015-03-19 09:15 - 00010240 _____ () C:\Users\valeria\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-06-19 11:33 - 2015-03-19 09:15 - 00726016 _____ () C:\Users\valeria\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-19 11:33 - 2015-03-19 09:15 - 00010240 _____ () C:\Users\valeria\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2013-11-01 15:59 - 2013-11-01 15:59 - 00347136 _____ () C:\Program Files\Sony\VAIO Care\Iolo\vosges.dll
2015-07-07 22:07 - 2015-07-07 05:49 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libglesv2.dll
2015-07-07 22:07 - 2015-07-07 05:49 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libegl.dll
2015-07-07 22:07 - 2015-07-07 05:49 - 16285512 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\valeria\Downloads\Bunter Weltenbazar im November.eml:OECustomProperty

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Software\Classes\.exe:  =>  <===== ATTENTION!

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\valeria\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{14C72308-2752-44EE-B9EF-54725DC84BD3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{32B34F6A-C33E-40C4-8D92-7B1C51C41C6B}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{7005EA41-8EAD-4FBC-91C8-8D03A81DB2C8}] => (Allow) svchost.exe
FirewallRules: [{5D69196E-00FA-47F0-8B76-9116D0640BED}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{0DB4545A-A354-475F-B156-7FCCF14868AB}] => (Allow) C:\Program Files (x86)\Iminent\IMBooster\IMBooster.exe
FirewallRules: [{0A165742-14A6-4202-826C-55711A6DFF0B}] => (Allow) C:\Program Files (x86)\Iminent\IMBooster\IMBooster.exe
FirewallRules: [{7A8325AE-8560-45F9-AADC-96873C9C6E6B}] => (Allow) C:\Program Files (x86)\Iminent\MMServer\Iminent.MMServer.exe
FirewallRules: [{C71AF7F4-D1FB-4CB4-BC27-500B0D7480D6}] => (Allow) C:\Program Files (x86)\Iminent\MMServer\Iminent.MMServer.exe
FirewallRules: [{5A6FE9A2-4897-4005-A872-8FDA97FA2A23}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{95DAE13F-8228-4E58-B7BE-3525FE1A877C}] => (Allow) LPort=2869
FirewallRules: [{DDF876FB-A819-45B0-815F-1D0321AA2367}] => (Allow) LPort=1900
FirewallRules: [{41DD73ED-62DB-442C-A7B7-05C880D3C67F}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{038CC6B0-37F4-4D06-8F6B-C3C0AEA0780E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{621A51EA-3FBE-4437-A09F-02EE3E19E7F0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3DDA10EA-8619-4B2D-AF57-A04A6F31AC73}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{80ED8FE7-F708-4A89-983E-0AA79C6C2451}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{109A3F5B-01B8-4148-A7D9-EA315CDA95B8}] => (Allow) C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{7F1D9E3B-4935-4EEB-8358-D958FCE65692}] => (Allow) C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{D234A76D-5325-4AC3-8CA6-C5945AA01AB2}C:\users\valeria\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\valeria\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{757E2BF7-1442-471F-A0A1-4B15CF2CF64C}C:\users\valeria\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\valeria\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{C18F3467-03DA-4BD8-96B2-C308A3130FE1}] => (Allow) C:\Users\valeria\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [TCP Query User{185067B6-2944-497E-A8CB-F3B81095C6B2}C:\program files\sony\vaio update\internetwrapper.exe] => (Allow) C:\program files\sony\vaio update\internetwrapper.exe
FirewallRules: [UDP Query User{7655ED79-7F24-4CB7-9F41-9737FB08C02E}C:\program files\sony\vaio update\internetwrapper.exe] => (Allow) C:\program files\sony\vaio update\internetwrapper.exe
FirewallRules: [{A814D688-5602-4C85-A9B5-9E88FF861DF8}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAgent.exe
FirewallRules: [{606CEA88-07F8-40AD-95D0-88A7ACC2341A}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
FirewallRules: [{11986A90-5BAC-402C-A4C5-B10D658DB9CB}] => (Allow) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
FirewallRules: [{4F6A2B2E-FE01-4689-8DD0-39C3589C0044}] => (Allow) C:\Program Files\Sony\VAIO Care\VAIOShell.exe
FirewallRules: [TCP Query User{E2F1CA4D-F982-4867-89D2-08280C1F6DF2}C:\users\valeria\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\valeria\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{E2BFB0E6-42E6-43CA-835A-B1244961FCE5}C:\users\valeria\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\valeria\appdata\roaming\spotify\spotify.exe
FirewallRules: [{041B3B77-489A-4494-9175-400CCEF28FBC}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{F967324E-596A-4840-8A70-2B8850EC5FAE}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/10/2015 09:31:00 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7441

Error: (07/10/2015 09:31:00 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7441

Error: (07/10/2015 09:31:00 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/09/2015 00:14:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugincontainer.exe, Version: 1.0.5668.5135, Zeitstempel: 0x559d2ae3
Name des fehlerhaften Moduls: plugincontainer.exe, Version: 1.0.5668.5135, Zeitstempel: 0x559d2ae3
Ausnahmecode: 0x40000015
Fehleroffset: 0x00032cc3
ID des fehlerhaften Prozesses: 0x644
Startzeit der fehlerhaften Anwendung: 0xplugincontainer.exe0
Pfad der fehlerhaften Anwendung: plugincontainer.exe1
Pfad des fehlerhaften Moduls: plugincontainer.exe2
Berichtskennung: plugincontainer.exe3

Error: (07/07/2015 10:35:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: VCAgent.exe, Version: 8.4.2.12030, Zeitstempel: 0x5476d099
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000007fe8aa0b581
ID des fehlerhaften Prozesses: 0x328
Startzeit der fehlerhaften Anwendung: 0xVCAgent.exe0
Pfad der fehlerhaften Anwendung: VCAgent.exe1
Pfad des fehlerhaften Moduls: VCAgent.exe2
Berichtskennung: VCAgent.exe3

Error: (07/07/2015 10:35:06 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: VCAgent.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
   bei VCAgent.View.MainWindow.WindowProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei System.Windows.Interop.HwndSource.PublicHooksFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.DefWndProcWrapper(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.IntGetMessageW(System.Windows.Interop.MSG ByRef, System.Runtime.InteropServices.HandleRef, Int32, Int32)
   bei MS.Win32.UnsafeNativeMethods.IntGetMessageW(System.Windows.Interop.MSG ByRef, System.Runtime.InteropServices.HandleRef, Int32, Int32)
   bei System.Windows.Threading.Dispatcher.GetMessage(System.Windows.Interop.MSG ByRef, IntPtr, Int32, Int32)
   bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
   bei System.Windows.Application.RunInternal(System.Windows.Window)
   bei System.Windows.Application.Run()
   bei VCAgent.App.Main()

Error: (07/07/2015 10:33:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 171133

Error: (07/07/2015 10:33:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 171133

Error: (07/07/2015 10:33:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/07/2015 10:30:14 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2137


System errors:
=============
Error: (07/09/2015 00:16:06 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Service Mgr RazorWeb" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (07/09/2015 00:15:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Service Mgr RazorWeb" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/08/2015 10:57:53 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.

Error: (07/06/2015 07:24:52 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureCommand" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/06/2015 07:22:29 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/06/2015 07:18:47 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.

Error: (07/06/2015 00:10:15 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {9F070738-F6EA-408A-A6BD-AED405E67A13}

Error: (07/06/2015 00:01:51 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/06/2015 00:01:16 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Intel(R) System Behavior Tracker Collector Service" wurde nicht richtig gestartet.

Error: (07/06/2015 11:59:16 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.


Microsoft Office:
=========================
Error: (07/10/2015 09:31:00 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7441

Error: (07/10/2015 09:31:00 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7441

Error: (07/10/2015 09:31:00 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/09/2015 00:14:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugincontainer.exe1.0.5668.5135559d2ae3plugincontainer.exe1.0.5668.5135559d2ae34000001500032cc364401d0b98980cb81dbC:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exeC:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe4d5b4bc9-2623-11e5-b12f-78843c312b61

Error: (07/07/2015 10:35:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: VCAgent.exe8.4.2.120305476d099unknown0.0.0.000000000c0000005000007fe8aa0b58132801d0b8104b6020e1C:\Program Files\Sony\VAIO Care\VCAgent.exeunknowna794b53a-24e7-11e5-a31a-78843c312b61

Error: (07/07/2015 10:35:06 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: VCAgent.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
   bei VCAgent.View.MainWindow.WindowProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei System.Windows.Interop.HwndSource.PublicHooksFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.DefWndProcWrapper(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.IntGetMessageW(System.Windows.Interop.MSG ByRef, System.Runtime.InteropServices.HandleRef, Int32, Int32)
   bei MS.Win32.UnsafeNativeMethods.IntGetMessageW(System.Windows.Interop.MSG ByRef, System.Runtime.InteropServices.HandleRef, Int32, Int32)
   bei System.Windows.Threading.Dispatcher.GetMessage(System.Windows.Interop.MSG ByRef, IntPtr, Int32, Int32)
   bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
   bei System.Windows.Application.RunInternal(System.Windows.Window)
   bei System.Windows.Application.Run()
   bei VCAgent.App.Main()

Error: (07/07/2015 10:33:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 171133

Error: (07/07/2015 10:33:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 171133

Error: (07/07/2015 10:33:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/07/2015 10:30:14 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2137


==================== Memory info =========================== 

Processor: AMD Athlon(tm) II P360 Dual-Core Processor
Percentage of memory in use: 68%
Total physical RAM: 3834.9 MB
Available physical RAM: 1224.7 MB
Total Virtual: 7668 MB
Available Virtual: 4089.12 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:455.54 GB) (Free:206.26 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 19E1780A)
Partition 1: (Not Active) - (Size=10.1 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=455.5 GB) - (Type=07 NTFS)

==================== End of log ============================

--- --- ---

Vielleicht könnte mir ja jemand hier helfen? Das wäre toll.
Danke und liebe Grüße

Apfeltasche · 10.07.2015, 12:22

Zweiter Teil der Logfiles:
[/CODE]

GMER.txt:

Code:

ATTFilter

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-07-10 13:10:49
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\0000005d Hitachi_ rev.PB4O 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\valeria\AppData\Local\Temp\kxlirkog.sys


---- User code sections - GMER 2.1 ----

.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                                       0000000077111401 2 bytes JMP 76c6b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                                         0000000077111419 2 bytes JMP 76c6b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                                       0000000077111431 2 bytes JMP 76ce8f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                                       000000007711144a 2 bytes CALL 76c4489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                           * 9
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                                          00000000771114dd 2 bytes JMP 76ce8822 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                                   00000000771114f5 2 bytes JMP 76ce89f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                                          000000007711150d 2 bytes JMP 76ce8718 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                                   0000000077111525 2 bytes JMP 76ce8ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                                         000000007711153d 2 bytes JMP 76c5fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                                              0000000077111555 2 bytes JMP 76c668ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                                       000000007711156d 2 bytes JMP 76ce8fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                                         0000000077111585 2 bytes JMP 76ce8b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                                            000000007711159d 2 bytes JMP 76ce86dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                                         00000000771115b5 2 bytes JMP 76c5fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                                       00000000771115cd 2 bytes JMP 76c6b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                                   00000000771116b2 2 bytes JMP 76ce8ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[4260] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                                   00000000771116bd 2 bytes JMP 76ce8671 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                         0000000077111401 2 bytes JMP 76c6b21b C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                           0000000077111419 2 bytes JMP 76c6b346 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                         0000000077111431 2 bytes JMP 76ce8f29 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                         000000007711144a 2 bytes CALL 76c4489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                           * 9
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                            00000000771114dd 2 bytes JMP 76ce8822 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                     00000000771114f5 2 bytes JMP 76ce89f8 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                            000000007711150d 2 bytes JMP 76ce8718 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                     0000000077111525 2 bytes JMP 76ce8ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                           000000007711153d 2 bytes JMP 76c5fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                                0000000077111555 2 bytes JMP 76c668ef C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                         000000007711156d 2 bytes JMP 76ce8fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                           0000000077111585 2 bytes JMP 76ce8b42 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                              000000007711159d 2 bytes JMP 76ce86dc C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                           00000000771115b5 2 bytes JMP 76c5fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                         00000000771115cd 2 bytes JMP 76c6b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                     00000000771116b2 2 bytes JMP 76ce8ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe[6780] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                     00000000771116bd 2 bytes JMP 76ce8671 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                        0000000077111401 2 bytes JMP 76c6b21b C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                          0000000077111419 2 bytes JMP 76c6b346 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                        0000000077111431 2 bytes JMP 76ce8f29 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                        000000007711144a 2 bytes CALL 76c4489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                           * 9
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                           00000000771114dd 2 bytes JMP 76ce8822 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                    00000000771114f5 2 bytes JMP 76ce89f8 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                           000000007711150d 2 bytes JMP 76ce8718 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                    0000000077111525 2 bytes JMP 76ce8ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                          000000007711153d 2 bytes JMP 76c5fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                               0000000077111555 2 bytes JMP 76c668ef C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                        000000007711156d 2 bytes JMP 76ce8fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                          0000000077111585 2 bytes JMP 76ce8b42 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                             000000007711159d 2 bytes JMP 76ce86dc C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                          00000000771115b5 2 bytes JMP 76c5fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                        00000000771115cd 2 bytes JMP 76c6b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                    00000000771116b2 2 bytes JMP 76ce8ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\3\plugin.exe[6888] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                    00000000771116bd 2 bytes JMP 76ce8671 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                        0000000077111401 2 bytes JMP 76c6b21b C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                          0000000077111419 2 bytes JMP 76c6b346 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                        0000000077111431 2 bytes JMP 76ce8f29 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                        000000007711144a 2 bytes CALL 76c4489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                           * 9
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                           00000000771114dd 2 bytes JMP 76ce8822 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                    00000000771114f5 2 bytes JMP 76ce89f8 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                           000000007711150d 2 bytes JMP 76ce8718 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                    0000000077111525 2 bytes JMP 76ce8ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                          000000007711153d 2 bytes JMP 76c5fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                               0000000077111555 2 bytes JMP 76c668ef C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                        000000007711156d 2 bytes JMP 76ce8fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                          0000000077111585 2 bytes JMP 76ce8b42 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                             000000007711159d 2 bytes JMP 76ce86dc C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                          00000000771115b5 2 bytes JMP 76c5fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                        00000000771115cd 2 bytes JMP 76c6b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                    00000000771116b2 2 bytes JMP 76ce8ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugins\7\plugin.exe[7196] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                    00000000771116bd 2 bytes JMP 76ce8671 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                                                         0000000077111401 2 bytes JMP 76c6b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                                                           0000000077111419 2 bytes JMP 76c6b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                                                         0000000077111431 2 bytes JMP 76ce8f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                                                         000000007711144a 2 bytes CALL 76c4489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                           * 9
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                                                            00000000771114dd 2 bytes JMP 76ce8822 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                                                     00000000771114f5 2 bytes JMP 76ce89f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                                                            000000007711150d 2 bytes JMP 76ce8718 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                                                     0000000077111525 2 bytes JMP 76ce8ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                                                           000000007711153d 2 bytes JMP 76c5fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                                                                0000000077111555 2 bytes JMP 76c668ef C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                                                         000000007711156d 2 bytes JMP 76ce8fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                                                           0000000077111585 2 bytes JMP 76ce8b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                                                              000000007711159d 2 bytes JMP 76ce86dc C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                                                           00000000771115b5 2 bytes JMP 76c5fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                                                         00000000771115cd 2 bytes JMP 76c6b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                                                     00000000771116b2 2 bytes JMP 76ce8ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\valeria\Downloads\Defogger.exe[5176] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                                                     00000000771116bd 2 bytes JMP 76ce8671 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                            0000000077111401 2 bytes JMP 76c6b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                              0000000077111419 2 bytes JMP 76c6b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                            0000000077111431 2 bytes JMP 76ce8f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                            000000007711144a 2 bytes CALL 76c4489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                           * 9
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                               00000000771114dd 2 bytes JMP 76ce8822 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                        00000000771114f5 2 bytes JMP 76ce89f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                               000000007711150d 2 bytes JMP 76ce8718 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                        0000000077111525 2 bytes JMP 76ce8ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                              000000007711153d 2 bytes JMP 76c5fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                   0000000077111555 2 bytes JMP 76c668ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                            000000007711156d 2 bytes JMP 76ce8fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                              0000000077111585 2 bytes JMP 76ce8b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                 000000007711159d 2 bytes JMP 76ce86dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                              00000000771115b5 2 bytes JMP 76c5fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                            00000000771115cd 2 bytes JMP 76c6b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                        00000000771116b2 2 bytes JMP 76ce8ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe[7888] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                        00000000771116bd 2 bytes JMP 76ce8671 C:\Windows\syswow64\kernel32.dll
---- Processes - GMER 2.1 ----

Library  c:\users\valeria\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp5pqlek.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996](2015-07-08 08:55:43)                                       0000000002dd0000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\Qt5Core.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-06-19 09:33:08)           0000000069090000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\icuin52.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996] (ICU I18N DLL/The ICU Project)(2015-03-04 21:45:30)                                                           000000004a900000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\icuuc52.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996] (ICU Common DLL/The ICU Project)(2015-03-04 21:45:30)                                                         0000000005a60000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\icudt52.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996] (ICU Data DLL/The ICU Project)(2015-03-04 21:45:30)                                                           000000004ad00000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\Qt5Widgets.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-06-19 09:33:12)        0000000068590000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\Qt5Gui.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-06-19 09:33:09)            0000000068c90000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\libGLESv2.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996](2015-03-04 21:45:30)                                                                                        0000000068a60000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\Qt5Network.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-06-19 09:33:09)        00000000681e0000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\Qt5WebKit.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-06-19 09:33:11)         00000000671a0000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\Qt5Quick.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-06-19 09:33:10)          0000000066f80000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\Qt5Qml.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-06-19 09:33:10)            0000000066d20000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\Qt5Sql.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-06-19 09:33:10)            0000000066cf0000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\libEGL.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996](2015-03-04 21:45:30)                                                                                           0000000068fb0000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\Qt5WebKitWidgets.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-06-19 09:33:12)  0000000066cc0000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\Qt5OpenGL.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-06-19 09:33:09)         0000000066c80000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\Qt5PrintSupport.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-06-19 09:33:10)   0000000066c20000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996](2015-06-19 09:33:08)                                                                       0000000066ae0000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996](2015-06-19 09:33:08)                                                                       00000000669d0000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996](2015-06-19 09:33:29)                                                                         0000000069710000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996](2015-06-19 09:33:18)                                                           0000000066810000
Library  C:\Users\valeria\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll (*** suspicious ***) @ C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe [4996](2015-06-19 09:33:28)                                                                    0000000069700000

---- EOF - GMER 2.1 ----

cosinus · 10.07.2015, 12:25

Hi und

Adware/Junkware/Toolbars entfernen

1. Schritt: Malwarebytes

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!)

2. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

3. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

4. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Apfeltasche · 10.07.2015, 15:55

Vielen vielen Dank für die super schnelle Antwort! Wirklich klasse!
Ich hab jetzt alle Schritte gemacht und das kam dabei raus:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 10.07.2015
Suchlauf-Zeit: 15:35:45
Logdatei: MBAM_Suchlauf.txt
Administrator: Ja

Version: 0.00.0.0000
Malware Datenbank: v2015.07.10.04
Rootkit Datenbank: v2015.07.10.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: valeria

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 380980
Verstrichene Zeit: 1 Std, 8 Min, 10 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 0
(Keine schädliche Elemente gefunden)

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 0
(Keine schädliche Elemente gefunden)

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)

Code:

ATTFilter

# AdwCleaner v4.208 - Bericht erstellt 10/07/2015 um 16:12:29
# Aktualisiert 09/07/2015 von Xplode
# Datenbank : 2015-07-10.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : valeria - VALERIA-VAIO
# Gestarted von : C:\Users\valeria\Downloads\AdwCleaner_4.208.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Program Files (x86)\Conduit
Ordner Gelöscht : C:\Program Files (x86)\Delta
Ordner Gelöscht : C:\Users\valeria\AppData\Local\Temp\mt_ffx
Ordner Gelöscht : C:\Users\valeria\music\qtrax media library
Ordner Gelöscht : C:\Users\valeria\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\valeria\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\valeria\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\valeria\AppData\LocalLow\Softonic
Ordner Gelöscht : C:\Users\valeria\AppData\Roaming\BabSolution
Ordner Gelöscht : C:\Users\valeria\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\valeria\AppData\Roaming\dvdvideosoftiehelpers
Datei Gelöscht : C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_debipekfdkglkmbbilkejdacgofbpkjj_0.localstorage
Datei Gelöscht : C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ejnmnhkgiphcaeefbaooconkceehicfi_0.localstorage
Datei Gelöscht : C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fmfnfnpmhcllokmkepffndflpnadjmma_0.localstorage
Datei Gelöscht : C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mphpbdjcljebbcnfopfngmfdackbbdgf_0.localstorage
Datei Gelöscht : C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ojcgaoafcmbadjkfdippkdddgkeaipbn_0.localstorage
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Windows\SysWOW64\config\systemprofile\AppData\Local\GDIPFONTCACHEV1.DAT
Datei Gelöscht : C:\Users\valeria\AppData\Local\GDIPFONTCACHEV1.DAT
Datei Gelöscht : C:\Users\valeria\AppData\Roaming\GDIPFONTCACHEV1.DAT
Datei Gelöscht : C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.pricepeep00.pricepeep.net_0.localstorage
Datei Gelöscht : C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.pricepeep00.pricepeep.net_0.localstorage-journal

***** [ Geplante Tasks ] *****

Task Gelöscht : BrowserProtect
Task Gelöscht : Dealply
Task Gelöscht : DealPlyUpdate
Task Gelöscht : DSite
Task Gelöscht : EPUpdater

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\Iminent.MMServer.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\Iminent.WebBooster.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\I
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent.Business.TinyUrl.UrlTinyfier
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IminentMMServer.ACPlayer
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IminentMMServer.ACPlayer.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
Schlüssel Gelöscht : HKCU\Software\5857dc8ae53ee848
Schlüssel Gelöscht : HKLM\SOFTWARE\5857dc8ae53ee848
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{13C8734A-1AD2-4500-9F65-10D99AD80F54}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{8E9F2D02-6B06-4EBA-92C2-68438EADED28}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B15F118E-AF21-45E8-A809-29FDD7362565}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{01BB6254-5E89-4C53-BEF1-4D1656B09B86}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{26C9BBE4-6D45-4AB6-A5B4-E068C9F5EF6D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8E948448-E97B-4864-8177-546200709672}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{913FAA37-8CDB-4144-9047-E2A950CD967E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9FD0C1D9-180B-4834-B80B-4B7325AF90E1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A3E2F089-DDBB-4CBF-B06C-5D44DA316ED3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A93B530D-2B18-48C7-9F3C-281679403372}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D8F01233-2DE6-4EE7-8988-37263F00651B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B853E835-9F24-4F4B-B55C-E554D15CCCD2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{087CDC12-0A11-4D1D-8DCF-44185D7C3496}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{088BF3A9-6AE8-47B9-A3FB-26262F236C79}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2AC7B9EB-3881-4EB9-8DEE-0A731A309FDE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{349C0469-ACDD-49DF-9B3E-0D82E7C7DC4D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{41226591-6F7A-4082-B63A-67FE4A0CF7A6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55D69CD1-6715-4C40-BF05-9519AC4DC6E6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66C8FD57-54C4-4D4F-BC95-DCCC763B410A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{717BAE33-7061-4279-8AE5-6C13BC8AF3F9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{84F06F7A-F811-48D7-8B34-3F4145183D8F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{88F6D55F-AA3F-4003-BE69-4AC1998D6492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{913FAA37-8CDB-4144-9047-E2A950CD967E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A0F66203-1A86-4812-9603-A57E09A4D7A3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BC39D1B3-4471-41C1-AACA-E097FAF4B7AA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DEB85542-1311-4EC6-8A32-5372EB27FC94}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11D9E165-B8C1-4734-A56C-BC4FCACA966B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{425F621C-217C-40AD-B22F-4EFCFF452800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{5563BEFE-3B03-43B1-8041-64A9745DAA56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{8E9F2D02-6B06-4EBA-92C2-68438EADED28}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CF034EA-7B46-48D3-8895-8A14B32AE445}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{087CDC12-0A11-4D1D-8DCF-44185D7C3496}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{088BF3A9-6AE8-47B9-A3FB-26262F236C79}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2AC7B9EB-3881-4EB9-8DEE-0A731A309FDE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{349C0469-ACDD-49DF-9B3E-0D82E7C7DC4D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{41226591-6F7A-4082-B63A-67FE4A0CF7A6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55D69CD1-6715-4C40-BF05-9519AC4DC6E6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66C8FD57-54C4-4D4F-BC95-DCCC763B410A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{717BAE33-7061-4279-8AE5-6C13BC8AF3F9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{84F06F7A-F811-48D7-8B34-3F4145183D8F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{88F6D55F-AA3F-4003-BE69-4AC1998D6492}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{913FAA37-8CDB-4144-9047-E2A950CD967E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A0F66203-1A86-4812-9603-A57E09A4D7A3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{BC39D1B3-4471-41C1-AACA-E097FAF4B7AA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DEB85542-1311-4EC6-8A32-5372EB27FC94}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\5EFE506AEABD46DC935A929E49AF61A6
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{209C3720-5DC6-410E-B94A-B52C220BD417}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\Cr_Installer
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\BackgroundContainer
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\BackgroundContainerV2
Schlüssel Gelöscht : HKLM\SOFTWARE\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\Delta
Schlüssel Gelöscht : HKLM\SOFTWARE\Softonic
Schlüssel Gelöscht : HKLM\SOFTWARE\AnySend
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WInterEnhance
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VLC classic
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Tarma Installer
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F7C80F9CE5CDF44E9AADDC99402534C
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\206AF45B775E3A445B3B2273827DA85F
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\225C3CBCEB850204D860A6C7CC7724AF
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29C79786B109AC443B0DC7BFD61B1896
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3DA5F64B3483DE549947A9164ACBAD21
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4FEEA83BF72B97E43A2DF0EE4BE4F261
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\509EC7EFB89B7D942997574AB14037A4
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60ECC80C54085B141A40437A96CA2618
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6241FF6F317CABD4EBBEE0DE9076BD94
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90841B1FC98200349925C88999866F17
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4223BBC9438CAD49BBE10B4E344B1DD
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B752EF3300008394886C402CC27B474F
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA360F24F0B214744BE40657FDA0B727
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5389AEEA4A1E20428D045E86BCF643B
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDA2534BD056D1F44B6EC96AAA7F1F6E
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DEF7558C7CD27EF46AF802AFBE402675
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E05B987540A9E2849AAF9E5B06C27DA8
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EEB44C47185BD304D80FDF5A4BBE8F54
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F214EB834D2EC474CA76C1CDE306CF3A
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F6704141BAAF6884785EC6843143D6A7
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\iminent.com
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:64373;hxxps=127.0.0.1:64373
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:64373;hxxps=127.0.0.1:64373
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17840


-\\ Google Chrome v43.0.2357.132


*************************

AdwCleaner[R0].txt - [17701 Bytes] - [10/07/2015 16:05:25]
AdwCleaner[S0].txt - [16512 Bytes] - [10/07/2015 16:12:29]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [16572  Bytes] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.4.0 (07.10.2015:1)
OS: Windows 7 Home Premium x64
Ran by valeria on 10.07.2015 at 16:34:36,96
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Users\valeria\appdata\locallow\microsoft\silverlight\outofbrowser\index\portal.qtrax.com
Successfully deleted: [File] C:\Users\valeria\appdata\local\google\chrome\user data\default\local storage\chrome-extension_hggpkhijoeadmdfmlbdepfbngmhaldci_0.localstorage



