Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
?Spurensicherung?

?Spurensicherung?


Plagegeister aller Art und deren Bekämpfung: ?Spurensicherung?

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 2 von 2 1 2
Alt 27.11.2015, 00:05   #16
schrauber
/// the machine
/// TB-Ausbilder
 
?Spurensicherung? - Standard

?Spurensicherung?


Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 30.11.2015, 20:29   #17
Mike B
 
?Spurensicherung? - Standard

?Spurensicherung?


Hallo schrauber

Die letzten Tage war ich nicht bei mir zu Hause und konnte mich deshalb leider nicht zurück melden. Entschuldigung! Morgen werde ich mich wieder rückmelden und deine Schritte befolgen, bin derzeit etwas müde.

schrauber, bist du so lieb und könntest du mir bitte mitteilen, ob du zwischenzeitlich herausfinden konntest, was es mit den seltsamen Dingen, die mir damals an meinem PC aufgefallen waren, auf sich hatte oder haben könnte, welches mich bis heute nicht loslässt?

Relevant ist der Zeitraum zwischen Mitte August und Mitte September.

Vielen lieben Dank und einen guten Start in die neue Woche

Hallo schrauber

Hier die gewünschten Logfiles:

Malwarebytes Anti-Malware mbam.txt

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 30.11.2015
Suchlaufzeit: 14:18
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.11.30.02
Rootkit-Datenbank: v2015.11.26.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Sirius

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 414744
Abgelaufene Zeit: 31 Min., 29 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 5
PUP.Optional.QuickStart, C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");), Ersetzt,[9595552f2962bd7997d7dfb38381a35d]
PUP.Optional.DefaultNewTab, C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\prefs.js, Gut: (), Schlecht: (default_newtabff@gmail.com), Ersetzt,[65c5bdc75d2e68cedfde0198ee1652ae]
PUP.Optional.DefaultProtectedSearch, C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\prefs.js, Gut: (), Schlecht: (defsearchp@gmail.com), Ersetzt,[52d8f78d97f4f6400cb263367b897f81]
PUP.Optional.SearchEngine, C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\prefs.js, Gut: (), Schlecht: (searchengine@gmail.com), Ersetzt,[b1797d07e6a538fecbfa574234d04bb5]
PUP.Optional.SweetSearch, C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\prefs.js, Gut: (), Schlecht: (sweetsearch@gmail.com), Ersetzt,[a6844b39e6a58caa5f684a4fd62ee21e]

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
AdwCleaner

Code:
ATTFilter
# AdwCleaner v5.022 - Bericht erstellt am 30/11/2015 um 15:02:38
# Aktualisiert am 22/11/2015 von Xplode
# Datenbank : 2015-11-29.2 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Sirius - SIRIUS-PC
# Gestartet von : C:\Users\Sirius\Downloads\AdwCleaner_5.022.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

[-] Ordner Gelöscht : C:\Program Files (x86)\Common Files\ParetoLogic
[-] Ordner Gelöscht : C:\ProgramData\ParetoLogic
[-] Ordner Gelöscht : C:\Users\Sirius\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd
[-] Ordner Gelöscht : C:\Users\Sirius\AppData\Roaming\DriverCure
[-] Ordner Gelöscht : C:\Users\Sirius\AppData\Roaming\ParetoLogic
[-] Ordner Gelöscht : C:\Users\Sirius\AppData\Roaming\AdvertismentImages

***** [ Dateien ] *****

[-] Datei Gelöscht : C:\Users\Sirius\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
[-] Datei Gelöscht : C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\user.js

***** [ DLLs ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****

[-] Aufgabenplanung Gelöscht : paretologic registration3
[-] Aufgabenplanung Gelöscht : paretologic update version3
[-] Aufgabenplanung Gelöscht : ParetoLogic Update Version3 Startup Task

***** [ Registrierungsdatenbank ] *****

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\uus3url-pl
[-] Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{b64d9b05-48e1-4ceb-bf58-e0643994e900}]
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}]
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{1F91A9A1-01BA-4C81-863D-3BA0751E1419}]
[-] Schlüssel Gelöscht : HKCU\Software\OCS
[-] Schlüssel Gelöscht : HKCU\Software\ParetoLogic
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\ParetoLogic

***** [ Internetbrowser ] *****

[-] [C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\prefs.js] [Preference] Gelöscht : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
[-] [C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.quick_start.enable_search1", false);
[-] [C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
[-] [C:\Users\Sirius\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : fcfenmboojpjinhpgggodefccipikbpd

*************************

:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [3179 Bytes] ##########
Junkware Removal Tool JRT.txt

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.1 (11.24.2015)
Operating System: Windows 7 Home Premium x64 
Ran by Sirius (Administrator) on 30.11.2015 at 15:13:03.44
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 662 