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{006D4A64-C357-4BB3-B607-812225D75110}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{00A93481-E394-4E52-BB6B-9153B245377F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{00B6A3F5-799D-477F-83D8-73C36953AC8F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{00BF05EF-44CE-400B-9019-580CEF8F200D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{00F2139C-1193-4769-A54F-7CEF61E47E9A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0140A09D-AE8F-43AB-BBCF-D689CF2AFE4C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{01517C87-A697-4FDF-AD71-4BE099F63321}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{01632F4E-6BF2-430C-8317-4839A2D2B005}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0186F335-6EBD-43FD-A243-838ABD94B1AA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{01ABBDEC-C7F9-4D5F-A1CE-98B66F6EFA78}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{021F1FEA-10DB-4E84-A12A-471C4240E52E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{02748FEC-F03E-480F-89EC-D4640E1B096E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{031E51CA-A4BD-47C3-9938-415BD691EFC3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{032A0B76-1EF3-4925-B7D8-774199E207A6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0484673F-A72B-4F38-9657-03B40DA1692D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{048B23C2-0C96-4963-89D6-7B0CC1E95F4D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{04D31283-E2BC-4C4E-9157-7CA648E416E3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0509BDD3-29AB-4EFE-B3FF-BCCA1A3FE59A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{052995BF-D5DD-434F-9370-A1C7A18F0C39}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{054BBD69-D47C-4695-A1BF-1875BCA3AAF1}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{05663A36-1903-4EB8-95E2-C81B9E28E0B3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{056BD91E-C907-421E-9BFE-373C67D99E67}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{05B7CC21-17B1-4795-B717-C3FC509CFF08}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{05F30944-8C9B-4E0F-A629-FD601A38A94F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{06FFA2D2-6124-4687-ABD4-EC8E3EA52173}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0733394E-513A-4F56-AB77-76D8D66A8240}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0743251A-5AAC-4B2C-864C-3D5E4787EE6B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0850CB23-5FD0-4F7D-8DE3-DDF4B61FA95C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{086A2E90-1130-4FFF-A70D-30A5ECE29AA8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0890C8B5-43BF-4047-A759-2E9697165681}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{089D5FE1-B01C-4F89-96B9-0540C92C0505}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{08C94E8D-060F-41F0-981E-267E78E9876A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{093280F0-8029-4B22-A487-8828E51D901B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{093F07CF-588A-41A4-82BA-8CF5648A7A93}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{09F8CDC8-3C70-4C5A-8497-74EF487F3A7D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0A65BD33-B640-4D78-B349-3F6F6195033D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0A9E889C-362B-49D1-BDE7-BF289D924210}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0ADD3688-3FFC-4F57-9E89-DD1694B1321A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0AE7C720-39E7-48E2-B583-E9E63A123FEC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0AEA3FCE-2D47-40CD-B932-D6CA368A670C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0BCDBD3D-93BA-400E-9BA8-D5FB1CB9ADB0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0BD83DF2-6B69-471E-8431-9D3A76BF31AF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0C1352CA-CBC6-4DB3-8DC6-99289F9C70D9}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0CC98E41-33F2-4573-90EE-D9394A75A896}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0CD692E2-8E66-4285-948A-DABDF6DD5065}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0CE9CF23-9B80-4F8B-8C0E-35270EF4CEE8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0CFB4316-EAD2-469B-A2D3-1977E748469D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0CFFBC42-9DCB-4EBA-B4A6-7018B12C3CCD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0D4E918D-F1B0-4272-B125-26A496EE9216}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0DD66D9D-6B27-4AD3-91CE-27E15788421B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0F4432B6-32AA-439F-B6AA-F2CB766CF5AB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{0FEF6671-2BE7-4372-B0A0-45AA255D3038}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1015DBFE-B0DA-4E2A-9D97-09EC2D0DACD3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{102ED3C6-71BC-49D6-A388-F8691B5ED022}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1054B36A-40B0-47AA-831C-3778BE27D48B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1080C463-31DC-4176-AFD6-F3DD4163B438}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{109B804C-F40A-4F68-A0F2-D4075DD20D50}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{110801D4-98EF-444D-8562-8FF1F55CD4C9}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{114E282A-0CDE-4421-BA5B-7633880B1705}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{11574741-83F2-4E9A-BEBD-57AB9DAF18AE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{12057268-2B6C-4EAC-B845-6709E20423CD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{12799B6B-D15C-485E-BC96-5993E6568FE4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{128C5CE3-9FE1-40DC-8C55-B61019B22B01}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1292075D-9F95-4690-8926-E8CEC1982FED}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{12C6D10B-2469-4A46-ACC4-E72290CAB2BC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{12F0DA67-BA3B-458D-AB03-B82159832B1F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1313D2D8-BA5C-4204-8BB4-00144C73AA59}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{132FB021-AF2A-4788-BDBC-3CD321CDE528}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{135F9F04-1B39-4D43-8710-08670E073519}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1399056F-5CAA-4F3D-970D-FA6CE9886B83}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{13B33622-98A8-48A1-A2C3-ECB84FBF4585}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{13F4B47E-BD50-4324-B506-29D9A45F9D38}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{146E5514-8310-4757-B974-79251BAFAFF7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{14B1812F-AF7C-4831-B976-24DB74BA1A28}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1500168A-A9FC-4726-A346-080F25328E05}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1552225D-E4F5-416C-B69C-A0AB1F423F94}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{15874100-B22D-4127-9C92-7194D7BB4F5D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{15D92F51-4033-4F80-A9A8-40A81747BF67}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{16462C60-641F-47A1-9EC5-0C2E92B6DC80}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{168DFE2F-E8F3-4464-BC6F-2B41947E54EE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{170DCD42-E06A-4EF9-9C04-18CEF2888B21}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{18A3942E-0F64-4969-B09A-981902C9F7C7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{18B075B2-F197-4A71-9357-C83915FDCF7E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{18CC91BB-3AE4-4AA8-946F-E248E9110E44}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{18E1FB27-6B03-48A2-9413-A746909A6838}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{18E89727-6AA0-4CA1-A411-93982A3AB1E8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{192EF8B2-CC6F-4224-AB0E-EA954BBAD8D5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1940930A-37A7-46D4-89ED-B17021A9D78A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{19BF43F3-0EB4-4086-83ED-0E9B8120BF32}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{19CCB564-E8E3-46F6-90CA-644834D77904}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1B0F5EB8-86A9-44A8-8C25-4017BBF78791}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1B8F3AFE-9BB6-4456-999F-3D8F4D1B0785}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1BA13D2F-3FDC-4D00-8B95-CAB48517C715}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1BE5153D-FD4C-4C73-BE61-7076D682AF8D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1BF03DD7-626B-4E5C-B86D-89AB42CF6D07}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1BF0AE3C-E949-47E2-A324-5388604EFED4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1C1C2429-CC2D-4CB0-9500-4C8604556233}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1C463E0A-3913-4B52-B19F-E52F042CF710}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1CC27155-7F0E-4A38-A7AC-A3B91735DB6F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1CDD4891-B389-4EE4-B354-85ED65012F7F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1DFF7660-6358-4F6E-A914-D3E7E97C1219}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1E212415-9B06-4259-81DA-113B02077EBB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1F69197F-54DA-46B5-8564-D3019B8D4F4E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1FA29101-CEEC-45CE-9533-9D2F630D1697}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1FACFAEE-4360-4891-95B0-3E02C79E611C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{1FC544A1-3567-48B6-B010-12BBC720C12C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{20433B20-734E-4B0A-B599-E6D96B45F6B0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2054F99D-F254-404C-8870-F5EE21789F36}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{20C0CBC3-E181-4E64-8BBC-3FD27533EB6F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{20C25FCD-DF7F-491E-B69C-551559A14E69}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{21108EAA-97BF-4F03-9DF6-A366E43114C2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{217D371C-2E8C-4A7C-821B-C411B7050CFC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{21844D3B-AA8D-4EF6-BCDA-ED6BB4185C32}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{21A52624-382B-4F41-829F-7E793E483DAC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{21C5C424-2905-44FF-A640-5D64079AC996}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{21F9748A-C451-492F-B604-FB14138AA74C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{220474E6-BCEA-4DBC-9815-0C0D5253E070}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2209B277-DA4E-4E60-AF75-E1C03FBF3C52}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2214BEEB-3DA4-4926-8398-8C765F00DF34}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{22883488-BFFD-4E10-9A71-D4B6DBD57CAE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{22C7CDF5-9CAB-4939-B0F6-9277F1AD2848}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{22D072BF-572F-4029-A25C-CB03F6562760}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{22D2515F-633A-4723-9853-7F5BF0F05AFF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{22D8B637-1521-4F08-9201-7392C4CB286E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{22EC8A24-C50B-43FE-9350-766B9EBF5AB2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{233676CC-2028-41C7-A467-4773826ED219}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{23F26922-B68A-42A8-8FB5-21AD7AA12D4A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{242BDE11-5BB4-4F6D-ABA1-8EC03CA9F871}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{24398048-ACAA-49EC-8CB2-9EC5B311166E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{249AE38C-C473-46E8-8070-E24C8F84CB36}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{24A9C998-5FE4-429D-BBAA-D2C070E9A146}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{24B7BE52-22DB-431A-9C2F-E3042BB2055F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{24D053FB-ABB2-4346-B1B9-E9D9A03C6936}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2571F42A-F679-4573-B5D3-2EACB755E4CF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{25C39B84-9D8D-4E75-BDCF-951B272C9769}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{25F1821F-D78D-4F9E-92D8-BF3194A4359E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2689DC1C-0F88-4FC8-858A-BB0C8EE2C32C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{269D6737-35FD-4BFF-98D5-CBBEDC1E4545}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{26C180F1-3AAE-4A29-9049-E091C35518FE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{26E9831B-8A0D-4FD2-B171-1436E2865346}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2752F040-E577-46EB-87AF-C85BE4290FD4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{27729022-AC95-4AB2-87D4-A3BB0092A794}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{27C862F4-0AB2-4E3A-BD05-9061014ED055}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{27CE8878-D96C-47D3-BE78-E520DE31C342}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{27DFB09A-AD47-4262-B3BF-3D063A6AD542}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{28330443-8FA6-4A55-8AB8-A30BCB93C4A2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{284008FF-22E7-4A71-8EF9-BD78CF01EF61}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{284FADCF-46FB-4595-A904-511626DDD4F5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{28BD8F20-C14F-437B-AB16-CC9CCDBCBECD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2931A0DD-05E9-4245-B1E8-6D35A48C6627}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{296DAC4D-6B7E-4579-BE2D-1F2714B4FEE7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2978AD7C-1C46-430D-82BA-0C780A0C33F9}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{29A6E4EB-2E5D-4180-87AA-1D8D66D1375A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{29BA6FAC-1F95-45CD-A4FA-E9B6CB362E8B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2A2764DF-AAF3-4F75-9835-AD71478F92BA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2A8B13CA-14FF-4DA8-9B89-B43F8E34A362}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2A91F191-9FB2-4FFE-9AD8-78BF3E814388}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2AA9261F-ADAD-43E1-9F4A-569EAC86FC38}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2AB2BC0A-75CC-467A-8B0F-79945720EF40}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2B31116C-BCDD-4059-B70A-F42639A02112}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2B838244-0E40-4720-ADE4-2915488977F8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2B852F27-28D9-4F2A-B1B7-1D58EACDDEDC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2B86FAC1-189D-4B96-B792-B87F3927AAFB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2C453DBE-0551-4569-AB78-4F4A05071654}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2CABD57B-3EA7-4C68-99AE-E9A860256866}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2CB04AE8-E08F-473E-9692-C749B23BF5FC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2CCDD469-3E20-4338-9A12-D379A18FCA39}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2D0457FB-E223-4CBF-AC24-7382BA563FD8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2D3CCA39-517D-4F87-87FE-09657537C6C7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2D99287C-8012-4497-8436-ECF3C8C8998E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2DF58C3A-9835-455A-8D4E-3DD63E772A47}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2E7E7D02-8118-480F-8400-C54B5D50EF25}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2ECF81AC-5AB6-4B17-A8F8-D8809FD0F182}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2F140478-6B0E-45CD-B52D-02F8B80404CF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2F440E69-8EF2-49B3-BEC4-99CD048234E8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{2F67B33B-BF85-47EB-A026-C7DF5BD1F19A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3047CB5C-95CA-4401-87D8-CC8493F89C7B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{30F00D8C-C74C-44E0-BF13-72AA0E88908E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3120B599-F47D-48B6-94DF-4CB5F955055D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{326F2333-B86A-4DE2-B1F2-E6FF2DFA4896}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{33083C81-5F6A-43FC-9070-AD5C29BC70D8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{33452368-3AFD-40E1-A75C-249E3CE4A4E8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3371419B-1772-45A0-AD1D-014FF7524519}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{341A652A-1B89-4F2D-853F-7E7C474F6375}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{344AC32D-B55F-48B0-8392-96B358444AD0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{345F540A-2640-4A8F-AD17-DF731CBF4CC4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{34C9C7B5-8A5F-4EC8-932A-65858B0BA4EA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{34CF8C23-36BF-4614-8C25-D770202C2B06}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{34FF8B21-9849-4063-89B6-6FF7262EDDBF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{350248C5-DF53-47FC-91E4-047DFA0941FA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{354CC2CA-B2DD-47F0-B81E-5611E8904ADF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{35BA255A-B3AF-4AC9-B08A-182DE948E406}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{35BAC78F-18D2-439C-A47E-FB14AF719EF2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3655C67C-B3A2-4051-94E2-38C256D779EF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{367F5A88-2FB0-4346-8671-B84EBC0052C2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{369F5393-E4D9-4DD3-9D3F-888357CD6FC5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{36EA1850-C762-4C17-98D8-8F5BFF2885F4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{371A9A17-A287-4ABA-AC34-FCB97437E483}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3726219D-66E9-4DCA-96DA-15BAE6A7DBBD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{37CA5FFA-3F06-4248-9928-A460E7896B49}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{380349BE-7CB6-43A3-852C-50FE57AB2E60}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3838D4E2-B956-4F4A-AA08-AA8C7D1BE04D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3849C22D-DCCB-4F16-9E92-6F4D42E7B456}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{392BEE67-CF05-42B5-9136-4E96CEA5026D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{395F4C66-3BE6-47A3-B4F8-C35671F09196}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{39690C3F-39BE-43C4-A35D-0077EF3B92C7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3986E529-10C1-44F1-991D-5AC4C225B79E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{39B70B9A-1A06-464E-B853-5724C73C2632}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3A43F1A1-5E5C-43DC-AC17-10DCC471FAF5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3A57DE67-3E33-4FF3-88AF-9C118F0B36DD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3A5CE1F0-70EC-458F-AA7F-8FCA132FD458}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3A8BEFCE-C0C5-4BFE-B3AB-C46F0ACEE674}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3AAE86DC-DA62-4DE2-93E7-BD81E16A469C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3AB4A5D5-A43A-4754-BDFD-BBD6A5B32860}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3AC9EF0B-BAB5-47A5-ACA5-CD48FB7EDB6E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3BA236D7-CCFC-4F5C-A633-B74EA4EE1054}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3BB9D48F-6ADD-4688-B459-0D6F1BE7F756}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3BDFBC94-AFF6-4418-A6F3-3C55CE715BEF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3C4CF9B9-1FF1-44D5-9821-C97F7E983017}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3CE31F8A-20EA-44EC-8DDE-9E8808F26458}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3E41B633-7E92-4D75-9DD9-6D18091B1669}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3F10D7AE-3958-46F4-A070-89B16CDAF5C0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3F508A19-6DCF-42AF-9DF8-22F56FAF426B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3F6AA7F0-12C8-4F86-BA0A-EE323A8C3678}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{3F984098-6202-45C7-8DB4-D1E479725853}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{40473B99-FA36-47C2-BFE8-42F7C63D3B41}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{406DFD44-25D5-490C-B8B1-6FACE3D8BE10}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{41446F11-AAD6-4F70-8BAE-25E8FD9F2D2A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{415820DE-B7F0-41DC-B4F1-A52D77A43DDA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4166831C-12DA-4E60-96B1-48D77DEB01EA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{41AF183E-AF1A-4FE3-B633-A930FB11B7FB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{41B70050-7B45-4020-9008-1EE10FEF7F34}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{41CBAE2E-A45E-4D0C-8645-94CC38D0988A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{435152F2-85A4-4343-903B-4169F1A4E349}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{43B06D32-993C-49BF-93DE-80586218B445}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{44DE3A68-17B3-4A0A-AA0D-01BD980D3E11}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{45FEC1F6-698B-4627-92F0-7171C205B72D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4665689A-AF82-4791-921F-6BCFE35CD899}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{467D3D6E-796E-4F67-8B15-C97290A773AD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{46958EAB-A022-4684-B683-57DA608E5528}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{469AECF3-D704-4B69-93A7-6D2C069B9857}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{46E3CD4C-9FEE-4896-87AB-B124FB581D11}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{46F104B8-F997-4199-ACE1-E3738CED948B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{479E10C8-F333-4271-B227-0122A82B4CFC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{47D85F9A-FD7A-4159-A9EB-26A35B298DF7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{47FBA834-2878-4405-9608-740DC17A8CBF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{482940FE-58C0-4A0C-AC86-0C5ECD820F86}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{484711EE-EB84-4B13-8C53-64D5EAF391D7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{48A3F506-AD30-4386-B5DF-375EDB4E0BDC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{49023F64-6087-49A2-95E8-18A722A237C0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{491B50FB-7657-4A0C-9656-637A83A5E023}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4971704B-E3EA-4E4F-B170-EA2D575AE3B3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{49E6ECDA-DCD2-4C8D-B27E-29E938897C3A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4A5E7229-EDAF-4C50-A5C4-4C64681125DD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4AF63D5F-FBF8-48A6-AF9C-1457B104048C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4B386679-A603-4953-B297-6B4CAF4312BB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4B658942-C907-40C6-A8E7-495028036B81}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4BA94D77-FBE0-4286-A24C-46F2BE97D08B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4BECBC7C-36AC-43C8-BCCB-26C6B5302073}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4BF4CA65-2CC3-4804-BEA1-53BD34437233}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4BF5DB81-6E5F-4971-8E53-86D5A5DE7C82}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4C034E64-734F-45A9-B6CE-A67E046660A1}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4C76CD8E-7BDB-4004-8B78-6A399B964218}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4CB88E0F-8632-4573-AB15-A370BA8E5E6C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4D316EE6-6E53-462C-83E6-B121BFEC9308}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4D40DDF1-748D-4973-A120-BF6E533BCAB1}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4E860E3D-558B-4969-9B75-519333A9BB25}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4EB68C4C-FF41-49C1-A90A-893C59930F53}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4ED6DAF