Successfully deleted: C:\ProgramData\dboplkgggkabmoefohahkpaioheocjlb (Folder) 
Successfully deleted: C:\ProgramData\iobit\driver booster (Folder) 
Successfully deleted: C:\ProgramData\productdata (Folder) 
Successfully deleted: C:\ProgramData\Start Menu\Programs\tuneup utilities 2014 (Folder) 
Successfully deleted: C:\ProgramData\Start Menu\Programs\tuneup utilities 2014.lnk (Shortcut) 
Successfully deleted: C:\Users\Sirius\AppData\Local\{00F6811E-656D-4D46-AC46-56509BACC7C8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{0228DD4E-5738-4748-94D4-D7A27486B560} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{02509BEA-3C72-47F3-B5CE-9B556B4648E4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{025AF11A-7D31-41D8-B01D-CB9880831766} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{02A38CC7-DD22-48C0-97C5-8EFE5BE9D3A6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{03F749EC-7B03-43F7-9AF1-141E61110A2E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{040ECC4E-A2C3-4498-955B-E2D77DAD037A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{04235B1D-4D46-4B36-8DFA-B337E97E939F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{048D8ED3-1A40-40CE-956D-735087C2928B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{04C30D01-C3C3-4C11-ADB2-E3EBF8098BE0} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{04DD271A-809F-4C83-910A-B4453663401B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{053A1BEB-C631-43AF-93B0-29174D8556AE} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{055DA093-423F-41B6-A988-12370936B14C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{0598DED1-6A32-4E15-97B0-24528441647F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{05E2D4BC-7AB9-4EE4-947C-DFF1A90DDFE5} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{06509152-B5D6-4CD8-A3C5-DE35F8D3862B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{06859009-1401-4564-88F9-ACB6FDA35ADD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{070995DF-6CB2-4EB9-B1DE-77AB8A670278} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{075204CD-508B-44F8-95C7-2E5B2306DB85} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{07FF1420-607B-418C-9A36-66B703C1861B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{082DD540-8C8E-4630-8F50-2A4D6697B0E4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{085BEA6F-23A2-48F3-A6AF-6CE9C77501C4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{086FDA56-2A5D-4E37-B96C-058453DE23E5} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{08B9D580-3A7C-484A-9D74-BA3A61263D0B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{08E9593A-1F38-4135-BBA4-5A0B8CCCA590} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{090324DC-AE79-48CC-861E-E8E14B5FF0D6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{0991A7BC-299D-4016-984A-11B312CF9542} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{0A0484B3-5AD1-4697-99EB-8F5D3F08AE7E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{0A550588-57D4-44A3-AA15-762B187CCB2F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{0B86362A-9B81-4265-A1C8-B84CA54A5994} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{0C239E42-DF5A-4B44-8AB3-03FD21ED5058} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{0C8C4F38-125A-4422-A339-9EFB299DC5EC} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{0CB72A32-3355-4673-B2AE-88DC2A53C654} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{0D49C853-5FB3-4A25-ABBA-2F369B2DDE0B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{0DAE2E2C-2A92-4E8B-81C8-354C67741326} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{0E630302-843F-4BD7-BBB8-55FD2A5728C7} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{0F9A04F6-4E10-4BD4-B55C-8C690972A4EA} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{0FB782EC-2ECB-4755-9A80-205AB1D7A58C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{100DDDCE-1A3A-411D-BBA3-0AF81F53FFC3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{10466BD9-54D1-4584-87FF-7E492F5305F8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{104DF64D-A557-458A-A833-E37F81573344} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{105CCF0D-8AE8-4122-88B7-C46FE3EB8E20} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{10B81494-2CEC-42C7-A351-873BA7C84AF4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1146E444-5090-4AC9-B675-C2965D0395D3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{11F69CAD-A055-43F9-B552-11C774667729} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1215E8B0-9497-4062-A0EF-082F2F048539} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{121DCB27-CDE1-497D-AB5D-840296375030} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1262C1F2-8EE5-4477-9304-0CC1AECDB03A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{12EF9BFD-E854-479F-B33E-C9FE800B12B6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{13131133-D181-4CD9-81FF-A42CDC3C29D9} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{141A335C-E075-4D1F-8A76-8183CED8FC1F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{14BE75C5-19FD-416E-9522-17E53C70AD04} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{14D25C1C-B800-4857-8998-78BFF16760D8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{157D79DC-FA2B-41F6-AD4F-40008085170C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{15C426B3-9C39-49DB-8221-822FDF926161} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{15CF8AAA-38E0-48E4-A736-0D370CB2FB61} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{15D197ED-BC94-45FE-8F6D-254055295BC5} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{16896E86-64FF-496C-8128-A41DD568D160} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{16939998-CBEC-48A2-890F-758221770855} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{16E04CF9-6A7F-4402-8938-31E239840278} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1716763D-A4A7-413B-BFF5-53DF0D28E47A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{178BA426-95AC-4831-BC84-55CBD372D9B2} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{189065F9-0789-46A5-B6DC-AF69B69EF7D3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{19439C7D-071A-4D68-A543-2053DA51136C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{19E80B3A-C974-405C-98DD-12EE0B5B9BFD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1A039FCE-7925-4638-8418-19E037E1C766} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1ABEA02A-0C92-4930-ACF7-9B9D3D6BE70B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1ABEE107-B99E-4F1A-B202-506A75B2C312} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1AEF7842-2064-4135-AAEB-9C4B746DCAF7} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1B4DFA09-3B63-420F-AE7A-967AA5FE3EB4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1B86D80A-22E3-4466-9FE9-3C4901B86E71} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1BB79DC4-1140-4991-A958-57014E5D496F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1BB871C0-4FA8-4907-85A5-4AD1F127E436} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1C479B54-3E69-4F7A-803D-703884F7A788} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1CD417E0-DABC-4A96-95BB-48970F28C973} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1D3A39F3-D01C-409E-B896-4B9399B28609} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1D7821B1-02BA-42F1-A599-C5882CB36373} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1DFE4A14-AA5F-439D-A599-1F2D6FF92C09} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1E171C10-31CC-4F77-8016-BF3244B37DB8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1E189477-8CFC-4B9C-AE49-F628D7C6D0E9} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1E22BC73-F04F-45C8-8305-86D43AE2169C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1E84411D-6301-4F9E-B363-2030CF4D7B50} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1F337C2D-23D3-43BB-A5F3-6ABFA6A27C92} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1F5F0096-773F-4591-9847-9F31E6F8629E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1FAC9A0B-32CE-46F0-A5F7-79EA03A8705E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{1FC41003-5583-4C96-946E-272EE96870C8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{20998707-CE88-4628-9924-8A190DFD981A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{20F18A52-F2B2-414D-99CD-F52500E47B58} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{21091679-157C-4E92-A65A-C3FFED931BE7} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{216435C0-4422-4618-9B25-449315DEE93C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{22502AAB-6C76-4B38-B422-9B3F4153441B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2307EF00-A64A-4C05-A2B4-BBD182699B84} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{235C630E-23BA-4A72-9E16-961DE50F4789} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{240161AB-63D0-42A5-9713-B275897BA98D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{244DBB6F-8A5A-4079-83B9-F06D618AA50B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{24A28C53-48FE-4516-87FD-201BD63EDF40} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{24E2B399-10D0-40A2-A56B-38B392900AEF} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{25190A43-32A5-42F4-9BE1-E195B6B5BCD1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{269C99E9-2FFA-47DD-9E42-58BC11B4DC66} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{26A52617-7EF4-4694-AF16-97A88FDD59FD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{26B04ED9-9F68-487F-9CFA-B1993EF4269D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{26F3FEE9-C461-4C03-8310-790A1EC6669D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{271F22BF-E593-44BF-950B-FB2466D92D79} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{27ADFD3F-F48F-4D16-B15A-9E2CCC396993} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{281D45E9-DCFE-4A4B-8E18-0773C2ED6794} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{28391249-E75A-4EA9-B286-6BF93753CD4D