2-3B29-46BA-9A75-4376CBB000E5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4F1DF2E4-DDC0-443E-9955-C45CB7AB3959}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{4F758A9F-2FB3-49A2-AA31-A91B01C6E592}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5020FF93-678B-4CA0-937E-0B581709F658}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{50875873-3958-45AD-9D7A-A5C71FC203BC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{50B216B4-2404-4EDF-965B-B0000F78777C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{50BBF62F-A5F1-43F3-BD77-FEF64D36D525}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{50CFB91D-2B25-4ECF-9834-D703B72778A7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{51D092C8-F8FD-4459-9094-019A22C9A02D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{52228E84-0E97-44C7-B7F1-F7B2F3D9E679}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5254248A-C3B0-4F7A-8CC0-654E09D56133}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5280BA08-49F9-471C-83F1-93732133911B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{52C9B63B-5C63-4DC4-B774-A6BE7B1ECD75}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{52CAE507-4F29-43BC-8617-2E99DB4EBB79}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{52DC7300-B356-422C-A31D-89847C1ABAEB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{53450A74-4B21-4865-B32D-D863AE31C9BE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5385ED50-EC9B-42E5-A437-167048C188F8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{53E0320F-9C04-4ECE-A246-5EF8E2473C1B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{541AA1C8-8378-4C23-B4E1-9504F771073A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{54BD4AA1-A752-4F30-9885-114490832DBE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{54DCB03A-8943-43BC-A4F5-C3E29BF10C58}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{551607D9-1A46-4556-BB44-2B2356E4D10F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{556CAEE5-29D0-44A3-9398-EDE933C1A681}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{558CA501-2257-474F-9D37-C4B61E455AA9}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{55A3C05A-DB35-4714-9A07-A3CCA25763F7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{55A7A532-1D70-469A-A078-105952C9FE6F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{560EAD7A-F783-4C1B-B5A6-E0ECB1298826}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{56128CEA-348E-4F1A-B1CA-03141DB7EEBB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{56A09004-D44B-4701-85FA-04033743577A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{56E8EE3D-5B66-4478-B25A-EDBA6818CA8D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{56F1CCC4-39E4-4F07-BFF3-EAE577E215AE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5702B559-A269-4162-AB55-74F47386BF84}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{57171594-D146-4C39-9C89-3369D6A63102}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{576FA016-4ED0-4AE8-BCFA-0988EC09BE14}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{57883245-1BA8-4E4F-9348-F33015F0E27A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5849BCA8-A86C-4DC9-8B2F-3C024A82870B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{58943910-7878-4F81-A799-46BE4BCF7FF0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{58A53799-6A6F-41EB-AF38-E147D24EA4B6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{58A66541-4FDA-4128-95FC-A508FCB89491}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{58F11692-23FA-476B-BD68-80455E841F5C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{59A08613-0CE2-4DB5-8F85-8A3FB878B2A4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5A4C9B83-FF31-46FF-BD33-6B860E2B4C18}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5A7C23FE-BC4E-429D-8515-A8A367283F15}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5A951A46-937E-45FA-A042-64EC68172EDA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5AF0DEC5-0055-46C6-9850-66D6B7A750D8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5B5226B5-54E2-4A72-9F85-A52147ECC396}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5C6B3E02-5B12-4CA0-B26C-5AA3AA41A1C8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5CBC9F02-3012-4E0F-A7F8-56F0D613D7F8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5CDDF314-C603-433D-B605-0B168825F3FD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5CFEBDD6-E07F-41EA-9F92-BA6FCE874098}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5DE06145-9E2B-4A71-B5EB-0F8D0A3C0E1C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5DF13D27-9A16-42EB-9F07-BA0719299D94}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5DF91276-BF3E-4D6C-8808-ED84FAE4452C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5E4E6DB9-6099-4163-B37F-18CDFCEDE378}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5E6F68BE-1123-4AFA-8F49-FFA9153A3935}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5EAA075D-6444-4E72-8411-D7909D47A1D7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5F106310-FCE3-499A-9062-260C2DB018D0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5F361BEE-5B72-4AD2-AA6D-D5299E9F4174}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5FD5EA34-5305-4D31-9FC5-F85148AD388F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5FDFC0B6-48B3-4F3F-BF0B-8C16D46E4669}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{5FE52083-E923-4651-86B5-665E073F35F3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6033B811-79E1-45C5-9B09-3DFCC52BD8F4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{610E10A3-2FC6-4026-8862-6C5A5808979F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{61ABAA4C-6558-4C50-8201-B1A7115BEA25}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{61B1E2E1-F864-41C6-A0E1-5722E424F2B7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{61D371F1-D2CC-478C-A058-1B1D78DB0DBC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{61F5436D-EE65-4047-824C-3FFB685FE990}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{61FD72F9-5602-440F-B3E4-64A7FD2C661E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6216FDC2-AFB3-4125-85DE-3D8971E945E1}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{62392891-B7E8-4A8C-84BF-B70919B91213}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{62CC3607-262F-49DF-BE64-DCFF3FFF7ED4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{63B06B28-6305-42C1-B908-317725B5ABCA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{63FD62D5-0E46-4E60-AAAF-6E972FAAD109}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{64C9FC8D-B76F-4FF0-92F8-14A590DF8CA7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{64D2E695-52CD-479F-8B98-55EC7644BCCD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{64DB5FA8-C311-4BD6-A5F8-F96AD1B15C12}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{64E3A7E3-64F9-458A-AE46-02807DF0B69D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{64FFC4F3-3807-41BB-937E-F89EED859BD4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{65626C6E-D32F-4A4D-9884-76F5B5C87E4B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{65AD47A5-AD49-4354-8458-06717E186C49}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{66152A82-AAE9-44FB-AA84-E75C9E834094}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{66179D65-F7EC-4729-A6A3-7132F9B78277}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{66862A98-FE1A-404E-9C38-E14DB28A6A83}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{676FB0FB-6DA1-4D38-B298-593C38DE3F74}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{67B73C00-C858-4432-B917-9F4A8319408F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{67D85A5F-AFF8-4E11-B820-7E6E3CB4FB10}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{68597EB1-5931-492A-A17A-2C646F7142B4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{68832673-3010-44D0-BFD9-73FFF2491C99}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{68A28CFD-E14E-4665-B0EF-37CFCF94B47E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{68E7B9B0-A6FE-47A8-93CE-E834A63B886A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{68F7BAA8-0329-43FE-BC45-68AA2C73F258}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6929B3F5-0F21-45A3-A5CC-B56DF0AB84C7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{692E2C22-9B6E-4C51-852B-82B190E31FAF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6A273193-0F83-4F31-BC19-C4405F1F813E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6A45CCFA-BD13-4CB5-8D49-69C640C5C73C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6AB37F3F-A93E-46AA-B81F-453129A1C8A4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6AE9E1A0-809B-4AFF-A0D7-9F0A4837A985}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6B5424F2-1A37-4650-A516-B5021B18F7B8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6B565717-6A46-4DA2-B9A3-E1067605340D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6B698768-2BC4-4997-BD5B-6666A70E6C5C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6B9D3B9D-2BA3-41B2-9A26-11B9E0ED5B82}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6CB941AB-37ED-4476-A300-1A50FF888B9C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6CCB55CA-7FC7-49C5-915E-1F1526CF9562}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6CD8ABEC-3BAE-47C1-97B1-4D1EF3827D7C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6D051354-1492-4E82-A8A2-BB31C0268440}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6D1240CE-8185-4D10-B9DF-CE3A70EF3E48}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6D6E0C1D-F9F8-4114-9DE5-7C3C8872C563}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6D940489-0C56-4E6D-BC97-91A52048C1E3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6E3307A7-CF04-4473-B51E-7DCD84CBF9D9}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6E3BF7C5-CE55-4C7F-A069-952772567E2E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6E74088D-234A-4E8F-A0DD-90F19B0BB8AA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6E809577-7F87-4E4B-8EE7-EB4F7C46AC99}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6EC8A289-88D7-4041-BDE2-3D617E9EEB1B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6F5E1CF1-222A-400E-BF44-5940F7E0574E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6FA3DE30-88B9-4817-B92D-617924679804}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{6FC7FF4A-E128-4EBB-B507-11CC45F0EADC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7059D321-425A-4BC8-8128-606DF6C045C7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{70B8FD7B-6E25-4809-BA5A-85D878933CA0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{70E1747D-B3E5-4208-8C82-55A666798B64}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7129B361-2E55-4721-AC24-740B038FF8D2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{71AEF4DC-EFA3-49D0-9BE1-C9BF4921FAF6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{71B8AA39-293D-4645-A2C3-72168516AF61}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{71BED948-38BB-4E78-A920-5BEB352B3271}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{71F340D2-43D8-4712-AD36-4ADA0824C5CB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{723C97E4-3CCC-4DB2-B818-EDD6F236B1E6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{726B942F-B5A7-4F03-8F4D-B040D450947F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{72902B03-B415-4761-96BC-3CCAEF775015}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{72BBE6A8-2483-47A0-A520-45FD672B87D1}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{72E335DD-52AC-49A2-97BC-F62B9835CAF2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{734175CA-E71B-4FDE-9C5A-92D4ABA19B34}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{73C5B3A9-C1AE-4241-B948-DE45AA8BEB3F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{73D0B5D3-1877-4881-ADE2-F1FD1F56C5C2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7402230F-B027-4B06-A21F-1BB029AFF978}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{74405717-FFA3-46CF-A365-933119F69802}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{746A42CD-CE9A-465F-88F8-FF1300EB9A61}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{74986F65-BF50-4F68-8FE4-79ED53FB11CA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{74C447CF-2084-42E4-AA30-C569360A1D81}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{750CEFF7-1B81-4C6D-9031-7A3D3CFCC7E3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{752661B6-984A-4E88-8BE5-58CEB21B02FD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{754FCC30-695E-4C96-9BFB-DEE08BC6491B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{755812D3-7422-4B23-AB50-86105E896ECD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7568B20E-9A80-4FE4-B9EC-FFE1AECBE772}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{758569CC-4B57-4A5E-9AC0-EF266D7DDDBC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7588FA77-0424-408A-9256-8BFD24A0434C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{759F725C-B408-4553-88F7-AF281B94DDF0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{75BD3B34-2C16-4CD6-9D64-53803A1901B5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{75CFE934-87AF-4EB9-9502-B3697FA7F897}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{75E7A29B-3974-4064-9C5F-28C41C076A44}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{760D7179-3EC5-438C-82A1-719D0AB87FD5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{774F6129-ACAF-44F5-AA76-DB1E97384EB5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7762B1F5-B93C-469E-A9BC-D32678A2F666}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{77797EEE-FD4B-4AEC-8639-5662390E325E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{77A0909F-A5CD-4979-8B61-9587FD1CC29E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{77DE1C44-0760-4E65-91B2-78336DFA202E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7817BF54-A832-4AF6-A0CD-2855500601DF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7864597A-E242-4038-BBAA-40FC1A0CE1BC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{788CB287-6504-4FAA-B546-27BB10F81686}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{78CDF777-23B7-4FE6-A988-3AD20DA369AF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{79587D77-0322-4C68-B075-BCD18CCD784C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{79C77535-7712-43FB-BFF6-3C08444B0F55}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7A42C3AC-7001-423C-ACDD-15A26C8A1AE6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7A50D19E-C3A3-444C-946D-1291808679AB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7AB44C05-6F26-4AF4-8E0E-1172AA263A9D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7ACF9F02-9872-4B7F-8366-5842610913A0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7B4A2361-F6EF-4BF1-A94E-8888AF65B058}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7B5A1FAC-291D-4D64-B3E3-AB5AA0B32312}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7B962D2F-EF1C-4FAD-911C-6A54F933FD24}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7BFAB690-9162-4CCE-97F9-4D92A0B6E831}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7C550619-4FE5-4593-ADEB-1D6B26FE6F4A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7C9A9EE6-8B92-484A-A96C-12F987A8A209}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7D0C3E43-2293-4836-B2F7-AB9F7747F9A6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7D6113F2-701B-43E4-94E0-DA02E924D04D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7D804154-54CB-438A-BBFF-B340D1D99C16}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7E2DCD3D-D21A-4A9F-9142-835AC99C835A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7E49B3C0-6F6D-4C2F-AFC9-7E354D5B2D71}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7E59B127-BCF0-4F6F-8B2D-93E3A41F2F7B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7E7CB00E-2260-4974-9D51-793874275CD9}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7F30E4D8-4CC1-4DDE-BA17-00FBDA8A84B8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7F4E0457-EF6C-4D90-B51C-70D9BC889D7E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7F7C4AF3-224D-4B36-9375-B38DD0DD0B64}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7F7DB466-1D84-4552-BA4E-E66CB5EACFB7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{7FD9B16D-0680-4AD0-ACE1-FB809A28A4FA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8010115B-08C6-4A78-8B35-F7549F14D6DC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{802161F5-0AB9-46F4-A19D-8A2A95798572}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8021BC42-E858-46F0-ABDB-52478C48BD20}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{80278657-0935-4415-8D8A-B0FA9EB077B6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{806C2245-490C-4A5E-BB64-EB45C13D373A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{80768049-810E-41CA-84E9-72D1A38CE13A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8089EBCB-6E90-422A-B502-A552357A5417}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{81025C87-2C60-488F-B279-073EEEA3B8A9}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{810546C5-6F16-43F0-94C6-9B985608FD46}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{821DB1F1-0211-465B-8A6D-BB0908AD52A0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{824A88C6-5BFA-47CA-8548-A60384FBE462}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{82F52133-E0B7-4808-AA4C-1B5F03CDED4D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{831D7BD2-9808-4E04-B0FE-B5364A602C13}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8348B23D-71DC-4BE0-B1EA-C5C8A9A47DFA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{83E630A0-9907-4003-B8B5-FE3EC5F6DF0D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{841C17D8-E702-42D0-994C-733C67DD9E66}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8457102F-19D7-4C45-81A5-1271A54B3AA3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{84AA24D9-128B-499A-A7D6-4C241380B594}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{85797BF2-047F-4770-BFB8-F16991DEDA26}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{85D96492-33FB-444B-B09C-AB2E9AB87539}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{85DA09E4-F38A-4BCA-A32A-8B5ED082B708}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{85EFCCE9-F6ED-4EE2-8686-6ED7693B2499}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{869C416C-BE7B-4E64-9F4D-7C79B365A469}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8763A80F-99CA-4FB9-8D99-1ABA8033FB32}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{876EEF2F-9942-41A9-9B94-62286BBEB5CD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{877D3050-8BE2-4ED5-A496-3EE284E9C8A3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8798A8CB-9A2F-4429-848E-432FD7DA2F65}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{87C64193-54AD-458B-AA6E-83A255022308}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{88022C20-4032-4586-BC38-F6259D6CA325}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{88E3D498-8E84-421B-8A4D-34685BF36D3F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{891C98DB-7E40-4987-8152-E8149995BA19}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{89CF183F-6A37-43E4-BF9F-C6DFF91D18E3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8A44287F-6167-4BCF-918C-192DB9CE4C82}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8A69A521-977E-49DE-8540-DC3F87FA06A5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8A744AB4-BB4F-470A-9544-EB858F8D133B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8ABCAD55-EA6E-485B-9300-88451A12B3FC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8ACE7AC5-0E5F-43AD-83BD-9F88EB7212C4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8AFE6A1B-BEC5-4D85-A8D6-FCA6614B8D9B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8B249349-68D4-49B8-8F36-077DA32DE8DE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8B85D38F-4486-4519-8DF4-428B68CFDE6A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8B9CECDC-37F3-4041-9EA5-08835CC3EA6C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8C4B4391-F998-4D72-89C8-21DBD26043C2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8D020344-0BCE-439C-85E3-EC931D281A0C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8D22E4A9-8FFE-446C-9610-03A40D572BA6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8DBD4287-761C-4FCA-9247-C955D3B8394E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8DEB175E-CBE9-41D8-BB6C-2B6B832206BB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8E643FAB-1371-478B-AA4B-933F963E2CA6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8E913C85-CD00-4452-BF23-0A9FF59AB566}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8E9F3028-9206-4570-9CF6-A60837E7334A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8EAAC413-AC8B-41B1-89FB-93AFC4889356}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8F3A30F9-F327-4457-988B-22A9994C11F3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8FBE2E34-38A4-4DAE-BC84-B53D615CEEAA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{8FCDC16B-B67C-4B3A-BBF3-5975F0A6B2AC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{900634F4-8E51-4F8C-9EF4-57D1EE554839}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{904A0EE5-7514-496D-ABF3-34B47559298E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{90572751-3AF4-4E3D-A8AD-FE4970707BF4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{906D9519-D209-4892-83FD-D87E90E2AA80}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{917A4F0D-41D6-4285-A7CA-B5A69C5D134E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{917EABCE-76F5-4950-A05C-D484449B7B63}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{91D23816-70BC-4C3A-A568-425AA212137B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{92289630-6C5B-4216-8869-421DD21BD635}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9252091E-F1DF-4AEF-B3B2-D1C3CC661405}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{929785C0-1339-48E8-9302-603D05A0BF64}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{92C0C555-29F4-4D78-8323-5AA036DBB046}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{92EB2D43-6C86-4266-8B6E-938F439447EB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{937B78FB-BF8F-4686-96A9-0509907F8D42}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{93800919-0F12-4643-9466-34321DAF0C79}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{93968CBB-DFE1-4CB9-A42B-6D1BBD3D8A59}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{93A82460-D53D-4578-AD1C-923E74231B5F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{93C21164-9F06-46FA-8820-16B7BF86BA15}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{93CD9826-15A0-4C73-9797-8A0A89048580}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9465E90B-F624-46C2-AFE0-5D55B4B1F4A9}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{948CFF7A-043A-49A9-B388-2DAC65166327}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9499016A-6532-4E67-AF32-9477A84E4288}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{95189C96-CEE0-4163-BC85-09D1BFB9DA25}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{95E38380-3426-4265-9822-334291A4D303}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{96C8DD5E-3B3F-4D0B-81BE-15B71B81850A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{96E25415-531B-4F74-94D9-913295664EA6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{972802FE-01BE-4C39-88B4-075366292022}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{973EAFFE-322D-4C25-BD44-D9E408121E43}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{97937A24-96AD-450A-B966-C71DFA70EF83}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{97FC6076-300D-4B9D-BF7B-68F75C97789F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9840550A-F569-49B7-B16B-519405EAEF1E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{98AF00DD-4EAE-4FDA-9813-DAA301EEA627}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{98E7DFF4-F9B3-49F6-A3E3-A8695518EA1E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{990373F8-2FC4-4C4D-B11B-FF57E3D283B4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{99086321-02ED-4C27-8D6C-277B40C7A8F0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