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{288A1813-8AB4-417D-AD1D-6510013AB968} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{28ADA775-416D-4094-BBE6-1815E10F577A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2A86A6ED-7919-4E73-AEC4-EABC73E09BB6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2AB865B2-B88D-4283-ABA6-CA459DFC9DBB} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2B40B60C-1907-4B48-883C-CE594C2C34AC} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2C7341FE-DA40-4B5F-B977-B47F99592406} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2C8EA9F2-AF26-48AC-A0A9-456DD1D5B84E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2DD40019-8367-4B9D-AF0F-72391DBD1D38} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2E18E21D-5665-4BBF-A9AF-D3C00DF10B8C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2E1C8BF0-39F8-4783-A5DE-58ED5D954064} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2E34B1C3-BF85-4B90-9C45-965F2F1368F4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2E42641C-767E-4864-8092-A06E7FFA57B6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2E647FDF-05FD-420F-AF65-1C8DB1C70455} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2E8BE3A4-37C6-4F01-94B5-F9FFFB650075} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2EB66C63-9489-4821-873C-E61A9BB17D0A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2ECC24ED-8059-4F9F-93BB-4D7504DEF67E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2EF6B051-1D1E-4808-86B6-BB91DDC15EB9} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2F91A54F-A128-411F-9EAE-CBBE4A07AF65} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{2FCF5066-7D52-4828-B0E7-C8475AA54C20} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{3080872F-4BED-40E8-8759-EFB2E61F0A99} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{3098DFFB-2498-4F9B-AC9F-15DBE10A26B5} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{30C6E821-D8CB-439A-B10A-4B71758C0EDD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{30EFE6FB-2FFE-462E-BE5E-E55237272745} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{327AAA35-DC8D-4E18-B6ED-6A7780BD7743} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{340915B7-7E37-473A-85EB-7510079BB32C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{34D28240-DAAD-4669-9DFF-EF267B54EA81} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{34F6FDA7-19A8-4358-8234-CBDAE2040E4A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{366C29A0-99F7-4052-82CC-22D9CFC31CC1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{375CF1E4-90B2-4355-85AD-4904384AB6CD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{377E28FD-C8E8-4201-8DB6-1E9A5A0582F2} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{37A36C0F-8A01-47E4-B4FD-C957AF15E0A4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{37D00B3C-A534-404E-BD52-E18A3C730627} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{380BE7B7-13A2-4A67-97B6-941C7B04ABFC} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{38D21E87-BDEF-4260-9354-5BD60D278D93} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{38FD7BCE-0A53-45CB-A4ED-E8E43DE89A0B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{399B4A7C-F84B-43B1-87EF-A3751F3D284B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{3AC437E5-F244-449E-A154-4EA866D28B3F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{3C5650D6-5E8B-4993-8BF9-073447175FCA} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{3CD21510-EE43-4F78-86C3-D2170DE75291} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{3DB0DFE8-1F2E-4CD2-92B6-6D5BA71513E5} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{3E1D2A14-A9B6-4A83-964A-2CC3A49C8959} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{3EB99706-485C-425F-8876-DFF70A77659F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{3FE69ED4-F393-4E25-8C46-40E66D638811} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{42BC619F-5754-4DD5-95C7-163C2F9CD837} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{42DAC7F6-9D34-45F0-921F-46BEFD95329B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{44650252-1CD5-48BC-8005-925DB0D30C08} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4589C5C0-E04C-4FF4-98A6-C83EA8FF3C46} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4606C3D1-7925-45FC-A63A-0C3BAA706BAE} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{46189104-E0B5-444D-A822-F19B7C5F389B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{46D6576A-1F35-49FA-B201-306892FA5015} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4737C669-2E17-4BCF-ACD6-F1A845502C85} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{473C519F-F920-43ED-9657-23A1369EB342} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{474125C7-2120-487A-AC97-6D2CC7B059D2} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{47806420-8233-4264-BA5A-B9B1AC797E5A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4787AF5F-2457-4A67-B702-4936017D8909} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{47CF9358-6EC6-4AC3-8E2A-5EA2B98D7C96} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{485F593F-FF40-42C7-98CC-D55C8842AE6A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{48956028-4DEC-4031-80F9-8F45EBC51276} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{48A3FB9D-F203-4808-815C-54B742ADDF38} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{48D30023-1A12-4EED-BF14-B0ADEB2579CC} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4906CBE2-EE44-4ACC-BE04-EF14C5C42B37} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{49C49E03-0938-470E-A94B-E42E651106A8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4A0AA434-089F-4880-B23E-37F3F30316C0} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4A2FC2C7-BE64-4F21-861B-0A13891209A3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4B98A267-6054-49EE-8A93-32FCD2C511C8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4C0FF08E-9257-4C60-A6DF-CA393E652602} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4C37C5F4-DC96-449D-97AB-4208C6021271} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4C5A2C68-88FA-401A-A998-8E10CCFA20D0} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4D2A272C-9713-44D8-88E4-CCD9697FC36B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4D744EB4-C427-49CC-981F-D464A8EA04F3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4DFFB560-5B71-4CEE-BE26-8CA8313B1C37} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4E77D5A3-9A6A-4924-A338-0A76B975ED2D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4E8C5437-A565-475D-BDC6-D441CEE12E3A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4E9F4889-0A7F-40BC-AF3C-B7612B96DFEE} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4EB7735E-78EC-43CE-80EA-2496561CB911} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4ECA7144-8798-4C04-8BED-0C0168263488} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4F422ABF-E1DE-48FD-B293-8BEEEE13DAB9} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{4FD26D07-FEB8-4293-9EB4-7047A2875E6E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5001BE77-E6BA-4380-B0B3-73A50192A4F1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{503F8549-DFCA-45CA-B3AE-0FB268436A5F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{506C7C1B-CC33-4488-A11B-F98A4A660818} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{507547D9-0607-486A-A22D-8BE4A9CD4C59} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{507C9934-5E2C-4FB0-AA3B-DA4273C72B64} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{50C4B225-CADD-4CEB-9792-790A4E03F8C6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5112F077-5EBD-422F-B645-5F8532FCE75D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5113BF8B-0B94-47C4-AB6B-1BCF1D122183} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5126E9C8-0C09-491D-BCBF-00DDD6B05C1F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{52B9DE67-EC44-4590-B26A-D1BE511796FF} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{538A0327-035B-49CC-BDC1-CD94CFA2EF3F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{53F6F641-C7AB-4AAE-9BA5-925AC9171C4A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{53F95510-D138-4F77-85B3-202AEC59F8C0} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5423A7F9-5ED5-4405-9518-D7F14599A316} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5573619A-2034-4FD5-B9F8-740AB18D33C4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{56011234-F58B-4D56-8CE0-8DFA78F50322} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{561F95BC-3273-4689-9948-3FB1865C8A58} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5635BF33-A929-49ED-917C-83D47E2030C4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5849BE6C-3C9B-40AF-B585-6105841528C3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{58ED60FB-6E3E-4A80-885B-4E060FDAB8DD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{58F901D4-DEE1-4558-A86D-ECD706AEAD17} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{59713A23-9018-4A9C-9730-1B11BB1FE890} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{598658BA-4AE6-400D-958F-930F534786E5} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5A4573E9-C85A-4E0C-9E49-2CF511C06B4F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5AAB0226-5F50-4AD0-B31F-4CB17D4929C8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5AFEFDEB-4DDB-4331-B821-156274DA9A88} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5B38D2AE-4289-4DFD-AA03-3BD563883918} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5B477708-B875-4ECE-858E-D7644F73A3E3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5BB4E8AB-20CA-4425-B969-549E107FB127} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5BFA0A3C-16FA-4DF5-9D61-5D9D25CF94DA} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5C016D4E-30FE-4530-BF33-95ECA5267235} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5C264F04-8247-40CB-9346-A8887A697C37} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