{99872AEC-2F91-4898-A74C-E937597BE232}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9990EE4E-F8A3-46E8-833F-ABB9F9F35995}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9A314CE8-A2B8-4CE3-9AA9-8ECD1800644A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9A3A3149-1F3C-4EB2-9D9B-11DC918FF325}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9A88D05A-AE7F-4521-A214-03E0C18923AB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9A92184F-C180-4B21-B47C-7C80D538BEDC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9B50F4E8-61C2-49E0-BA4D-5F15A8B37C26}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9BA32814-86FB-4DBD-9903-B12187BE2DD4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9BBE9E8D-3CA6-4C70-8640-3C35CB32B015}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9C427169-197B-49E9-B994-E5FC4323C159}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9C784F02-1B77-480E-B55A-2D97DC0E1DB6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9CBE9BBB-36D5-4A59-929D-9E621836D779}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9CC61C61-590A-4FAC-898F-868941FDF6C8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9D24D765-D5E6-4699-8B9E-8E223BA61B4C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9D74D8DD-2AA8-4036-8D8C-81F53CE7F887}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9DEA21AC-5A3E-4FF1-B202-5933D3EA7602}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9EAC2EF7-C8D0-40C8-941F-E9E86F177C3B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9EB05D15-EE36-4D74-A766-5BD18458D464}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9EEC8880-A8BA-46EF-B4E9-BF92B764EE3A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{9F58F218-E95B-400D-937C-546A91FBB782}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A00242CD-1A26-42F5-839B-893D6FCB6736}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A0463423-98E8-40B6-813C-6FB1F31F4A7A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A1180703-5DF0-4036-8BCB-ACDABE830880}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A17D5759-2DA1-4C82-BEE8-9F5316C6E408}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A1B05EF2-E483-47C9-BD53-2A0F2940BAD6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A2348737-92FA-4643-976F-F0D880B107A2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A24873EC-88B9-4E7E-B81A-1979C741B9CF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A2A23706-2BDA-4893-935E-034468BB4895}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A358AB3F-1641-4A5F-9EF4-40D877F2E60D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A36CDCF1-47DB-4C7C-A3E2-566CB8E11DCB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A4496D59-18FB-40FC-9B21-2686312EE292}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A45DFF3B-8E6C-470B-8420-EA34E2B8BFD7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A49D95A2-DA3A-4572-9235-502A6155D58A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A4D4EE54-5507-4E35-A450-FF4B0A299921}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A4F7E7AD-3C29-45DF-A181-0056C5D5D218}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A5143552-FCEF-4112-8351-EC774C455F8B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A562B6B6-5859-4FC3-A4BB-B32B0195D793}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A603A41D-177A-45D9-AECF-F735213E27F2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A6615EB6-B69A-4434-BF90-3048BEF985E2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A665E061-3D0F-411B-ADF5-3732D408EEEE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A66E38AF-0188-41CA-A2FF-E8DC8A8FA5D3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A68BB94B-2112-4AF4-90C6-9082288B4091}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A6A1F438-3C72-47FD-900F-AB8D6343CC42}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A6EC06A5-20D8-4924-92E5-859576924215}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A72D2476-D140-4B4B-B932-2B21D646188C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A7999EDA-F872-429D-80AD-7619283288A0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A79E6436-C4F0-4B55-BBB0-94D65AB12312}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A7B7B657-ECA2-4B9C-9731-4DDE6D4561E2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A7C9811E-B6D5-4B42-9908-9F835F1CE370}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A82ECEAB-9FAB-4A34-9637-E3E17925C549}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A889275F-EE38-4712-8CA6-FCCB348D2B8A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A8D1C5A5-160E-4227-B9C1-532F79C3195B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A8EF7850-A65C-4958-A1F9-763E16D51717}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A900091A-B6D9-4D09-8144-1F25EC1C0B8C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A952EC1E-019B-4203-91FE-AF0F6564A0A8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{A9B3005B-FC33-4CE5-870D-47411F4983A3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AA0C42A7-0748-4AFD-9387-3198510E96B2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AA1239F2-6662-4794-B6D5-8BA027A426A8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AA3151D5-EA91-4FDE-913F-7A2FA0DDF29A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AA3BD3BD-D529-4B87-A95F-383CB67633B0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AA6D54DA-EA73-4620-A7C6-F9BCE4765296}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AA97B905-F9F8-4ACA-844C-408BF999000B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AAB6C6BB-1361-456C-9D05-7123F0EF6873}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AAE48F25-799F-4101-B415-E5C983543A91}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AAE5C899-9286-4750-851E-A2E6407619AF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AAF64E6D-4822-424F-B3E2-00336DEB0487}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AB67130B-4D59-4BB8-BA33-6BEB7F7F4CA4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{ABA4E764-ADF4-4BB7-8A5A-6ED81D37AE6D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{ABD1DAF5-B7D5-4C99-9F53-D5E123F7F7D3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AC0B1979-ECE3-4961-93B8-38C2A51D3460}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{ACD3ED07-6B93-456D-9DB2-3C6DDDF202E1}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{ACD5AEB0-0027-4497-8CC5-6950509418EC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{ACE8535A-45E7-4A86-9866-F440FC53C049}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AD07D4A9-B98C-4F27-B234-E88033FB5628}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AD9B9501-3410-48D3-997E-DF6EE3BF8543}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{ADAE2B3F-DCEA-4893-B26C-4FB8A66374CA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{ADFD4D8B-68C5-4A71-9DB0-F35EA3001EBB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AE96C173-35B1-43CA-8F13-12181EAF697B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AEB46AC6-70B3-4663-A614-039696DCD327}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AEF77E8B-78EE-4206-9FA0-4B245C55F8A6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AF652D03-3F14-4E11-94D5-506DA0893E24}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AF75822B-6CA7-4B16-85ED-A6715E10E6A4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AF8A1CC9-B64F-4BDF-8F48-ABD73D503936}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AF9B6AAA-5746-4C13-AAD4-5A5036293316}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{AFA9043B-23FA-4930-A108-E2317BEEE9D3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B033489A-795F-4250-8836-F99182630EA1}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B0672049-917E-4DD1-9AEF-DF96BF2DEF48}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B0A78B80-F396-4722-90E1-B4C1BA04FC68}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B0D8257D-2DAD-47B1-8012-0F0845C52B86}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B1BFE75C-6509-4DE8-9478-4215DBC7D3AA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B21317C8-DDB0-44A1-AD57-24CE4DD292CC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B22D0F31-8598-4D66-8EAE-82D64860DE13}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B26C8194-7FCC-47A6-A73D-2F4FB7D8A4E2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B289E891-D24F-472F-B775-D080D73127F2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B2AB1041-F8CB-4394-9AC3-D6DE3EAC037B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B2AF97EF-4086-4317-A9CE-EF037A28A3F5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B2DD7CBA-CCD4-421F-851E-BA1D9130C1B0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B35CF28A-2B83-4657-A3D3-22FF8ACC4DFA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B39AF7C1-F63C-4077-97DB-2C4E053160D4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B3C70521-35B1-42D5-A464-654E1B82F6A6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B3FF933B-4878-4C1C-A1E4-450F16F0B2BF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B42338C8-01B6-43FC-9D2D-FB40A22FF906}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B468F134-E41E-492B-8520-550B64807CCE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B47546ED-63DF-4AC0-BDC5-D3BA3676840C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B4B65889-C2D0-4108-A556-5B2711EFD3BC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B4DC6D1D-7843-4D91-899E-9D747B80ABCA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B56B8000-632E-490F-827D-121D2C1FB84E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B5A1BC19-73F7-4819-9972-3357FD617F3F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B5D260B2-E7AF-464A-BD4E-35FFD46D6197}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B60D9D2C-1F41-4FB5-8A46-E51ECF00C253}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B6124DEA-963A-4D4D-93F1-FCC638F009CA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B61A03D6-8792-4F70-B5E0-29F85F818B1A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B61E3011-D38D-4932-8A25-5746CFFA99CE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B633A139-A6C6-46F6-9C80-DF9900602E49}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B68C2C2E-3A59-423A-AFE4-8EC86CE51EDD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B6BFFC79-A0A8-4BA2-8DFF-3B9AC3C497B0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B6EB9400-A0FD-42DA-9274-4C04F0DFFA0E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B73C3DC5-7CEB-4C6D-BDC6-D549BBA9F629}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B7A90373-60EC-4D04-825E-BE0A552CEC8C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B7C03ABC-E3F6-4776-9109-620D983B7356}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B7C8527B-BE56-4993-85FD-99E01462E9F3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B7CAB160-43D7-441B-8D8A-593C1F5169F5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B825F0DA-4E2B-4B21-8F26-313AF5007B8A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B84E1AA5-B85D-437A-97E6-CD2A72CF0EC1}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B8F10AFD-0E88-425E-BD33-60F3CF72F028}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B91B2BDD-E471-42CB-94F8-02969150CCA8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B92D8D55-6246-48B2-980C-99D0991EAE7D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B9427EA0-63D5-4433-BF5B-B5291820637B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B98DFD59-2501-430C-9F99-856719CECEA0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B9A04672-7F39-41F5-843D-2570E792FA2D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{B9DA8551-97FF-4AAF-9ACC-CD9EC6F463CA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BA3DDA8B-290B-4D93-8E6B-384587B36A30}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BABA281C-6153-499A-A1FE-115521351C54}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BB649CFB-1E1C-4F85-93E1-F767C9B13512}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BB69A383-6E18-4259-AEC1-64683E38F7B7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BB90095A-054B-402B-A60D-83F7A363FF71}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BBBC7054-836A-4CA8-A45B-5232473157C0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BBFCF389-DD86-4C6A-B800-9D026F5A2950}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BC6E20C5-1667-4820-B22C-3D6D02B57A2E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BC73FDE6-65FE-4343-9ED6-6E80E0B7B835}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BC94E204-00D9-4EEB-A9D0-53C1E92F1E8A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BCEE0A9A-9985-445B-9A1F-AA59A107DFAF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BCF97750-25D7-41B6-9B1D-0078DDF0DB80}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BD1AE76A-C65C-475C-A631-587FA711FFFB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BD295989-24D7-4F3F-8657-0BCD6229BF83}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BDC60C16-568F-4478-8699-E7CA3FC99E36}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BE09B84D-F2FC-4B6F-AA27-E27BF8A5C01C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BE97D185-FDC6-48AB-8125-BAAD08891DC3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BF2EA7CD-E6BA-4297-9DB8-1E920357463F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BFAA3564-EB1A-4C9F-8F30-5D1850751286}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BFB7C952-7CE7-4D3A-A83E-338EBE46FFE7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BFC271B4-0048-4647-B752-6C1EA687C760}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BFFBC150-F75E-42D3-981A-A4AFEC3F69F6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{BFFF2DF6-E331-461A-B825-2F9F18831905}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C0ED6977-2A96-49E0-876B-5613CA58C49C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C0EE6082-E868-48B2-9F75-296DE0BB14BC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C1248CAB-78EF-4DD1-8AC5-E2E9C5A19BB9}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C1957DD2-8CBA-4256-9E31-9F747D555CE3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C2023144-822E-426B-BB36-400E11D63CE9}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C28D82CA-7A63-479E-AA0B-E448FDB2FF95}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C30720FB-34AA-4B82-A7C9-A99C68CAC029}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C3284E55-38BC-479A-929A-F35C0D1D20CD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C3AC24CF-078F-493D-85F5-DBF1CFA27930}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C4299177-B0FD-433F-AB09-A8EB916AC839}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C43904E9-5AD8-48F2-AEC2-7A9C13982CDD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C46D56A1-F595-4260-974A-2C6A69E2A3C5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C46D9E7A-DA5D-482A-88BD-1A1416867989}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C4938A50-544E-4133-A799-00F7F9AAF4EB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C4990EAB-2193-4698-B790-83869FD311FA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C4DBA1DD-7B55-47EC-BA1F-7673635010BD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C5F9E2B8-BFBA-4FD1-A6E6-4A0DE782F6C3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C65C94E1-979E-4A11-8995-B6D639AA087E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C696E845-C59B-42CE-B4D1-944163823D7F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C6D30730-8BDD-4297-B340-1FA46AE67C49}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C718D32A-509B-4049-8F25-4E8642B5292C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C725805D-1E87-497F-A011-47B6BC265802}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C845966D-6750-4C0A-B5C1-589CBB17DAEF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C86BF18A-569F-42CB-9C7E-B0F48192FC07}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C87FF214-5B8C-4EED-BE24-C920B39317CF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C886DA2E-8CFC-47AB-9168-EADA75A9F186}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C8C6484B-94B0-433C-B7E1-C2475475C5DB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C8E8D3E7-5593-4489-97EB-47DE5F2156B0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C939889C-7904-4883-B314-5A594FED46F0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C93C9E25-215F-46F3-A0BC-F939A769C26A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C95E8696-C123-41F2-936C-8AA657AA0E8E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{C9BEFAF3-3FFA-456E-9385-5D6E5929884F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CA1AA410-6199-4F75-8BB1-E3C744662B70}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CA1EE889-9754-412E-B1A7-BBF7F44CE1CB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CA31BF8D-A7DB-4F05-8D7D-C4BEB8F67D0B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CA72ACEC-DFE4-411E-923F-858465AD2076}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CACECD47-841B-434D-B8EB-E43F5329FA10}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CADAACCD-11D4-41FF-B863-B6E7CD6C8E28}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CC155074-7DE3-4DBF-9DCE-E847CB1B004F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CC2DEE09-0B6C-4811-A9A0-8FF6995EC3EF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CC91BA74-90A8-459D-AB63-D5F8719535EB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CD1A2BC4-E838-4410-B922-ADA1F00C48E5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CD961688-7D84-4B1F-BC86-F26C219415F0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CDA48E95-2320-4995-AE76-9B8DA4FA5522}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CDC331C8-3C44-42FD-AA2F-38A980DDB48D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CE7F74D2-CE01-4EF7-B789-5292B55869BF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CEBD99A3-7964-4500-A648-8E117B6DE4DA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CECA5BD2-0715-42EE-A04E-089E21B4D252}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CF4DC337-0AF8-4C4F-B3DD-F8421FA9898C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{CF8F269C-BA7F-43B1-8D25-926E751F7DE9}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D010271C-1AA6-4A01-AC70-087F4C3E6CE2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D023CCE1-8EEE-4195-9615-252A94936C59}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D089697C-8B38-4D79-BA78-BB0D4CE85185}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D09A59B6-317F-47C9-AC79-F0EF0FA8BB66}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D0C5B610-38FE-4AA0-9A61-8BFE7B69A16A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D0CDC0D6-6E1E-425D-9509-E12F8DA0A466}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D1096D47-C0AD-485E-802C-96EB6BA5F699}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D1B2316B-02D5-45E1-A671-77BE3A38B1AF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D20AE5A4-B08B-4401-895E-026DB57768D8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D2395B38-7E56-4B5C-ACEA-58BB6318EC8A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D2570933-3BB6-4F7A-AF70-4D233ACD041D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D26D40F3-1A98-47B1-8734-AF1357FF525B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D2BCBA6F-0882-49AE-9BAA-E9C54FCACAC9}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D2C7BAAC-D72B-406F-8F24-078B3DDE409B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D2DB8EF3-E477-43CC-9A8B-2F49F6CEBD0D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D2EE8D51-4598-4D64-9C81-12735C98D495}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D3477CDF-BE1B-40F0-A0E1-AEFF807CF8A0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D39143E4-2DA8-4A47-ACA9-35660F8BC1BE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D3B9BCE3-3DC1-4D20-BAEA-556B4F68F206}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D40DA525-5EC7-4B87-86F2-32FE100DF201}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D485769A-2FB3-419F-B97C-E89BACF77F7D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D4B99533-DBDE-4876-B919-EE672B3CCF25}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D54CF4D2-B255-4F48-8F2D-41E67CF5AC54}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D612ADF5-32E3-4292-A057-1EA8F2D710F6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D6427E5E-A0D2-44F7-852F-30F395461930}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D646B76E-8950-441D-BAFC-F80E467B2277}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D735F09F-4D94-4C10-99BC-E93D5BDD28F2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D7A12019-9E35-47FD-8081-26100C02F73C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D7C3DFD5-2CF1-4103-8872-3DB7EEDA7B11}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D849DA20-B864-4FC5-9B1F-7520E001C10F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D8E1ECC5-CF53-43FF-9B4A-D41D2D4D1849}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D8E7584A-ABFD-4FCC-BC0B-1D88C19E651B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{D9F773A1-0B62-4B72-865B-B4EED10931C2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DA151707-186F-4CAD-9612-02D9B9EAA235}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DACE9BE8-B270-4C04-BC52-3C6184C4EF57}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DB025013-12D1-4CF5-9220-A95D6E94AC25}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DB12C80E-5DC5-4758-BE43-56DF85779A91}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DB29F864-4D0E-43E9-9787-86DD53A69A08}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DB2E350E-A270-40FE-AA14-8AFA01CF83E5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DB87ACEA-7EE3-4798-B637-EE0689BF9A1A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DBBB938E-0F82-49F1-A224-12EC8BBF29FD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DBF7E8D1-C5D9-4931-9D1E-DDE1B2F31C6A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DC311597-4797-46D7-812D-22F0F7AA4353}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DD2A4EF6-4093-425B-8D37-91CD9BDE0F5A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DDE01C58-9BE7-4826-9C68-0C8DBE904967}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DE276162-0C78-4383-84D0-6B6639229C18}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DE9CBC15-76B3-4A2F-AB66-6F31F2874465}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DEDC41EC-A665-4E56-91FE-F0AC0DB3DC78}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DF67FE8A-B46A-454E-8EA5-F3C17D241BD6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DF87ACAA-FD94-47B4-A8EA-BDC0F9EED5FC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{DFAB0C75-5292-4275-8D39-EDDD8F758E24}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E031BE87-38B9-469A-A8BB-A5296DBFBA48}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E09088A9-B43B-4295-8CD9-086BF5AC954F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E1563974-C020-4E80-84EC-7EFE3B1A11DB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E161D8B5-E257-4E02-8ABC-B7CA502E1607}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E186FA48-4FA4-414D-936D-02C04B405CC6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E1F33001-1531-4BB0-AAC5-EE5B91601CC5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E214BA37-2499-4541-856F-107865A4EFB1}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E2464E62-C8FD-462A-90DD-2D91F184D2C0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E25516D9-61AA-4AB4-89B8-E8B5FBCFD4D5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E284B429-383E-4EF8-AD48-1D990807A860}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E296C406-4374-470A-A962-D4EB4372654C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E2D00CC1-52ED-45B0-86B8-A25DE528793C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E3B1A092-D4AE-44DF-83EF-C01CBCA2550E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E3E9B6D3-CDBD-4703-A2F0-ABD0AD97CD3E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E4038976-3172-4519-B324-9A321041C267}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E491FBE8-9A93-4C67-97D6-11615A97076B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E4D2B7F1-13FB-4E4E-86D0-F18894C1A74B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E518D795-CDDA-496D-925B-C2CC30DC00B9}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E523C348-230B-484A-8BD2-E401A0BCDBD1}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E54DCA89-D9C8-440A-BBFC-E7BC434B0343}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E5898B73-A0AC-41B7-A509-84EEA81D1605}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E5B0D3A0-AC1B-4631-8879-9880753AD8EA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E5FBAFBA-778B-4A82-A5E0-48561589DB83}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E60721CD-F056-428C-8FE6-3AFA19B4256F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E63E5BBE-6047-4318-AEC8-E02A8F80256F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E64D1E3B-B677-4B2C-AD06-3FA839731FB7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E67AA4EB-2564-4939-B1DF-ECAABC99E0E3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E6DFB441-FAA4-40ED-9547-CA97421EDB17}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E6ECCD10-BE34-4448-98EB-E86D7325F518}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E722D6CF-D15B-4F4C-9C30-BC0D3594E731}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E927B5B3-9DCD-42FC-9B42-E6B712AF0866}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E949FD8A-1D0A-46B2-8652-F89E1622711E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E97E2F6A-D6E9-46A3-838B-C9353A39E09D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E989B661-5B90-47D6-9B59-C33082CC7BEA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E9993168-AA8B-4D70-8FEC-B4F29FD11ABE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{E9B45CC9-857F-4DCB-8D76-F8865465033D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EA1C54BA-94B3-46D1-ACC2-359648CEBCB5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EA692A9F-3B67-4494-8B26-B0B13D5E675D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EA9B0E38-EF82-4B86-8EF2-5CF802371002}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EACCAD25-DDB0-469B-AB38-7FC933A394FF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EB05B221-2FA1-4ECD-9589-F1EA42D114BF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EB482D48-F7ED-4180-B2D7-65A3432334A2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EB500FD5-257E-404E-98A2-9236BA9BB131}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EB5E96CD-2072-462B-9AF5-7D05E160DA6B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EB86130F-7614-486F-9C1E-29BE13A9FBAB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EBA12ABA-E4CB-4477-A312-D439C96489CC}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EBA23233-2D1E-4EBE-9951-740E7F937493}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EC1CB1E5-7AC7-4016-93F9-39C47A7D4A86}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{ECF6B6B6-9448-48AC-9CD9-2FB49D6ED792}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{ED7630CB-005D-4D90-A74B-2D5BDE4B02BA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EED20097-B8E7-48FB-9875-378D92866589}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EF147EF0-F09A-4F2A-B506-FFF09E6ED5BB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EF33A1F5-6060-4AAA-A591-3D92B1305DF5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EF61CB48-9535-4D9B-B04B-D0E8A76902CE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EF996CA3-62DC-418A-A188-C66488803357}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EF997F7C-0DF1-40BA-848D-620846286DCB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EF9A0431-60A7-4285-8E34-F5D754C794B3}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{EFC2718D-9767-411A-80D8-88A9A0F3E945}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F02564C4-D989-469B-9CFE-FB998705C988}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F02AF1B6-F378-4F0F-BF39-027EFFD16231}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F090D2A8-FAFC-47CD-802B-BE63432452A8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F0BB4F4F-5721-4BBC-9BB3-FBF1971FF13C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F0C516EE-DECC-4DBE-B2F0-C2D2ECF1ADEF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F109F49B-976F-4C82-93D3-25B17DC37CA6}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F1330E80-35F2-4EA2-813E-88815C3CCA42}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F14DF3C6-8100-476C-B987-7A9BA857B6BD}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F154BA43-B000-4BA9-AD40-4A8B31A8FF19}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F18B6E86-9BD3-437C-9B8E-7D97429C6F57}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F19C94F8-A0E0-4FC2-9E10-B066A78B931A}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F1D1C0CA-0509-492C-8FDE-C0B2F6159673}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F1EF7A5A-75B4-4199-BA0F-782099D05321}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F2247175-017D-4EDE-8FA1-1E07B481D6B0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F23CA8B6-0863-4B96-BD03-B1438613479E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F2CACC45-DA20-4800-B649-87CA85A65EFA}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F2CD7D30-15FA-48BC-9699-13A05C0672D5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F2FE0773-38D1-41EF-AD44-ABF31B76D518}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F30CC153-5288-4D66-A8CB-9CCB1F1048AB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F33CD4C4-D79D-4F8E-859E-3B143D9D4104}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F3697C9C-D535-49E7-B986-02196A58E8F4}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F3A0AD40-0213-4F16-AEB8-642FCF55FDC8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F4486567-EBDE-4632-9308-2866FDA5447C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F59F06E2-7A48-4C4B-93F4-B53255A85A8B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F5A1CDBA-6AA8-4C86-98F4-CCCFDE2AD0F9}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F62156D8-3ACF-4E50-AE38-EB525D189D86}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F6939B86-AC64-4B5E-B2DC-8CA48CBA9E48}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F6D5BB14-B1D5-4247-BA29-445B049A7198}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F700227D-5311-414C-80D7-E4E1AE67D4F0}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F703FAA1-2F7F-46F3-A12A-86CE7B5F1B38}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F73F0090-7EA9-43C1-9FEE-D562260C16E5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F74A7665-BE49-4E48-B0FA-AB263AF8B9F5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F810E7C2-E075-485C-BE78-C1AF85A2DD81}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F8985D08-ECDC-42B4-BEDA-518A04E5A8DE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F8AE3506-614B-4D02-A1FF-C55FAEA3641C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F8AF2629-CD24-4D8A-B854-C0890ABB2AC7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F905D91D-4100-42A2-A909-168EB7B6D5F2}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F97841E0-3DEA-45E8-8FBB-DFFCA4BAE008}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F99CE7EA-E824-4891-AFFA-3119BABE32DB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F9ABC594-8C52-4FD1-A9FE-F95070AF844E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{F9DC1CDD-C8B9-4190-B4E3-091C68CE46FE}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FA2D88D6-0124-412F-B721-FF2EF34E1A75}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FA9ED484-CE8C-4391-B657-FFDBD4A8EE8C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FB0D031D-8E20-45CB-806A-4A8A71C78B8D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FB4E2CB9-2C62-4A4D-AB96-26DAD6F46F11}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FB7AE7B5-A28F-42BC-A0A5-DCC2890CE5EB}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FBDB2424-CE3C-4279-8112-84D416144B42}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FC248250-E540-47DF-A017-8E7B6E0C5960}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FC63A206-053F-48E2-B37F-61155E68B97F}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FCCE6ABF-7FBF-4DEC-B5A2-89E4DD2726DF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FCCEA947-B819-40FA-A72D-4AD2EC641E1B}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FCD8B00D-84CD-4207-ACEC-89E93608D7E5}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FD13CA66-AB89-4022-A067-3D44DA25FF43}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FE3CF77A-E1E3-4727-9044-6036B69696F8}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FE7F930A-8B10-4ACA-8363-49ADCA171D24}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FE9052FF-3467-49F3-B298-C1FEAECE0C0D}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FF43695D-AC75-45E6-8691-34F0C8D1D8A7}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FF4FA621-A7F7-4CF7-BC45-0149FE990C72}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FF7E5F75-0EEC-4BBF-94D7-75DA4DA27E1C}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FF8AC952-9CE8-4CD5-AA8F-37974B5D22FF}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FF8F7CAF-FAC6-4568-81C6-8EA04C9D9BD1}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FF90E0A1-3B50-49F0-B750-E0CEE8D35FA1}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FF9F88E7-A959-4F0A-8EF5-20BC25DA233E}
Successfully deleted: [Empty Folder] C:\Users\valeria\appdata\local\{FFACECB9-C109-4B5E-970D-9AB42DB4C8C8}
Successfully deleted: [Folder] C:\ProgramData\Google



~~~ Chrome

Failed to delete: [Folder] C:\Users\valeria\appdata\local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic

[C:\Users\valeria\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\valeria\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
gpdjojdkbbmdfjfahjcgigfpmkopogic

[C:\Users\valeria\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\valeria\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[
  gaiilaahiahdejapggenmdmafpmbipje,
  gpdjojdkbbmdfjfahjcgigfpmkopogic,
  nikpibnbobmbdbheedjfogjlikpgpnhp
]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10.07.2015 at 16:39:53,14
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Apfeltasche · 10.07.2015, 15:59

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-07-2015
Ran by valeria (administrator) on VALERIA-VAIO on 10-07-2015 16:43:48
Running from C:\Users\valeria\Downloads
Loaded Profiles: valeria (Available Profiles: valeria)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Farbar) C:\Users\valeria\Downloads\FRST64 (1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10134560 2010-04-07] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [226160 2010-07-30] (Alps Electric Co., Ltd.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-07] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-03] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [597792 2010-01-21] (Sony Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-03-20] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-05-31] (Geek Software GmbH)
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-12-06] (Google Inc.)
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Run: [Facebook Update] => C:\Users\valeria\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-10-09] (Facebook Inc.)
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Run: [Viber] => "C:\Users\valeria\AppData\Local\Viber\Viber.exe"
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Run: [Dropbox Update] => C:\Users\valeria\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2010-12-06]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\valeria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-05-16]
ShortcutTarget: Dropbox.lnk -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
ProxyServer: [.DEFAULT] => http=127.0.0.1:64373;https=127.0.0.1:64373
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=SVED&bmod=EU01
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=SVED&bmod=EU01
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> x-osid:1:search:5EFE506AEABD46DC935A929E49AF61A6 URL = 
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {0D8B3C4E-A058-4F24-B61C-95BC52C6ED0C} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {16267E4B-17AB-459B-91E2-C01600553737} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {3355EF21-A527-432F-9379-88E34E6CA581} URL = hxxp://de.shopping.com/?linkin_id=8056363
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {EB3C667B-F36E-4BA5-9C7D-F5AB1F35654D} URL = hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ± vË°!×—(ä¼48Ð¸patm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†x¢8€ÙjÀÿþ*´Ñ;áa´[¦†8*º~RÙxœòÜ8'£-)x*ä* URL = 
BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-06] (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-12-06] (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21] (Adobe Systems Incorporated)
BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\SysWOW64\mscoree.dll [2010-11-05] (Microsoft Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-06] (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-04-01] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-06-29] (Sun Microsystems, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-06] (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-04-01] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-06] (Google Inc.)
Toolbar: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-06] (Google Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{45ED9C09-732A-4F0C-A778-61AAAFD82BB3}: [DhcpNameServer] 193.175.39.242 193.175.39.246
Tcpip\..\Interfaces\{A35F455B-5668-4676-9BE3-74A32BB9A2C8}: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_191.dll [2015-07-09] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_191.dll [2015-07-09] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2011-10-17] (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-08-13] (Google, Inc.)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files (x86)\Sony\MSS\3.8.130\npMcAfeeMss.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-04-14] (VideoLAN)
FF Plugin HKU\S-1-5-21-557923668-3065560405-1829487697-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\valeria\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Firefox\Extensions: [{0F827075-B026-42F3-885D-98981EE7B1AE}] - C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension

Chrome: 
=======
CHR Profile: C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-08-13]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]
CHR Extension: (Google Wallet) - C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09]
CHR Extension: (Citavi Picker) - C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohgndokldibnndfnjnagojmheejlengn [2015-02-09]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
CHR HKLM-x32\...\Chrome\Extension: [ohgndokldibnndfnjnagojmheejlengn] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-01] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe [235216 2013-10-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-11-25] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-11-25] (Sonic Solutions)
S2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [266168 2013-11-01] (Intel Corporation)
S2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-01] (Intel Corporation)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2010-04-08] (Sony Corporation) [File not signed]
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [852336 2010-03-18] (Sony Corporation)
S2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [845312 2010-08-11] (Sony Corporation) [File not signed]
S3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-28] (Sony Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-07-10] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-10 16:43 - 2015-07-10 16:43 - 02112512 _____ (Farbar) C:\Users\valeria\Downloads\FRST64 (1).exe
2015-07-10 16:39 - 2015-07-10 16:42 - 00100540 _____ C:\Users\valeria\Desktop\JRT.txt
2015-07-10 16:33 - 2015-07-10 16:34 - 03034090 _____ (Malwarebytes Corporation) C:\Users\valeria\Downloads\JRT.exe
2015-07-10 16:30 - 2015-07-10 16:30 - 00016829 _____ C:\Users\valeria\Desktop\AdwCleaner[S0].txt
2015-07-10 16:29 - 2015-07-10 16:29 - 00116280 _____ C:\Users\valeria\AppData\Local\GDIPFONTCACHEV1.DAT
2015-07-10 16:05 - 2015-07-10 16:13 - 00000000 ____D C:\AdwCleaner
2015-07-10 16:03 - 2015-07-10 16:04 - 02248704 _____ C:\Users\valeria\Downloads\AdwCleaner_4.208.exe
2015-07-10 15:40 - 2015-07-10 15:40 - 00001226 _____ C:\Users\valeria\Desktop\MBAM_Suchlauf.txt
2015-07-10 13:30 - 2015-07-10 16:30 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-10 13:30 - 2015-07-10 13:30 - 00001102 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-07-10 13:30 - 2015-07-10 13:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-07-10 13:29 - 2015-07-10 13:30 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-07-10 13:29 - 2015-07-10 13:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-10 13:29 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-10 13:29 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-10 13:29 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-10 13:28 - 2015-07-10 13:28 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\valeria\Downloads\mbam-setup-2.1.6.1022.exe
2015-07-10 13:10 - 2015-07-10 13:10 - 00042336 _____ C:\Users\valeria\Desktop\Gmer.txt
2015-07-10 12:52 - 2015-07-10 12:52 - 00380416 _____ C:\Users\valeria\Downloads\Gmer-19357.exe
2015-07-10 12:22 - 2015-07-10 12:36 - 00053520 _____ C:\Users\valeria\Downloads\Addition.txt
2015-07-10 12:17 - 2015-07-10 16:43 - 00019400 _____ C:\Users\valeria\Downloads\FRST.txt
2015-07-10 12:16 - 2015-07-10 16:43 - 00000000 ____D C:\FRST
2015-07-10 12:16 - 2015-07-10 12:16 - 02112512 _____ (Farbar) C:\Users\valeria\Downloads\FRST64.exe
2015-07-10 12:14 - 2015-07-10 12:14 - 00050477 _____ C:\Users\valeria\Downloads\Defogger.exe
2015-07-10 12:14 - 2015-07-10 12:14 - 00000476 _____ C:\Users\valeria\Downloads\defogger_disable.log
2015-07-10 12:14 - 2015-07-10 12:14 - 00000000 _____ C:\Users\valeria\defogger_reenable
2015-07-10 11:53 - 2015-07-10 11:54 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2015-07-10 11:53 - 2015-07-10 11:53 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
2015-07-10 11:51 - 2015-07-10 11:52 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2015-07-10 11:48 - 2015-07-10 11:48 - 00000000 ____D C:\Users\valeria\Desktop\OpenOffice 4.1.1 (de) Installation Files
2015-07-10 11:45 - 2015-07-10 11:45 - 01198368 _____ C:\Users\valeria\Downloads\OpenOffice - CHIP-Installer.exe
2015-07-07 14:14 - 2015-07-07 14:17 - 186350872 _____ (Microsoft Corporation) C:\Users\valeria\Downloads\msert.exe
2015-07-04 11:34 - 2015-07-04 11:34 - 00000000 ____D C:\Users\valeria\AppData\Local\TuneUp Software
2015-07-04 11:23 - 2015-07-04 11:23 - 00001532 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-07-04 11:22 - 2015-07-04 11:24 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2015-07-04 11:22 - 2015-07-04 11:22 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2015-07-04 11:22 - 2015-07-04 11:22 - 00000000 ____D C:\Users\valeria\AppData\Roaming\RPEng
2015-07-04 11:22 - 2015-07-04 11:22 - 00000000 ____D C:\Program Files (x86)\FreeCodecPack
2015-07-04 11:20 - 2015-07-04 11:21 - 36468360 _____ (DVDVideoSoft Ltd. ) C:\Users\valeria\Downloads\FreeYouTubeToMP3Converter (1).exe
2015-06-30 15:31 - 2015-06-30 15:31 - 00026112 _____ C:\Users\valeria\Downloads\Das+Alter+beim+1.Mal.dot
2015-06-30 15:29 - 2015-06-30 15:29 - 00026624 _____ C:\Users\valeria\Downloads\Prämissen.dot
2015-06-30 14:01 - 2015-06-30 14:10 - 169868481 _____ C:\Users\valeria\Downloads\101.536 15s 2SSt VO bioarchäologie_reader.zip
2015-06-25 15:55 - 2015-06-25 15:55 - 01198368 _____ C:\Users\valeria\Downloads\Passbild Schablone - CHIP-Installer.exe
2015-06-19 11:34 - 2015-06-19 11:34 - 00000000 ____D C:\Users\valeria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-06-19 11:30 - 2015-07-10 16:35 - 00001232 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000UA.job
2015-06-19 11:30 - 2015-07-10 11:35 - 00001180 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000Core.job
2015-06-19 11:30 - 2015-06-19 11:30 - 00004206 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000UA
2015-06-19 11:30 - 2015-06-19 11:30 - 00003810 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000Core
2015-06-19 11:30 - 2015-06-19 11:30 - 00000000 ____D C:\Users\valeria\AppData\Local\Dropbox
2015-06-19 11:30 - 2015-06-19 11:30 - 00000000 ____D C:\ProgramData\Dropbox
2015-06-18 12:45 - 2015-06-18 12:45 - 00000000 ____D C:\Users\valeria\AppData\Local\GWX
2015-06-15 11:37 - 2015-06-15 11:38 - 00385958 _____ C:\Users\valeria\Downloads\Molekulare Biologie Mitschrift.pages.zip