5C31DB53-4B0E-4DF1-9C3E-A899F8A67D08} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5C526159-BF0B-4C1F-915D-FF7099D0E209} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5C560AC9-B839-47DB-A8CC-4A2CE439EB13} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5C9115EA-4BDE-45F8-8106-6B2F5CD93FB0} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5D6891B4-B382-40C4-BD90-A1EE57CF7656} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5D8589D7-EF01-493F-97BE-6BBC4CFC9B32} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{5F31076C-DF05-4BA9-BE6C-ECA2EA2206A8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{60EF7CCC-33DB-487B-BCD2-5B5A32E6FBA7} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{60F981E6-8DF4-4700-8EE7-A7417B86074C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{611C966A-6C5E-466D-814E-4871EE77CA40} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{61418350-DFA4-4C19-B85E-D171950C27C7} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{61EF139A-15B8-43EE-B7ED-A492B898D24A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{61FFB357-364D-4F2E-8779-241A6306DB86} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{62A6BB94-6A59-4908-818F-401F31B0EAC8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{62B5C55F-2327-41BF-BE76-FBAFB47936CA} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{63394776-9A01-4029-8215-6A325A0DD065} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{636A91C5-8480-4B88-AE88-E95BA96D5E76} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{65E2B173-FF4E-4761-8D0F-424F62E2EAC4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{66E09E3A-35E1-40EA-9BD6-98FCE7C1B3D6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{676996F8-225F-4CF8-8F9C-C7982D6CCD52} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{67839C7B-6361-4009-8A03-8D07231FA917} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{67A070C2-61CA-45B9-A2DC-391BE9DC5D55} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{68DA3890-6300-4065-9D3F-A090E100021B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{69494028-72C1-4051-8959-4C9082AE7861} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6967811F-A736-435F-AEFA-CC5705C8269F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{69D17BB7-9FDE-4240-BB1C-D92B738704B5} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6A56D76B-DA82-4949-8F4C-F824C9DF6D23} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6AA85F68-CE15-4D1E-BB6D-86D50AEE9DB6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6AE04B4B-74A4-43C1-9B57-3B19402F0269} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6B12F705-95E0-4E92-9A71-FEC2E56F9848} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6B9141FA-A6F6-4442-9217-4E97547161F1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6BB9BD1A-DF34-4BA9-8BA4-E4D8B16F9CD1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6BBC1BAB-4A9F-4537-974C-B90466675431} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6BD3727F-7149-4338-B1B3-0509481D7EC4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6CF41DD1-2679-4655-9349-A23DD71CE584} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6D746425-3532-4322-A378-B5FC71274198} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6E1716E1-0501-4EBC-8198-3B76AE68C82C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6E7E7230-385C-42E5-939D-0C36BAEC39F6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6E7E8E00-C18C-4B3D-8A10-C74AFC326986} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6F55EA33-2ADE-4A0B-9AFB-CFCA1D636AB1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6F738A36-65C4-432B-825F-8BF9B0FCE15F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6FC2351B-B3AA-407D-BC10-0CDBBA2F13C7} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{6FCB0C05-632E-4C42-A137-99ABAC39A0B5} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{70689638-F5C4-43B7-9DC0-1134D8291F84} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{706D1733-4A87-417F-A172-4402EE14170D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{70774D6B-35AD-4732-B9B6-83143F16F8F8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{70964196-2CE6-4FD9-A733-5C04E19D0505} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{710B28FC-496E-49CF-B9C9-DE7B21423543} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7127C168-A754-4548-9019-C678E306573C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{713D017F-9D20-4366-8318-8BF27101BE8F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{71C0B22A-21CC-4BA2-BB50-9EDD86B30123} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{72A11DF2-5EE6-451D-A6DC-D1D91AB7C2E8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{72BFA141-A5BF-4B23-AFC6-730BF3C7D92E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{72FA13B1-53E6-4DE2-A73E-86A9A52A7924} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{73D75FDE-98D5-404E-9807-84B59A8168ED} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{73DB5241-ECCB-4297-9AAF-0D699451D578} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{73F1B13A-391F-480C-90BC-8A75BB958E17} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{74602C4F-9574-43C1-AFDB-0CF689233D67} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{74EC1D5C-89EC-4A8D-A8EE-E60BC59DE599} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{757D8790-57DA-4B24-923C-32333BFB2E81} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{75B6E481-7130-49C4-A194-70C3FC8474D6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{75C6A034-4DF7-4E23-8B4A-57D05AC3F171} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7606E90D-F78E-44DA-AF72-8C6494A1A9F8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{76898F7D-BC26-4AB9-AE7F-AD7AC63C2934} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{76A9B5A3-7E10-4285-B4B5-AD12AC7D1A37} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{77057B28-1A90-4FD9-859E-0A5D33FCC99E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{774BED1F-8778-4D85-B1B9-A92F08412671} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{77764334-4657-40A1-B502-98D26152FFDA} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{777F0917-EAFD-487A-A118-DB746527316F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{77C9C32F-3D3D-4FC9-9A42-AE1B463C935A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{77CC04E0-A99B-4B23-ADFE-BBCD33D29214} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{78B552F4-355C-4400-866A-22ED7E46235E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{78C01595-E686-4A44-A3C3-EFEAF5C49A5F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{78EE2A6D-6D43-425C-98CA-EC786BFAE088} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{790879DD-5F6F-4A80-AA96-E15E889A1F3C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{79228C6C-9768-478C-8311-88CB5E932002} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7964B7AA-09E1-44EB-9885-751E1B2FC8ED} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7993680E-4E95-4460-B1E1-B4A4BEF27763} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7AA28BDF-2118-4E8C-A93E-74E77632C476} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7B6FB4FF-95DD-4D05-AA59-60656FE31F67} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7B7C0C83-9FCB-4C26-9496-4FCDF3303C86} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7B8ED504-DBA9-4889-8A4B-95DC36B52896} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7BE49FF6-A584-4718-B232-06A61D3FAFE7} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7C24890C-4F62-44C0-B80D-23E679013FA9} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7C3EF17F-E574-4728-9F23-C25384216515} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7CA8BCFD-2B6A-443C-9643-F45D6F2DBB68} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7CD10CA2-51FA-4EE4-B322-AB99F97782B9} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7CF18C02-829F-4DAB-B3EE-19BCF08EE646} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7D52F78D-2AF6-475E-9304-696042A7DB79} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7DB8924C-2183-489E-BEAF-039171DCAB03} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7ECE47FE-ADF3-4FCB-9800-E8350378DD53} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7F5386DE-E99A-4B27-9867-F9E675395AA6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{7FE3B729-502F-4DA9-9AAB-7FACD99DCA9E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8089D3A0-1592-4D0A-B03C-0D66712E9E9E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8117F37F-C4A3-4E8C-AD05-5F1C26F7E005} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{81D76219-F905-4DCE-8838-BAD7346EC939} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{81E29B3D-8869-467B-A2DD-0BEE8447EE4B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{823A1FFF-2DE0-43F4-B8B5-FD9EC46BAB0F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{823A4636-4C35-404B-AFC3-D5EB80C5C879} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{829F33B2-CEE1-4284-9ADF-7EF49173A103} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{82A2FB03-AAD2-4531-95F8-BED4AFAB25C9} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{835BE151-CAD5-4C02-82CD-8AC0368E698B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{838282C3-36F3-4A4C-A63B-73A5C72C3A20} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{83DC46D3-7CC0-48BF-9769-206FC15192AE} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{83E5EB7D-781D-4105-8F10-52AB9923ACF4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{842C7CBC-25E0-4AEF-B57E-C60D3E1B1F7E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{84F8A9D9-7831-47EB-9EAC-DA987A2ED231} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{855DC52D-1967-4870-9A54-5DAEAE3EB274} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{857B2272-05CA-46A6-92B1-7F1A56F43D63} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{858ED3E2-A432-472F-A8C0-8450DCF23994} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{85F78AA6-68A6-4337-9215-2E02EEB40966} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{86326843-0D58-4F33-B676-DE70E6A395AC} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{86772A2A-46DA-47F7-927B-E5FD13C914D1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{867CB58A-FDB7-4D66-AAB5-58CA2C480E89} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{869F97B5-CA43-4BC7-8B74-F098851A5785} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{87818366-99E3-4344-AFC7-CC52FF77CD45} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{87ADFC69-EA42-4EB2-97AD-E0342EF6F081} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{87E1E94E-38B6-4FF8-A1EC-58A7BCE389DF} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8A118AF1-BE96-49C4-A0B3-0472BF874A89} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8A434CA5-07B9-4DD2-BC26-9979074F166D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8ABA987E-B922-431C-9911-C1EAEEEAFF71} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8CF4673A-4D59-4935-8E93-30A5E31FB4F2} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8D1D3C36-D4B8-4827-8E40-90660D3FC609} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8D4EE70E-CB59-4A50-A90B-E66B836E3087} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8D9FC39A-0437-474E-9DE0-10ACCFD759E5} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8DE7AEB4-868B-4C4F-9D0F-98D46803AF40} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8DF41C45-F547-4ED5-AF83-F049AD89D153} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8E2A6559-DC80-44B9-8D46-3C184989BBEE} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8E309322-3EC4-46C9-AA97-980FC4D00F9B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8E381638-B074-424E-BD67-D87549D7EFFD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8E6BE0D6-0156-459B-B9E2-C28260D83CEF} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8EC59A0B-4DFD-43BE-9486-B674FCE083B9} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8ED4F04E-D417-4C33-A6CF-FA7A4E55DCF2} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{8FF0D134-053A-440A-A625-8BD271F60DD4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9069F743-2C21-4333-8318-27D757DDD8D8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{90A7DB7C-D06E-4A46-8739-07CE90073D17} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{90DF4758-7E12-4177-B62F-5A0B388934EA} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{91C56CEB-002D-48C2-9713-BE91F1B68B20} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{91E4BB8B-C0C2-453D-8781-3962C637C082} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{91EE6373-D860-4868-BA1C-1AB095884184} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{92116D1B-F37C-4EAC-9A5B-EB79B38415BD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{92250444-FEF7-46DC-9917-A1BCDD6F1FBE} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{92F296F1-71C8-4DF8-81A0-97F2E9C28144} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{93F59EC1-BD1D-43E4-9C64-AD5F2E348D1C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9411970D-FE3B-4A8F-B98E-8F1E0727A517} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{943B6510-427D-47FF-9E59-563880594CC8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{946CA8A7-F30F-4D84-8604-A121040504A8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{94A1BE96-4DB0-4CCB-9C06-C43A66E8334C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{94B663F1-46B6-4799-B5C3-02212451349A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{95A4D713-83DA-4225-9C81-37137D4A3E98} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{95BF1597-24A9-4478-92BD-C0A0C9615D6D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{960651E4-3A38-494A-B34D-2EB073FC1646} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{96718FED-2933-4745-A12A-3B05E5E85073} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{96D28188-BE73-47DD-87AE-9EC66520DCBD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{97369863-ECF1-4950-86A3-97AABE8F876A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{97B28F79-2998-44B9-8744-8A52399884B8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9814BCB0-B640-4253-B7C7-867004FCACCB} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{98D4B7AC-AD6E-4F3A-A411-3CDD96F27699} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{99131B2C-C5E3-4DC1-A926-A29FD6A645E0} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9A8ECCA3-5D07-41EA-BF18-F5E8579D8FB4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9ABCAA6C-FBDF-4CAD-8B8D-023D6659F687} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9B20E2B0-A1E0-4B63-89E8-E2B44750FB9E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9B8E020D-7B03-4EA1-A3FD-0A119173622E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9BF7BC2A-CEDC-48F6-A0F3-8608446C255B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9C42943A-74BF-4FC0-9BC1-370B85C4C274} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9C705178-5B05-4F00-8F74-842502055BB2} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9D195AD1-4954-4A51-9B60-414D18491288} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9DF3A9EE-387A-4426-91C8-8E90E71FC167} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9E89A826-6261-42ED-AD2D-089A9F7357F9} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9F3AD34C-DBA9-4FBB-A7C7-3E41E52983C6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{9F630629-1055-4021-A904-6008F6FAEA2C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A015A68A-E102-45E0-90B7-7AAD40E51DAE} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A0166447-00CA-4315-A065-DD31866E7B33} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A08D026B-3AE8-4856-A32C-6C214BFCE13A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A1F0893D-3BFB-4B29-B385-2BEF6DBE8432} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A2752E06-5B67-4859-9A64-ED44075DD80B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A2BF2815-3B43-49FD-BD4C-2A270523F1FE} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A36AE63F-FA0A-442C-81E3-51CCC61AA197} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A3B24555-FAEC-49D1-A4FD-767D455A30C5} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A452040C-846A-4F5E-82F7-F97AF4F8380B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A478BD67-76AB-4E7F-B960-D3B4C5C0210F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A4CA828F-0D52-438A-8BBA-BDCD10A24090} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A5B954AB-0C49-43EB-B62D-293D3E5A454B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A5C82073-999A-4AE0-9200-51CFDAF4B2F8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A6511F43-C260-4D2D-8BC0-364343681B31} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A671616B-96D0-4BAC-9E23-CA9773338F9E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A6B304DC-3C2A-4091-8540-ED564FABB398} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A7EB2313-F24C-464C-A7BC-C91394E801B7} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A830D216-986D-40A1-8CEB-3155A82E09C0} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A8C49684-0BA3-4856-9D5E-A285F4EC984E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A8DC08F3-96FD-44E4-8B12-64875DF72BEA} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A933FEE8-67B7-4569-A83B-0EED075F39DD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A937163E-8292-41BA-AEDB-866FA7A84E62} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A9B3E34E-92A4-42E6-9C95-B79C8F391E84} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{A9DA7807-8D43-4302-AB89-4D94368117F8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AA343A88-50EA-4A80-9080-38982796F293} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AAC63356-20F2-4414-BA2A-3A093B1DBC16} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AAC71BE6-5CB4-45F9-90C1-A9DC4819B495} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AC144BB2-1BA8-4C73-B1A7-67E6150FB499} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AC25F7D1-23C7-4863-8FE4-E4439A12F2F3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AC34E9DE-E1F0-4C7D-B49B-53FF134F4820} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AC7A8055-D67B-40BF-9E21-ABD6B94ED0A1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AD557157-755B-4C8E-9734-B7488703E2E3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AD61EBDF-44FC-422B-8E08-55CDB126200E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AD6B0122-52B6-4E69-A409-B37C2FDB2D20} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AE32D03F-6F39-47E0-9C0B-BFE3EA3BF004} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AE69DB37-DA0B-4162-A656-8A5586C30141} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AE8D4610-1185-41F3-8C5D-6F22A3D8C304} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AE9246B8-D4F4-4CEB-9B1F-E9EDDEC4416E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AE9FB937-3C45-4B67-90C5-56BD3348EB33} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AEB90CA3-082A-4518-BF4E-84CA08E01441} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AF14226E-E6B8-46AF-9172-088448B2C9BF} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{AF475340-B5F5-4F45-82B1-16195972E069} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B0FE0848-CB7F-49B0-BD13-71D52A841309} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B136DE57-C7B0-4B17-81DB-9AC2FE779193} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B1C9340B-21B1-4452-B6F4-E7F3B051EAA1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B1F7A028-06A4-4160-9939-3B329A86A7BB} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B1FFDF77-53EA-4C44-9DBD-DF87AF3ABB1F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B275DD37-D7DD-4268-92D0-3F543D80BE35} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B28819F4-6304-4777-96FD-DC0236719FFC} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B2928E76-419D-476C-AFF3-0E701B2C1179} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B2CF2B