2015-06-10 19:14 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-10 19:14 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-10 19:14 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-10 19:14 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-10 19:14 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 19:14 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-10 19:14 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-10 19:14 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-10 19:14 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-10 19:14 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-10 19:12 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-10 19:12 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-10 19:12 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-10 19:12 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-10 19:12 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-10 19:12 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-10 19:12 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-10 19:12 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-10 19:12 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-10 19:12 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-10 19:12 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-10 19:12 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-10 19:12 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-10 19:12 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-10 19:12 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-10 19:12 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-10 19:12 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-10 19:12 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-10 19:12 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-10 19:12 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-10 19:12 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-10 19:12 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-10 19:12 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-10 19:12 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-10 19:12 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-10 19:12 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-10 19:12 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-10 19:12 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-10 19:12 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-10 19:12 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-10 19:12 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 19:12 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-10 19:10 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-10 19:10 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-10 19:10 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-10 19:10 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-10 19:09 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-10 19:09 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-10 19:09 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-10 19:09 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-10 19:09 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-10 19:09 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-10 19:09 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-10 19:09 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-10 19:09 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-10 19:09 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-10 19:09 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-10 19:09 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-10 19:09 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-10 19:09 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-10 19:09 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-10 19:09 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-10 19:09 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-10 19:09 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-10 19:09 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-10 19:09 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-10 19:09 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-10 19:09 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-10 19:09 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-10 19:09 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-10 19:09 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-10 19:09 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-10 19:09 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-10 19:09 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-10 19:09 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-10 19:09 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 19:09 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-10 19:09 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-10 19:09 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 19:09 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 19:09 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-10 19:09 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 19:09 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-10 19:09 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 19:09 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 19:09 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-10 19:09 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-10 19:09 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 19:09 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-10 19:09 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 19:09 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-10 19:09 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 19:09 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 19:09 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 19:09 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-10 19:08 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 19:08 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 19:08 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-10 19:08 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 19:08 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 19:08 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-10 19:08 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-10 19:08 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 19:08 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-10 19:08 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 19:08 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-10 16:35 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-10 16:35 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-10 16:30 - 2012-09-10 17:33 - 00000000 ___RD C:\Users\valeria\Dropbox
2015-07-10 16:30 - 2012-09-10 17:30 - 00000000 ____D C:\Users\valeria\AppData\Roaming\Dropbox
2015-07-10 16:29 - 2011-10-09 01:26 - 00000000 ____D C:\Users\valeria\Tracing
2015-07-10 16:29 - 2010-12-06 09:25 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-10 16:26 - 2013-02-27 19:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-10 16:21 - 2011-07-28 14:26 - 02054511 _____ C:\Windows\WindowsUpdate.log
2015-07-10 16:15 - 2014-08-29 03:18 - 00204058 _____ C:\Windows\PFRO.log
2015-07-10 16:15 - 2014-06-19 11:17 - 00018763 _____ C:\Windows\setupact.log
2015-07-10 16:15 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-10 16:02 - 2010-12-06 09:25 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-10 15:45 - 2009-07-14 06:45 - 00426280 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-10 15:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2015-07-10 14:15 - 2012-10-09 23:10 - 00000936 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000UA.job
2015-07-10 12:14 - 2011-07-28 14:27 - 00000000 ____D C:\Users\valeria
2015-07-09 16:44 - 2011-07-28 17:07 - 00003954 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{7C580DF8-E664-4C4A-A59F-BBE5283D5696}
2015-07-09 12:27 - 2013-02-27 19:15 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-09 12:27 - 2012-12-23 23:58 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-09 12:27 - 2012-12-23 23:58 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-07 18:46 - 2014-09-27 18:41 - 00000095 _____ C:\Users\valeria\AppData\Roaming\WB.CFG
2015-07-07 10:26 - 2012-10-09 23:10 - 00000914 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000Core.job
2015-07-05 12:08 - 2011-07-31 17:01 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-07-04 11:54 - 2011-07-29 15:55 - 00000000 ____D C:\Users\valeria\AppData\Roaming\Skype
2015-07-04 11:34 - 2012-12-09 15:44 - 00000000 ____D C:\Users\valeria\AppData\Roaming\TuneUp Software
2015-07-04 11:27 - 2012-08-08 22:49 - 00000000 ____D C:\Users\valeria\AppData\Roaming\DVDVideoSoft
2015-07-04 11:23 - 2012-12-09 15:44 - 00000000 ____D C:\ProgramData\TuneUp Software
2015-07-04 11:23 - 2012-08-08 22:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-07-01 10:23 - 2012-06-03 22:13 - 00000000 ____D C:\Users\valeria\AppData\Roaming\vlc
2015-06-30 22:05 - 2011-08-02 20:20 - 00000000 ____D C:\Users\valeria\AppData\Roaming\SoftGrid Client
2015-06-30 19:05 - 2010-12-06 18:06 - 00700134 _____ C:\Windows\system32\perfh007.dat
2015-06-30 19:05 - 2010-12-06 18:06 - 00149984 _____ C:\Windows\system32\perfc007.dat
2015-06-30 19:05 - 2009-07-14 07:13 - 01622300 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-21 19:09 - 2012-11-11 21:43 - 00000000 ____D C:\Users\valeria\Documents\uni
2015-06-19 13:00 - 2010-12-06 09:37 - 00000000 ____D C:\ProgramData\Skype
2015-06-19 11:27 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-18 14:27 - 2014-12-12 15:30 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-18 14:27 - 2014-05-08 03:01 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-18 14:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-18 13:30 - 2013-08-15 22:52 - 00000000 ____D C:\Windows\system32\MRT
2015-06-18 12:55 - 2011-08-03 15:00 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-15 23:53 - 2011-09-01 20:37 - 00000000 ___RD C:\Program Files (x86)\Skype

==================== Files in the root of some directories =======

2013-07-29 11:25 - 2013-07-29 11:25 - 5082084 _____ (The Public) C:\Users\valeria\AppData\Roaming\Avisynth.exe
2013-07-29 11:26 - 2013-07-29 11:27 - 5243208 _____ (                                                            ) C:\Users\valeria\AppData\Roaming\AvsP.exe
2013-07-29 11:25 - 2013-07-29 11:26 - 5514668 _____ (LIGHTNING UK!) C:\Users\valeria\AppData\Roaming\Imgburn.exe
2013-07-29 11:26 - 2013-07-29 11:26 - 1357348 _____ () C:\Users\valeria\AppData\Roaming\MatroskaSplitter.exe
2013-07-29 11:27 - 2013-07-29 11:27 - 7760687 _____ (Boraxsoft) C:\Users\valeria\AppData\Roaming\SetupGFD.exe
2014-09-27 18:41 - 2015-07-07 18:46 - 0000095 _____ () C:\Users\valeria\AppData\Roaming\WB.CFG
2011-09-17 18:03 - 2012-06-26 14:59 - 0000402 _____ () C:\Users\valeria\AppData\Roaming\wklnhst.dat
2013-07-29 11:26 - 2013-07-29 11:26 - 0117723 _____ () C:\Users\valeria\AppData\Roaming\yuvcodecs-1.3.exe
2011-09-07 12:43 - 2013-07-30 15:49 - 0009216 _____ () C:\Users\valeria\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-07-29 15:57 - 2011-07-29 15:57 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2011-07-28 14:39 - 2012-01-05 22:26 - 0020865 _____ () C:\ProgramData\MusicStation.log
2010-12-06 09:31 - 2010-12-06 09:31 - 0000221 _____ () C:\ProgramData\MusicStation.xml

Some files in TEMP:
====================
C:\Users\valeria\AppData\Local\Temp\6f719uk0.dll
C:\Users\valeria\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplbmrvg.dll
C:\Users\valeria\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\valeria\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\valeria\AppData\Local\Temp\p6em2zyq.dll
C:\Users\valeria\AppData\Local\Temp\pdf24-creator-update.exe
C:\Users\valeria\AppData\Local\Temp\Quarantine.exe
C:\Users\valeria\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\valeria\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\valeria\AppData\Local\Temp\SkypeSetup.exe
C:\Users\valeria\AppData\Local\Temp\SpotifyUninstall.exe
C:\Users\valeria\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-09 19:29

==================== End of log ============================

--- --- ---

[CODE]Additional
FRST Logfile:

Code:

ATTFilter

scan result of Farbar Recovery Scan Tool (x64) Version:09-07-2015
Ran by valeria at 2015-07-10 16:49:46
Running from C:\Users\valeria\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-557923668-3065560405-1829487697-500 - Administrator - Disabled)
Gast (S-1-5-21-557923668-3065560405-1829487697-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-557923668-3065560405-1829487697-1004 - Limited - Enabled)
valeria (S-1-5-21-557923668-3065560405-1829487697-1000 - Administrator - Enabled) => C:\Users\valeria

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.191 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.191 - Adobe Systems Incorporated)
Adobe Reader 9.3 - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-A93000000001}) (Version: 9.3.0 - Adobe Systems Incorporated)
Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version:  - ALPS ELECTRIC CO., LTD.)
AMD USB Filter Driver (HKLM-x32\...\{987B04C4-B5AC-4AD6-A7E9-8D681085B850}) (Version: 1.0.15.94 - Advanced Micro Devices, Inc.)
Apple Application Support (32-Bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{7BB90344-0647-468E-925A-7F69F7983421}) (Version: 2.0.1.85 - ArcSoft)
ArcSoft WebCam Companion 3 (HKLM-x32\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.390 - ArcSoft)
ATI Catalyst Install Manager (HKLM\...\{FED99701-A3A5-CE6B-4D04-DECF94784B89}) (Version: 3.0.765.0 - ATI Technologies, Inc.)
AviSynth 2.6 (HKLM-x32\...\AviSynth) (Version: 2.6.0.2 - GPL Public release.)
AvsP (HKLM-x32\...\AvsP_is1) (Version:  - )
Bing Bar (HKLM-x32\...\{449CE12D-E2C7-4B97-B19E-55D163EA9435}) (Version: 7.0.619.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BRAINYOO (HKLM-x32\...\BRAINYOO) (Version:  - BRAINYOO Ltd.)
ccc-core-static (x32 Version: 2010.0302.2233.40412 - Ihr Firmenname) Hidden
Citavi 4 (HKLM-x32\...\{CC0A85B2-734A-45B3-B678-05F6A6499AC7}) (Version: 4.5.0.11 - Swiss Academic Software)
Click to Disc MergeModules x64 (Version: 1.0.14230 - Sony Corporation) Hidden
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
doPDF 7.3 printer (HKLM\...\doPDF 7 printer_is1) (Version:  - Softland)
Dropbox (HKU\S-1-5-21-557923668-3065560405-1829487697-1000\...\Dropbox) (Version: 3.6.7 - Dropbox, Inc.)
DVD slideshow GUI 0.9.5.4 (HKLM-x32\...\BE37E547-62DF-43C8-AE6A-D03E82BC67A2_is1) (Version: 0.9.5.4 - Tin2tin)
Einstellungen für VAIO-Inhaltsüberwachung (HKLM-x32\...\{23825B69-36DF-4DAD-9CFD-118D11D80F16}) (Version: 2.5.0.13220 - Sony Corporation)
Evernote (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.2.1525 - Evernote Corp.)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Fotor 1.3.0 (HKLM-x32\...\Fotor) (Version: 1.3.0 - Everimaging Co., Ltd.)
FotoWorks XL (HKLM-x32\...\FotoWorks XL_is1) (Version: Aktuelle Version - IN MEDIA KG)
Free YouTube to MP3 Converter version 3.12.59.616 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.616 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.132 - Google Inc.)
Google Earth (HKLM-x32\...\{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}) (Version: 6.1.0.5001 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
GUI for dvdauthor 1.07 (HKLM-x32\...\GUI for dvdauthor) (Version: 1.07 - Boraxsoft)
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
Helix YUV Codecs (remove only) (HKLM-x32\...\HelixYUVCodecs) (Version:  - )
Hotfix für Microsoft Visual C++ 2010 Express - DEU (KB2635973) (HKLM-x32\...\{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}.KB2635973) (Version: 1 - Microsoft Corporation)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.5.0 - LIGHTNING UK!)
Iminent (x32 Version: 4.10.0.0 - Iminent) Hidden
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java(TM) 6 Update 18 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416018FF}) (Version: 6.0.180 - Sun Microsystems, Inc.)
Java(TM) 6 Update 20 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216018FF}) (Version: 6.0.200 - Sun Microsystems, Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Media Gallery (HKLM-x32\...\{DD88F979-FA58-41AC-980C-A6E1A82B61D9}) (Version: 1.2.0.15040 - Sony Corporation)
Media Gallery (x32 Version: 1.2.0.15040 - Sony Corporation) Hidden
Media Gallery MergeModules x64 (Version: 1.0.14250 - Sony Corporation) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Foto 2006 Standard Edition (HKLM-x32\...\PictureItPrem_v11) (Version: 11.0.0422 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - DEU) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 English (HKLM-x32\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 x64 English (HKLM\...\{F83779DF-E1F5-43A2-A7BE-732F856FADB7}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Word 2002 (HKLM-x32\...\{911B0407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{4EA2F95F-A537-4d17-9E7F-6B3FF8D9BBE3}) (Version: 08.05.0822 - Microsoft Corporation)
MSI_SPF_x64 (Version: 1.0.0 - Sony Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MusicStation (HKLM-x32\...\{AB259D46-F851-41B0-9AFA-AED8998AD68A}) (Version: 2.0.4.1199 - Omnifone)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
PDF24 Creator 5.5.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.1.02.03310 - Sony Corporation)
PMB VAIO Edition Guide (x32 Version: 1.5.00.03020 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (HKLM-x32\...\InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}) (Version: 3.1.00.15080 - Sony Corporation)
PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.1.00.15080 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Image Optimizer) (HKLM-x32\...\InstallShield_{1873FFC1-FDCB-47E1-B7C7-F418211E3530}) (Version: 1.1.00.15040 - Sony Corporation)
PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.1.00.15040 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (HKLM-x32\...\InstallShield_{B25563A0-41F4-4A81-A6C1-6DBC0911B1F3}) (Version: 2.1.00.15080 - Sony Corporation)
PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.1.00.15080 - Sony Corporation) Hidden
R für Windows (HKLM-x32\...\R für Windows) (Version:  - )
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6034 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6069 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30116 - Realtek Semiconductor Corp.)
Remote Play mit PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.0.0.15090 - Sony Corporation)
Remote Play with PlayStation 3 (x32 Version: 1.0.0.15090 - Sony Corporation) Hidden
Roxio Easy Media Creator 10 LJ (HKLM-x32\...\{537BF16E-7412-448C-95D8-846E85A1D817}) (Version: 10.3 - Roxio)
Setting Utility Series (HKLM-x32\...\{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}) (Version: 5.2.0.15250 - Sony Corporation)
Setup-Start von Microsoft Works Suite 2006 (HKLM-x32\...\Works2006Setup) (Version:  - )
simfy (HKLM-x32\...\Simfy) (Version: 1.6.5 - simfy GmbH)
simfy (x32 Version: 1.6.5 - simfy GmbH) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.)
Sony Home Network Library (HKLM-x32\...\{D03D02D8-AB64-4785-A48E-5AA8B0FB8C14}) (Version: 2.1.0.14240 - Sony Corporation)
Sony Home Network Library (x32 Version: 2.1.0.14240 - Sony Corporation) Hidden
Statistiklabor 3 (HKLM-x32\...\Statistiklabor 3) (Version:  - )
VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{339F9B4D-00CB-4C1C-BED8-EC86A9AB602A}) (Version: 1.5.00.03020 - Sony Corporation)
VAIO Care (HKLM\...\{D9FFE40D-1A85-4541-992C-5EF505F391A4}) (Version: 8.4.2.12041 - Sony Corporation)
VAIO Care Recovery (HKLM\...\{6ED1750E-F44F-4635-8F0D-B76B9262B7FB}) (Version: 1.1.1.13230 - Sony Corporation)
VAIO Content Monitoring Settings (x32 Version: 2.5.0.13220 - Sony Corporation) Hidden
VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.2.0.15020 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.3.0.13150 - Sony Corporation)
VAIO Data Restore Tool (x32 Version: 1.3.0.13150 - Sony Corporation) Hidden
VAIO DVD Menu Data (HKLM-x32\...\{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}) (Version: 2.1.00.13210 - Sony Corporation)
VAIO Energie Verwaltung (HKLM-x32\...\{803E4FA5-A940-4420-B89D-A8BC2E160247}) (Version: 5.1.0.15250 - Sony Corporation)
VAIO Entertainment Platform (HKLM-x32\...\{6B1F20F2-6321-4669-A58C-33DF8E7517FF}) (Version: 3.7.0.16080 - Sony Corporation)
VAIO Entertainment Platform (x32 Version: 3.7.0.16080 - Sony Corporation) Hidden
VAIO Event Service (HKLM-x32\...\{C7477742-DDB4-43E5-AC8D-0259E1E661B1}) (Version: 5.2.0.15020 - Sony Corporation)
VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.0.0.14050 - Sony Corporation)
VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.0.0.04160 - Sony Corporation)
VAIO Hardware Diagnostics (x32 Version: 3.9.1 - Sony Corporation) Hidden
VAIO Manual (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 1.0.0.03290 - Sony Corporation)
VAIO Media plus (HKLM-x32\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.1.0.15040 - Sony Corporation)
VAIO Media plus (x32 Version: 2.1.0.15040 - Sony Corporation) Hidden
VAIO Media plus Opening Movie (HKLM-x32\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 2.1.0.13220 - Sony Corporation)
VAIO Movie Story MergeModules x64 (Version: 1.0.14240 - Sony Corporation) Hidden
VAIO Movie Story Template Data (HKLM-x32\...\InstallShield_{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}) (Version: 2.1.00.14040 - Sony Corporation)
VAIO Movie Story Template Data (x32 Version: 2.1.00.14040 - Sony Corporation) Hidden
VAIO Original Function Settings (x32 Version: 2.1.0.13120 - Sony Corporation) Hidden
VAIO Original Funktion Einstellungen (HKLM-x32\...\{A63E7492-A0BC-4BB9-89A7-352965222380}) (Version: 2.1.0.13120 - Sony Corporation)
VAIO Premium Partners (HKLM-x32\...\VAIO Premium Partners) (Version: 1.0 - Sony Europe)
VAIO screensaver (HKLM-x32\...\VAIO screensaver) (Version: 1.0.0.0 - Sony Europe)
VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.3.1.08110 - Sony Corporation)
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.0.1.02280 - Sony Corporation)
VAIO Wallpaper Contents (HKLM-x32\...\{D60F97EC-EF06-4E1E-B0D1-C2CBABA62FA3}) (Version: 2.1.0.14090 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.1.1.13070 - Sony Corporation)
VLC media player 2.0.6 (HKLM-x32\...\VLC media player) (Version: 2.0.6 - VideoLAN)
VMp MergeModule x64 (Version: 1.0.0 - Default Company Name) Hidden
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation)
Windows Driver Package - Broadcom Bluetooth  (09/09/2009 6.2.0.9405) (HKLM\...\930E4792BDAEAFB62A9514EE7578775658A5D07C) (Version: 09/09/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (HKLM\...\3BA80AB4C7E9F8497C115C844953A3D4BEB84D21) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Works Update (x32 Version: 8.0.0.0000 - Microsoft Corporation) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-557923668-3065560405-1829487697-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\valeria\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.)

==================== Restore Points =========================

16-06-2015 00:18:14 Windows Update
18-06-2015 12:48:39 Windows Update
23-06-2015 22:05:12 Windows Update
30-06-2015 14:28:46 Windows Update
30-06-2015 19:04:26 Windows-Sicherung
04-07-2015 11:54:12 Windows Update
06-07-2015 19:55:12 TuneUp Utilities 2014 wird entfernt
06-07-2015 19:58:27 TuneUp Utilities 2014 (de-DE) wird entfernt
07-07-2015 10:35:02 Windows-Sicherung
08-07-2015 11:26:11 Windows Update
10-07-2015 11:49:49 OpenOffice 4.1.1 wird installiert

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2012-10-01 22:35 - 00000822 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {08DD0973-93C8-43AF-8D19-77CD121358B8} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {0A6EE03D-2BEB-488A-A90D-A6DC70C5D9A8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-24] (Google Inc.)
Task: {1B1F9E3B-4965-4E75-A4B5-C604867275C1} - System32\Tasks\USER_ESRV_SVC => Wscript.exe //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"
Task: {1B347A0A-BEEC-4F1A-89A0-520CCC0A27A8} - System32\Tasks\SONY\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2010-02-06] (Sony Corporation)
Task: {231346F8-E1E0-4EBA-BE69-81C6785C7B4D} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {2A2920AA-56A4-4FDE-8E39-1F7C8736D34C} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [2014-01-16] (Sony Corporation)
Task: {2BAA8C6A-84DC-4EF9-B71F-4069D58B2E9F} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {2E306A64-A01C-4956-B539-93A261462892} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2014-02-28] (Sony Corporation)
Task: {3246C43E-9298-4DEB-9855-68C47ABE871A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-09] (Adobe Systems Incorporated)
Task: {33947199-291A-4411-8D08-13C966CEB860} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-02-18] (Sun Microsystems, Inc.)
Task: {48DD426F-C051-42DD-9F8A-BF08F6C8A7A3} - System32\Tasks\Sony Corporation\VAIO Care\ActiveStatusCollect => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {49A8CE8C-DCCA-41AE-95FA-24B68D361B3B} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {547BF970-B845-44C0-9200-ED765DF3945A} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {606C73D7-9136-4438-9509-7B0608C1D87C} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2010-02-06] (Sony Corporation)
Task: {61A5A931-6A0D-4E59-9813-AEE72A4AF26D} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000Core => C:\Users\valeria\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-10-09] (Facebook Inc.)
Task: {63B10F1C-1321-4548-8DA9-07F09A9EB42A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-24] (Google Inc.)
Task: {65A1C3F3-401D-48F3-B268-71E14F0DC233} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6C1CD2F0-D764-4AE4-AEA8-E11EBDE0B828} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {7A266E56-2774-42E5-853F-84156B386595} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000Core => C:\Users\valeria\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {8981DA70-F31C-4CA6-A50B-1D61F3077045} - System32\Tasks\{896169C4-AE6B-436B-8CDF-A49196755DE0} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.0.119.259/en/abandoninstall?page=tsPlugin&amp;installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:notoffered;systemlevelpresent
Task: {8E98103E-7A76-4297-924B-B12552B68F6C} - System32\Tasks\{87289292-3F16-45A8-AF1B-C7355CEF68BB} => pcalua.exe -a "C:\Users\valeria\Documents\uni\Bachelor\GPS Afrika\MapSource_6163.exe" -d "C:\Users\valeria\Documents\uni\Bachelor\GPS Afrika"
Task: {994268B2-8F67-4D3D-AE11-E1DB1BD07C0C} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {A764F67E-69CC-4A34-9D9C-2F9D94A1F3A2} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {ACBD940E-D9F3-49D4-B1A5-7EA389A92A13} - System32\Tasks\Sony Corporation\VAIO Care\UpdateSolution => C:\Program Files\Sony\VAIO Care\Solution.Updater.exe [2014-12-03] (Sony Corporation)
Task: {AEDC234E-A4B3-4DFC-9C09-912BA5B08235} - System32\Tasks\{9CCDC08A-7E73-4C86-8424-D90999C3083A} => Chrome.exe hxxp://ui.skype.com/ui/0/6.11.0.102/en/go/help.faq.installer?LastError=1618
Task: {BD5335D7-470A-4C22-92FC-5DD0B9D7905F} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000UA => C:\Users\valeria\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-10-09] (Facebook Inc.)
Task: {C66C1724-2CA9-4A61-8D45-2D14E0E529C6} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11] (Adobe Systems Incorporated)
Task: {C9234186-039D-4E0D-9E9D-5AB56AAFDED6} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000UA => C:\Users\valeria\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {C9484808-A0CB-4804-897B-F4813F8114FE} - System32\Tasks\{3268092D-AD17-4C73-A05B-7CAC009974C8} => Chrome.exe hxxp://ui.skype.com/ui/0/7.0.85.102/en/abandoninstall?page=tsProgressBar
Task: {CCDA5C4F-5617-4CF4-ACD4-352335418028} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2014-03-01] (Sony Corporation)
Task: {E68D45EE-1247-45F8-BACB-2097BD80EE19} - System32\Tasks\{1EE40875-10A5-4C8D-B023-410F07370605} => C:\Program Files (x86)\iTunes\iTunes.exe
Task: {F9876B65-01EB-4BC1-9967-894E0D202AA5} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2014-12-03] (Sony Corporation)
Task: {FBA3165D-2319-4F9B-A763-FC07BDCFFA47} - System32\Tasks\VAIO Care Support => C:\Program Files\Sony\VAIO Care\VCSpt.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000Core.job => C:\Users\valeria\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000UA.job => C:\Users\valeria\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000Core.job => C:\Users\valeria\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-557923668-3065560405-1829487697-1000UA.job => C:\Users\valeria\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-03-20 18:12 - 2015-03-20 18:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-07-07 22:07 - 2015-07-07 05:49 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libglesv2.dll
2015-07-07 22:07 - 2015-07-07 05:49 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libegl.dll
2015-07-07 22:07 - 2015-07-07 05:49 - 16285512 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\valeria\Downloads\Bunter Weltenbazar im November.eml:OECustomProperty

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Software\Classes\.exe:  =>  <===== ATTENTION!

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\valeria\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{14C72308-2752-44EE-B9EF-54725DC84BD3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{32B34F6A-C33E-40C4-8D92-7B1C51C41C6B}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{7005EA41-8EAD-4FBC-91C8-8D03A81DB2C8}] => (Allow) svchost.exe
FirewallRules: [{5D69196E-00FA-47F0-8B76-9116D0640BED}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{0DB4545A-A354-475F-B156-7FCCF14868AB}] => (Allow) C:\Program Files (x86)\Iminent\IMBooster\IMBooster.exe
FirewallRules: [{0A165742-14A6-4202-826C-55711A6DFF0B}] => (Allow) C:\Program Files (x86)\Iminent\IMBooster\IMBooster.exe
FirewallRules: [{7A8325AE-8560-45F9-AADC-96873C9C6E6B}] => (Allow) C:\Program Files (x86)\Iminent\MMServer\Iminent.MMServer.exe
FirewallRules: [{C71AF7F4-D1FB-4CB4-BC27-500B0D7480D6}] => (Allow) C:\Program Files (x86)\Iminent\MMServer\Iminent.MMServer.exe
FirewallRules: [{5A6FE9A2-4897-4005-A872-8FDA97FA2A23}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{95DAE13F-8228-4E58-B7BE-3525FE1A877C}] => (Allow) LPort=2869
FirewallRules: [{DDF876FB-A819-45B0-815F-1D0321AA2367}] => (Allow) LPort=1900
FirewallRules: [{41DD73ED-62DB-442C-A7B7-05C880D3C67F}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{038CC6B0-37F4-4D06-8F6B-C3C0AEA0780E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{621A51EA-3FBE-4437-A09F-02EE3E19E7F0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3DDA10EA-8619-4B2D-AF57-A04A6F31AC73}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{80ED8FE7-F708-4A89-983E-0AA79C6C2451}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{109A3F5B-01B8-4148-A7D9-EA315CDA95B8}] => (Allow) C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{7F1D9E3B-4935-4EEB-8358-D958FCE65692}] => (Allow) C:\Users\valeria\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{D234A76D-5325-4AC3-8CA6-C5945AA01AB2}C:\users\valeria\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\valeria\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{757E2BF7-1442-471F-A0A1-4B15CF2CF64C}C:\users\valeria\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\valeria\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{C18F3467-03DA-4BD8-96B2-C308A3130FE1}] => (Allow) C:\Users\valeria\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [TCP Query User{185067B6-2944-497E-A8CB-F3B81095C6B2}C:\program files\sony\vaio update\internetwrapper.exe] => (Allow) C:\program files\sony\vaio update\internetwrapper.exe
FirewallRules: [UDP Query User{7655ED79-7F24-4CB7-9F41-9737FB08C02E}C:\program files\sony\vaio update\internetwrapper.exe] => (Allow) C:\program files\sony\vaio update\internetwrapper.exe
FirewallRules: [{A814D688-5602-4C85-A9B5-9E88FF861DF8}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAgent.exe
FirewallRules: [{606CEA88-07F8-40AD-95D0-88A7ACC2341A}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
FirewallRules: [{11986A90-5BAC-402C-A4C5-B10D658DB9CB}] => (Allow) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
FirewallRules: [{4F6A2B2E-FE01-4689-8DD0-39C3589C0044}] => (Allow) C:\Program Files\Sony\VAIO Care\VAIOShell.exe
FirewallRules: [TCP Query User{E2F1CA4D-F982-4867-89D2-08280C1F6DF2}C:\users\valeria\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\valeria\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{E2BFB0E6-42E6-43CA-835A-B1244961FCE5}C:\users\valeria\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\valeria\appdata\roaming\spotify\spotify.exe
FirewallRules: [{041B3B77-489A-4494-9175-400CCEF28FBC}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{F967324E-596A-4840-8A70-2B8850EC5FAE}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/10/2015 04:26:23 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
Error: Failed to make the SOAP Call HResult: 0x800c0005. Exception caught while trying to report the Update Event

Error: (07/10/2015 03:57:02 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
Error: Failed to make the SOAP Call HResult: 0x800c0005. Exception caught while trying to report the Update Event

Error: (07/10/2015 03:43:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: VCAgent.exe, Version: 8.4.2.12030, Zeitstempel: 0x5476d099
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000007fe88e3be31
ID des fehlerhaften Prozesses: 0x4a8
Startzeit der fehlerhaften Anwendung: 0xVCAgent.exe0
Pfad der fehlerhaften Anwendung: VCAgent.exe1
Pfad des fehlerhaften Moduls: VCAgent.exe2
Berichtskennung: VCAgent.exe3

Error: (07/10/2015 03:43:18 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: VCAgent.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
   bei VCAgent.View.MainWindow.WindowProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei System.Windows.Interop.HwndSource.PublicHooksFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.DefWndProcWrapper(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.IntGetMessageW(System.Windows.Interop.MSG ByRef, System.Runtime.InteropServices.HandleRef, Int32, Int32)
   bei MS.Win32.UnsafeNativeMethods.IntGetMessageW(System.Windows.Interop.MSG ByRef, System.Runtime.InteropServices.HandleRef, Int32, Int32)
   bei System.Windows.Threading.Dispatcher.GetMessage(System.Windows.Interop.MSG ByRef, IntPtr, Int32, Int32)
   bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
   bei System.Windows.Application.RunInternal(System.Windows.Window)
   bei System.Windows.Application.Run()
   bei VCAgent.App.Main()

Error: (07/10/2015 03:35:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3139333

Error: (07/10/2015 03:35:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3139333

Error: (07/10/2015 03:35:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/10/2015 03:35:34 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3138163

Error: (07/10/2015 03:35:34 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3138163

Error: (07/10/2015 03:35:34 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (07/10/2015 04:35:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Virtueller Datenträger" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/10/2015 04:35:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "VCService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/10/2015 04:35:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "VUAgent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/10/2015 04:35:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Application Virtualization Client" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/10/2015 04:35:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/10/2015 04:35:50 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/10/2015 04:35:50 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) System Behavior Tracker Collector Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/10/2015 04:35:49 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Energy Server Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/10/2015 04:35:49 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Client Virtualization Handler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/10/2015 04:35:48 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.


Microsoft Office:
=========================
Error: (07/10/2015 04:26:23 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Error: Failed to make the SOAP Call HResult: 0x800c0005. Exception caught while trying to report the Update Event

Error: (07/10/2015 03:57:02 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Error: Failed to make the SOAP Call HResult: 0x800c0005. Exception caught while trying to report the Update Event

Error: (07/10/2015 03:43:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: VCAgent.exe8.4.2.120305476d099unknown0.0.0.000000000c0000005000007fe88e3be314a801d0b95d7e5e1eaaC:\Program Files\Sony\VAIO Care\VCAgent.exeunknown9ff97b8c-2709-11e5-b12f-78843c312b61

Error: (07/10/2015 03:43:18 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: VCAgent.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
   bei VCAgent.View.MainWindow.WindowProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei System.Windows.Interop.HwndSource.PublicHooksFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.DefWndProcWrapper(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.IntGetMessageW(System.Windows.Interop.MSG ByRef, System.Runtime.InteropServices.HandleRef, Int32, Int32)
   bei MS.Win32.UnsafeNativeMethods.IntGetMessageW(System.Windows.Interop.MSG ByRef, System.Runtime.InteropServices.HandleRef, Int32, Int32)
   bei System.Windows.Threading.Dispatcher.GetMessage(System.Windows.Interop.MSG ByRef, IntPtr, Int32, Int32)
   bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
   bei System.Windows.Application.RunInternal(System.Windows.Window)
   bei System.Windows.Application.Run()
   bei VCAgent.App.Main()

Error: (07/10/2015 03:35:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3139333

Error: (07/10/2015 03:35:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3139333

Error: (07/10/2015 03:35:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/10/2015 03:35:34 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3138163

Error: (07/10/2015 03:35:34 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3138163

Error: (07/10/2015 03:35:34 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


==================== Memory info =========================== 

Processor: AMD Athlon(tm) II P360 Dual-Core Processor
Percentage of memory in use: 41%
Total physical RAM: 3834.9 MB
Available physical RAM: 2238.09 MB
Total Virtual: 7668 MB
Available Virtual: 5850.91 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:455.54 GB) (Free:206.01 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 19E1780A)
Partition 1: (Not Active) - (Size=10.1 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=455.5 GB) - (Type=07 NTFS)

==================== End of log ============================

--- --- ---

Leider besteht das Problem immernoch und es öffnen sich ständig neue Fenster

((

cosinus · 11.07.2015, 17:59

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {3355EF21-A527-432F-9379-88E34E6CA581} URL = http://de.shopping.com/?linkin_id=8056363
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ± vË°!×—(ä¼48Ð¸patm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†x¢8€ÙjÀÿþ*´Ñ;áa´[¦†8*º~RÙxœòÜ8'£-)x*ä* URL = 
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {0D8B3C4E-A058-4F24-B61C-95BC52C6ED0C} URL = http://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {16267E4B-17AB-459B-91E2-C01600553737} URL = http://services.zinio.com/search?s={searchTerms}&rf=sonyslices
C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
C:\Users\valeria\AppData\Roaming\RPEng
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Software\Classes\.exe:  =>  <===== ATTENTION!
RemoveProxy:
EmptyTemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Apfeltasche · 11.07.2015, 19:56

Gemacht

Code:

ATTFilter

Fix result of Farbar Recovery Scan Tool (x64) Version:11-07-2015
Ran by valeria at 2015-07-11 19:50:38 Run:1
Running from C:\Users\valeria\Desktop
Loaded Profiles: valeria (Available Profiles: valeria)
Boot Mode: Normal
==============================================

fixlist content:
*****************
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {3355EF21-A527-432F-9379-88E34E6CA581} URL = hxxp://de.shopping.com/?linkin_id=8056363
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ± vË°!×—(ä¼48Ð¸patm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†x¢8€ÙjÀÿþ*´Ñ;áa´[¦†8*º~RÙxœòÜ8'£-)x*ä* URL = 
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {0D8B3C4E-A058-4F24-B61C-95BC52C6ED0C} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-557923668-3065560405-1829487697-1000 -> {16267E4B-17AB-459B-91E2-C01600553737} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
C:\Users\valeria\AppData\Roaming\RPEng
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Software\Classes\.exe:  =>  <===== ATTENTION!
RemoveProxy:
EmptyTemp:
*****************

"HKU\S-1-5-21-557923668-3065560405-1829487697-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{3355EF21-A527-432F-9379-88E34E6CA581}" => key removed successfully
HKCR\CLSID\{3355EF21-A527-432F-9379-88E34E6CA581} => key not found. 
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ± vË°!×—(ä¼48Ð¸patm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†x¢8€ÙjÀÿþ*´Ñ;áa´[¦†8*º~RÙxœòÜ8'£-)x*ä* => key could not remove. ErrorCode: 0xC0000033
HKCR\CLSID\ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ± vË°!×—(ä¼48Ð¸patm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†x¢8€ÙjÀÿþ*´Ñ;áa´[¦†8*º~RÙxœòÜ8'£-)x*ä* => key could not remove. ErrorCode: 0xC0000033
"HKU\S-1-5-21-557923668-3065560405-1829487697-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0D8B3C4E-A058-4F24-B61C-95BC52C6ED0C}" => key removed successfully
HKCR\CLSID\{0D8B3C4E-A058-4F24-B61C-95BC52C6ED0C} => key not found. 
"HKU\S-1-5-21-557923668-3065560405-1829487697-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{16267E4B-17AB-459B-91E2-C01600553737}" => key removed successfully
HKCR\CLSID\{16267E4B-17AB-459B-91E2-C01600553737} => key not found. 
C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} => moved successfully.
C:\Users\valeria\AppData\Roaming\RPEng => moved successfully.
"HKU\S-1-5-21-557923668-3065560405-1829487697-1000\Software\Classes\.exe" => key removed successfully

========= RemoveProxy: =========

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value removed successfully
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\S-1-5-21-557923668-3065560405-1829487697-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully


========= End of RemoveProxy: =========

EmptyTemp: => 2.2 GB temporary data Removed.


The system needed a reboot.. 

==== End of Fixlog 19:54:50 ====

cosinus · 12.07.2015, 16:40

Okay, dann Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Apfeltasche · 13.07.2015, 09:12

Okay, erledigt.

MBAM

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 12.07.2015
Suchlauf-Zeit: 16:27:29
Logdatei: mbam.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.07.12.02
Rootkit Datenbank: v2015.07.10.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: valeria

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 379913
Verstrichene Zeit: 1 Std, 6 Min, 15 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 0
(Keine schädliche Elemente gefunden)

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 4
PUP.Optional.PricePeep.A, C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.pricepeep00.pricepeep.net_0.localstorage, In Quarantäne, [34ae07d9dcaeaf875622c53d9f6417e9], 
PUP.Optional.PricePeep.A, C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.pricepeep00.pricepeep.net_0.localstorage-journal, In Quarantäne, [07db825e9beffc3a7bfd21e1fa09c838], 
PUP.Optional.BoostSaves.A, C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage, Löschen bei Neustart, [d012cc148703f14555e1c65035ced42c], 
PUP.Optional.BoostSaves.A, C:\Users\valeria\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage-journal, Löschen bei Neustart, [af3339a77b0f80b64aecdb3b0003c040], 

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)

ESET:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=5056889e52922a4ba8a5c4aaf62f6de3
# end=init
# utc_time=2015-07-12 09:47:46
# local_time=2015-07-12 11:47:46 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 24764
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=5056889e52922a4ba8a5c4aaf62f6de3
# end=updated
# utc_time=2015-07-12 09:54:54
# local_time=2015-07-12 11:54:54 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=5056889e52922a4ba8a5c4aaf62f6de3
# engine=24764
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-07-13 01:18:08
# local_time=2015-07-13 03:18:08 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 5209674 130931498 0 0
# scanned=308112
# found=11
# cleaned=0
# scan_time=12193
sh=14D8E98CFD3B8FAF3A751DAD6F06550742FC6245 ft=1 fh=889337184973dd3d vn="Win32/Adware.Yontoo.B Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll.vir"
sh=314F703F0F190BF70F0386509C10998D4E2BD10B ft=1 fh=2f9f46df1834d950 vn="Win32/Toolbar.Conduit.Y evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\valeria\AppData\Local\Conduit\BackgroundContainer\TBUpdaterLogic_1.0.0.1.dll.vir"
sh=D3CBDD7C6ED2C9D81DA4FCF9AF57CDD5D3711ED3 ft=1 fh=86dbe26399c3d0fa vn="Win32/Toolbar.Conduit.Y evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\valeria\AppData\Local\Conduit\BackgroundContainer\TBUpdaterLogic_1.0.0.2.dll.vir"
sh=0F0C1BCEB374E1C978711E5105111589F9A1204D ft=1 fh=1afdab46451361be vn="Variante von Win32/InstallCore.PL evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\valeria\Documents\uni\Bachelor\GPS Afrika\Malavida_Download_Manager.exe"
sh=45E04F462F413AE1DC77E48B9BE5F58AFBC41413 ft=1 fh=51906fb146ef9c23 vn="Win32/Toolbar.Conduit evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\valeria\Downloads\FreeYouTubeToMP3Converter.exe"
sh=3837DCC6FC0D2C7D2CD6765EE18175468E314815 ft=1 fh=404bf2cda126427a vn="Win32/Toolbar.Conduit evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\valeria\Downloads\FreeYouTubeToMP3Converter31126.exe"
sh=776032AD9BA5102AD9542A6E704A78ABF9D0E486 ft=1 fh=79ff9211011eaa5a vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\valeria\Downloads\OpenOffice - CHIP-Installer.exe"
sh=35AB767AA1DB1C1F4D2C233343781B7D2454EE99 ft=1 fh=bace4f5de3d2a675 vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\valeria\Downloads\Passbild Schablone - CHIP-Installer.exe"
sh=182FFCE9F185096BDEB9F857823134ACEAAAEB5A ft=1 fh=5bbe4aca56713bb8 vn="Win32/Adware.Bundlore Anwendung" ac=I fn="C:\Users\valeria\Downloads\setup.exe"
sh=87A2ECF7D6EB7006E1D5FEFE69EAAC5A27509413 ft=1 fh=f22b13565d3a56e4 vn="Win32/Toolbar.SearchSuite.W evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\valeria\Downloads\ViberSetup.exe"
sh=E376CCA31448BD17E219945B30E12AB148A9F0EB ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Iminent.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows\Installer\80b135.msi"

cosinus · 13.07.2015, 09:15

Zitat:

C:\Users\valeria\Downloads\OpenOffice - CHIP-Installer.exe
C:\Users\valeria\Downloads\Passbild Schablone - CHIP-Installer.exe

Lesen => CHIP-Installer - was ist das? - Anleitungen und http://www.trojaner-board.de/168364-...mpfehlung.html

FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\Users\valeria\Documents\uni\Bachelor\GPS Afrika\Malavida_Download_Manager.exe
C:\Users\valeria\Downloads\FreeYouTubeToMP3Converter.exe
C:\Users\valeria\Downloads\FreeYouTubeToMP3Converter31126.exe
C:\Users\valeria\Downloads\OpenOffice - CHIP-Installer.exe
C:\Users\valeria\Downloads\Passbild Schablone - CHIP-Installer.exe
C:\Users\valeria\Downloads\setup.exe
C:\Users\valeria\Downloads\ViberSetup.exe
C:\Windows\Installer\80b135.msi
EmptyTemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Apfeltasche · 13.07.2015, 09:36

Code:

ATTFilter

Fix result of Farbar Recovery Scan Tool (x64) Version:12-07-2015
Ran by valeria at 2015-07-13 10:20:26 Run:2
Running from C:\Users\valeria\Desktop
Loaded Profiles: valeria (Available Profiles: valeria)
Boot Mode: Normal
==============================================

fixlist content:
*****************
C:\Users\valeria\Documents\uni\Bachelor\GPS Afrika\Malavida_Download_Manager.exe
C:\Users\valeria\Downloads\FreeYouTubeToMP3Converter.exe
C:\Users\valeria\Downloads\FreeYouTubeToMP3Converter31126.exe
C:\Users\valeria\Downloads\OpenOffice - CHIP-Installer.exe
C:\Users\valeria\Downloads\Passbild Schablone - CHIP-Installer.exe
C:\Users\valeria\Downloads\setup.exe
C:\Users\valeria\Downloads\ViberSetup.exe
C:\Windows\Installer\80b135.msi
EmptyTemp:
*****************

C:\Users\valeria\Documents\uni\Bachelor\GPS Afrika\Malavida_Download_Manager.exe => moved successfully.
C:\Users\valeria\Downloads\FreeYouTubeToMP3Converter.exe => moved successfully.
C:\Users\valeria\Downloads\FreeYouTubeToMP3Converter31126.exe => moved successfully.
C:\Users\valeria\Downloads\OpenOffice - CHIP-Installer.exe => moved successfully.
C:\Users\valeria\Downloads\Passbild Schablone - CHIP-Installer.exe => moved successfully.
C:\Users\valeria\Downloads\setup.exe => moved successfully.
C:\Users\valeria\Downloads\ViberSetup.exe => moved successfully.
C:\Windows\Installer\80b135.msi => moved successfully.
EmptyTemp: => 162.8 MB temporary data Removed.


The system needed a reboot.. 

==== End of Fixlog 10:20:53 ====

Danke für die Info. Oh man, ist ja wirklich super und ich klicke auf sowas total naiv drauf... hab jetzt immer Razor Web als Werbung

cosinus · 13.07.2015, 09:39

Zitat:

hab jetzt immer Razor Web als Werbung

Was genau heißt das? Jetzt immer? Seit wann und in welchem Browser?

Apfeltasche · 13.07.2015, 09:47

Ich benutze Google Chrome. und seit ein paar Tagen ist mit aufgefallen, dass des öfteren rechts oben eine graue Ecke ist, in der "Razor Web" steht.
Zum Beispiel wenn ich hier diese Seite lade und meinen Benutzernamen eingeben möchte, öffnet sich sobald ich darauf klicke eine zweite Seite. Es ist manchmal "RazorWeb" oder "theadgateway" oder "rvfrm".. von dort werde ich dann weitergeleitet und es kommt dann Werbung, jetzt gerade von Programmen mit denen ich den PC "bereinigen" soll.

cosinus · 13.07.2015, 09:55

Chrome komplett deinstallieren, keine Daten behalten, anschließend neu installieren über das Setup direkt von Google.

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

Google Chrome
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Apfeltasche · 13.07.2015, 10:22

Alles klar! Ich hab das jetzt so gemacht, und die Werbung kommt nicht mehr juchuuu

Tausend Dank! Ich hoffe, dass jetzt alles weg ist und bin unglaublich dankbar für die schnelle kompetente Hilfe!
Kann ich noch fragen, ob du mir einen anderen Virenschutz als Microsoft Security Essentials empfehlen kannst ?

Liebe Grüße, Valeria

Windows 7: Chrome öffnet automatisch Tabs mit Werbung

Log-Analyse und Auswertung: Windows 7: Chrome öffnet automatisch Tabs mit Werbung