1C-8DFC-4DE3-BB5D-858AB2253286} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B3764C71-495A-40B1-8084-818209D87A70} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B38F1C28-71CE-4ED8-98CB-D3368A53CFEB} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B3A0ADA9-058B-4CF1-AF35-64842EE3A4D4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B3ADD60D-9F0F-4235-A521-713AAFD9D4B1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B3B4F2D4-E073-423C-8C7E-FBB52BB372C3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B3B5EDC9-6FA6-4B26-B954-2039C4CD495F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B4704471-94CC-4612-90FE-754B1C7A1A90} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B4DD4300-184F-4E87-8A7E-C9A58DE559BB} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B4E5E227-F570-4CAC-8D20-618F59BA2A10} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B5226391-F73E-407B-872E-85716A5B1A4B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B5AFD47F-EC91-4B3C-8B64-4CF4F084C372} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B63B33F6-677D-4F8C-8D03-60E8DE09013B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B6438917-36E9-41C0-A24C-79926483992D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B6831E7E-8F19-4478-956D-3D7DAFE39899} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B6D5B37D-9997-4B3B-9998-159F77D22790} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B795847C-6419-4049-A311-BE6468367878} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B79F5FE9-D25F-4F9E-AEE8-6A6A8FBBD48C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B7EBAF0B-5A18-4E21-9B6E-BB2825E547E3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B8AC7CF2-9736-4145-B1BC-342C6A7916B3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B8D4AA63-A997-4B1D-B1EF-37A028EA3D04} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B8DBBBA4-378D-4E46-B523-82EC5103B625} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B8F23AA4-0CD6-41CC-85CB-09A00FB6C922} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B914F865-80ED-4841-ABFB-4FF60672AED6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B96DEEF3-55E8-44DF-9EF4-0973F6F22227} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B993BA9B-4A22-436E-95BA-12AF6B161F33} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{B9EB921E-4B16-4430-954F-F5DF74F7E285} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{BB45AAF7-20D5-48A4-AEF6-19546DA8A884} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{BB74EF81-7C78-4F50-A379-5B61E6E44FDF} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{BBE2D884-A8F5-491B-A6B5-C37F5F861A6F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{BC7CBAAE-2FAE-45C1-8803-09D0CCB16BF3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{BCA20B23-2434-4DF8-A71B-963F9C02D720} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{BD7C68AF-C564-423F-A8DD-A4366DF27E8D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{BDA80EF7-31C9-439E-948A-302F3238D4A0} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{BDBB9BF7-2E88-411E-84CD-5D6576330349} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{BE1C1A34-F5CA-4443-A4BA-51930ECB4A65} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{BF06159D-9475-449C-8568-52A05C30D7BF} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{BFDCAA6A-B0A8-45CC-A3B2-5E046909E8A5} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C053F70C-E95E-427E-9391-1111BA1C62B3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C168AA6F-26B4-4ABE-9EC9-3D73149D4DDE} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C1691DF7-C481-49F7-8467-8F7EFD5D41D4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C19B26C1-BD7A-409E-AA08-E0D324C61E11} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C2597D40-2275-4668-8F6A-215EF7636B8E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C2A08B21-91AD-4294-AD01-26243B08F99B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C2A09E20-98D5-4B90-8C22-73C7870B46A7} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C2AD500D-45FD-49ED-9C06-889E3F68596D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C2CE7237-4249-4DCE-9415-DF1E39729648} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C365F783-5037-4435-9026-AF9DB4655200} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C433B840-4F19-41A4-A233-836B7678E2E6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C47F56A3-9135-45C9-A9F0-7E34D92EDBA3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C488E557-5AD2-4705-9EE5-6B11BD51BA65} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C4CBA02D-66DC-4D31-89B3-772DEA4CED1A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C6B49E6F-F704-44AD-9338-87174F0ACB15} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C6DA2F94-8431-4E33-BE19-C80EADD654B1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C730F3E8-96FD-4A11-9A70-A7C713F5EDA3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C7578376-0DF0-4B8C-8236-8E1BD4F9688B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C7840E47-7A4B-416E-9902-5399BB328A86} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C7DED9EB-2E37-4896-BF6A-FA4867878E29} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C82125AD-CE6F-468A-9244-DBDA418F16E8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C8A27E1E-B8B4-49D2-AB28-10D8DD279BDD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C8BB2BAB-D66C-4B80-8124-D2BA9AA9BB00} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C8BB5B9A-6426-40C8-A732-A18F0D7D81A4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C8C21D31-E1E1-4CE2-9002-9288F482FB5C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C8FC89C2-FE8E-4A05-885B-B04A1C3F7276} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C8FEB442-16DE-4BC7-A4CD-EF95448468AF} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C9096723-9D5A-4C0B-9EC4-7B0385FFFFDE} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C91B08CF-32CB-4B8D-8DC8-87E7912D2FFD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C9341337-57A0-460D-8C40-BCB1BB3E3E2F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{C9A2BFF9-3ED4-4CC3-AE29-405D48D5BBEE} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CA078745-FC19-48CA-B5BB-99012A76969E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CA65E2B4-34B6-462D-882A-80B69495D87F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CA7258E5-3663-4428-8F7B-4FE797F09B0D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CABF1819-F283-47A8-8521-E5B066945215} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CAEB1B1F-3B4D-42F4-9E3B-363570D507CC} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CAFEC621-B8DA-495C-887F-5EAD119121C3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CB1D2336-CBF4-41B9-A7A5-9682966527CB} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CB34D0FB-E173-41D7-BC6C-DC223171DC64} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CB9064C3-2F6B-4F47-8A63-CEE918CA8447} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CBBE8A98-1F01-4079-970F-CE1FEA606711} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CBE6C112-0C37-4CD7-970E-F928917A8597} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CC48BC1F-E955-473B-8377-DE3957DDD84B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CC72E8DD-05FC-4E39-89C8-50E72D0C92DF} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CCD3BB83-9275-400F-A84A-A71971F2F92C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CD37E7B0-F4BE-4784-A8E4-F9475EEC0B8D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CD39726D-98CA-4F6A-AB92-FD45B6002C04} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CDB838ED-6F59-4877-8C92-7EAC41D289C7} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CE89D793-F129-4D25-A85E-30852DE84A13} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CEB51792-3251-46D9-A012-511249906311} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CF0285B4-7AAD-46E0-A8B5-93C0546D275B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CF24AABD-6D44-4FE6-A9D8-62529ECC0B69} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CF2E5ECF-B86F-4C94-A21A-44BF6D39E027} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CF63F5AF-9723-4D7B-A7D6-43D4E0A8EC6A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{CF6B08ED-D89E-4314-A828-CBF5250F41B7} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D0065CD7-87C2-49EE-B463-4F390B1B2A56} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D063F346-5E17-4ACE-A01C-D1D5700F0D74} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D07B4DED-B7A7-4C1C-A269-8A0FD7849DF6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D0945B7E-A2AA-4559-9268-7BE32BD3F583} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D0BCC177-23F3-4086-A7FC-1059770D26C4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D1458A81-6356-44AD-86F6-88116CE4A613} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D16CF124-D671-44B6-9C03-4E21C9525544} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D1D04212-D22F-438B-A16C-9F242D4F788D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D20F7C14-0E76-4623-B261-29B94DBE0EBB} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D2A8AA4F-98BB-4E91-A57E-6601528DEC4E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D2CE94CB-E9CE-4FBE-A28A-91A902FE21EA} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D32A2402-3D46-4582-8884-855D8224F77C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D3BEDB7F-2080-4A1F-A481-FD8DE1F71296} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D3D2B4CE-2C85-4734-B329-FEEDAEF6D129} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D406DEE0-9FDD-4C30-B660-6B0A5FDEA7EB} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D4281586-E1D2-4B35-92F4-6DFA529934BD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D4804514-CC56-44FD-9D25-B4113E1F4FCE} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D49BB1C7-94DE-4EA6-87B2-0726053378B9} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D5EEEABD-AE27-4945-8F5B-1CA878B99940} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D629BBFF-377B-417E-B86A-45B8D8919C91} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D6394E90-5726-4754-B58A-8120F71730AF} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D69EA161-4543-4907-92BA-5456F5F5986D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D6F7187B-58C6-4DE7-AB62-FC31216B0BA4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D70B20F6-B065-46B7-BE0A-791456FC7F94} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D733F260-E4C4-4BE7-8EB3-B8CA163CA6DD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D763462D-0923-4485-B01F-AC7F4E21A150} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D80440CC-3A05-40BD-81C5-A560F12C3360} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{D8417BEF-CDA6-4ABD-8876-76956339AF69} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DA14EE6D-ED4B-45BF-BA5E-567720DDCCAB} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DAC5C862-F482-4576-9637-09E8A2811901} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DBC1E1E2-510D-4F66-B284-CED46B32098F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DBD53707-3BF0-44CB-BEC3-907D39BB9F03} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DC1FD2AA-8235-4D2F-B7E3-2789A18EEC8F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DC310068-6025-49B9-98FE-442C1073ABAD} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DC376998-533D-42EA-9816-0450DC46DAAE} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DC4924E2-4932-46C4-8C07-21784094FF0B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DC8E0CD9-2017-4616-B741-1FD061F3ADD1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DCC33AC0-8B11-4A9A-AC3D-A62403ED4618} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DCC697AB-C4A7-444C-B369-E38D7E7E5EB7} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DCD8763B-DF18-42F8-88F7-78BF11002C90} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DCDA6F5C-768E-45CE-86C8-8ECD81AAB143} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DD7A6B7C-295F-4F0B-8A09-92AA8A0A5DC4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DDFC9B0B-0E1C-4763-B4A9-D1CD32D507FF} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DE268383-502B-4659-9E7E-DBB76F41E364} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DE3ECCC8-A479-4036-8074-038941B8E515} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DE5E5B62-1C9D-4C2E-8DD4-E683E8E91C1D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DEC741A6-F5C1-404E-B46A-D1156BD073C1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DED01620-0663-49CE-888E-F9A5BA5B6584} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{DF96A4AA-D9B7-4A55-B625-72462FFBC992} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E01942D4-7B05-41FC-AD05-A9835DA2EA61} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E0B1145B-35EC-4938-A7A4-910879200DF1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E0BCF4C6-6D45-4DAC-8BF6-0282C721F8D5} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E14A3EC4-D648-4AEA-AE98-C15ABB7CEFB0} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E162B1A2-A18C-4262-A51D-F48FA59A3385} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E1B5A6C8-24BF-4576-BA2E-6B6531763A45} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E1C97079-499E-4DC1-B83D-B763FF1AE98B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E246A03C-B3CC-480A-B588-4EFD534047F0} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E3600DAE-CB8A-4080-8868-0536BA2CF063} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E39715E3-DA63-48BA-A6F4-5B7BE30DC1DB} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E3C43083-E9C3-474C-8E20-C94E40B4294D} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E44A4102-2C21-4EB2-AA7B-5E8EA3FA945C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E463604B-EC88-466D-9134-85C16FF30BCC} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E584912F-B1B5-4CFC-B224-AEFA332D6968} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E5A62328-D7FA-405B-A400-76CCE51A4C30} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E5B6CBA3-9DD7-4291-9965-853B6598A3BE} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E5FC430C-2885-45C8-B717-5F14198D6511} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E616DBEE-315B-4A7B-8EFD-25CB0797CB87} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E65F53D2-1692-43EF-BD84-EB9092AD579B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E679AA9B-8DFA-4E8A-93DD-7D7BCFB52283} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E6E4F0D7-9734-4D81-9069-C3A83C1DD810} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E76826FE-5087-4B15-B50A-595EF43656E6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E7C10F09-00BB-4571-B49F-14DF2AEE36AA} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E7D732E3-5942-4226-A259-A4772B0F8C24} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E805E86F-B08A-45D2-8EF8-8CEBC6B03B95} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E8DBBC46-B3CB-48E3-98F4-3324496F1BC5} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E8F5156B-8A28-4E95-BE0A-3CA85FB6BE60} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E93ED4BA-1BCB-4E8D-BC87-01D5AC63AE16} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{E95463D0-24CD-4502-B83A-492E925C229F} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{EA991152-48ED-476A-98C9-3D7E5EF85A48} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{EB8A55E4-000F-47FB-8BCC-E90E665FD2CB} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{EBFC27E1-A7A5-4888-B769-E3450E6287C2} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{ECABBBEA-9FE2-4A79-BF37-F99ED25DF8C5} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{ECD097A7-0E6B-48A0-9096-EE91BD4D4899} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{ED7E7D10-9285-4FA4-B778-7B164C1ADB0E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{EDE8FE02-65F5-4E13-AB97-23219BD03A39} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{EE0594A6-E157-46BB-8395-B91A1E71518B} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{EEADCD27-BFC9-4A7E-9CA6-8FA23BCF3F0A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{EED888DD-E2E6-482D-B730-382315DF0D01} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{EF632FA0-CF15-4ADC-A043-6ABA7BB23687} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{EF6CF4D6-140F-4A5D-AB60-EC650509E1DA} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{EFFB0801-6BE6-490C-A82C-140042689A4A} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F134B0B8-F746-48B4-B18E-760AE696E35C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F1756B99-00AF-4A96-A519-6DCB5B9E01D4} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F18539FE-5413-4184-AA7B-5E4C93B859E6} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F23FA8D7-4ADE-43B4-9C35-A2A4BF9C0F19} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F252A4BD-8D46-4E16-A629-EEBFB37697B1} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F33090F6-2E03-42F1-8DF4-6D87B8A42537} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F3D1104C-911F-45E0-8E6B-1F2F965736AB} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F4664042-F978-4678-B861-FFA7A9FEB737} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F48F3C71-C5C4-4054-A19F-BFF8881AA9B9} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F5200061-78C2-4366-9755-8C313186A76C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F5936DCD-6218-429F-98D4-56C6B575F81C} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F5BEE302-63DB-4415-851C-9AA7EEB9DD38} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F5ECDF50-2574-4FF1-92D3-E028EFF32D43} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F5FC9E05-7A9D-46DF-8DB7-A936491D80EB} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F60B3563-DEA8-4327-B603-1B6074560BFC} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F65DD0B1-8ADF-4843-9E2F-04A219E3FE58} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F6DFB5C6-4D75-4AD8-94B5-1307D55D53C3} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F8BB5C25-17A5-48D3-9E3A-877B308950DF} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{F8E914F6-BDAC-458A-9197-E0DAE1952117} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{FB58E370-74D6-46D9-B91F-2B6D7FEEDF2E} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{FB635DE9-B289-4E80-BECB-951102D9FB96} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{FB7F27BD-9579-4D87-AA95-8C584F613348} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{FD4CC3A1-04F3-4B6D-A68C-35CB6461AD84} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{FF3D2610-5067-4EFB-9640-18E85ABBCC73} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Local\{FFD775E2-0B8D-42E2-9993-F5B64EE05AA8} (Empty Folder)
Successfully deleted: C:\Users\Sirius\AppData\Roaming\iobit\driver booster (Folder) 
Successfully deleted: C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\extensions\bingsearch.full@microsoft.com\search.xml (File) 
Successfully deleted: C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\gm_scripts\GayRomeo_Optimizer\117869.user.js (File) 
Successfully deleted: C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\gm_scripts\GR-MessageCounter\113771.user.js (File) 
Successfully deleted: C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\gm_scripts\GR-Tools_-_Pimp_your_GayRomeo!_-)\33184.user.js (File) 
Successfully deleted: C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\searchplugins\ink361-instagram-search.xml (File) 
Successfully deleted: C:\Users\Sirius\AppData\Roaming\productdata (Folder) 
Successfully deleted: C:\Users\Sirius\AppData\Roaming\wyupdate au (Folder) 
Successfully deleted: C:\Users\Sirius\Desktop\tuneup utilities 2014.lnk (Shortcut) 
Successfully deleted: C:\windows\system32\Tasks\Driver Booster SkipUAC (Sirius) (Task)
Successfully deleted: C:\windows\system32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 (Task)

Deleted the following from C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\prefs.js
user_pref(browser.search.searchengine.desc, this is my first firefox searchEngine);
user_pref(browser.search.searchengine.ptid, wpm07153);
user_pref(browser.search.searchengine.uid, ST1000DM003-9YN162_S1DAG9NLXXXXS1DAG9NL);
user_pref(extensions.quick_start.sd.closeWindowWithLastTab_prev_state, false);
user_pref(extensions.sweetsearch@gmail.com.install-event-fired, true);



Registry: 2 

Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3A2D5EBA-F86D-4BD3-A177-019765996711} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.11.2015 at 15:16:47.06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
__________________
Alt 30.11.2015, 21:40   #18
Mike B
 
?Spurensicherung? - Standard

?Spurensicherung?


Und hier die Logdatei von FRST.txt

Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:30-11-2015
durchgeführt von Sirius (Administrator) auf SIRIUS-PC (30-11-2015 20:10:51)
Gestartet von C:\Users\Sirius\Downloads
Geladene Profile: Sirius (Verfügbare Profile: Sirius)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Program Files (x86)\NETGEAR\A6210\NetgearSwitchUSB.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(File Type Advisor) C:\Program Files (x86)\File Type Advisor\fileadvisor.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(© 2015 Microsoft Corporation) C:\Users\Sirius\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Comvigo, Inc.) C:\Windows\SysWOW64\qimlsrv.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(NETGEAR) C:\Program Files (x86)\NETGEAR\A6210\A6210.EXE
(Mister Group) C:\Program Files (x86)\System Explorer\SystemExplorer.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Mister Group) C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe
(Comvigo, Inc.) C:\Windows\SysWOW64\dsrviml.exe
(Farbar) C:\Users\Sirius\Downloads\FRST64(1).exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-08-21] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284480 2012-05-30] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133400 2011-12-16] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-27] (Intel Corporation)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [A6210] => C:\Program Files (x86)\NETGEAR\A6210\A6210.EXE [6210368 2014-07-01] (NETGEAR)
HKLM-x32\...\Run: [SystemExplorerAutoStart] => C:\Program Files (x86)\System Explorer\SystemExplorer.exe [3389160 2015-08-19] (Mister Group)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6133520 2015-11-08] (AVAST Software)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [60688 2015-10-21] (Apple Inc.)
HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [61200 2015-10-21] (Apple Inc.)
HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\Run: [BingSvc] => C:\Users\Sirius\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-11] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50137728 2015-11-17] (Skype Technologies S.A.)
HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-18\...\RunOnce: [iCloud] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe [60688 2015-10-21] (Apple Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-26] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\IML.lnk [2015-10-23]
ShortcutTarget: IML.lnk -> C:\Windows\System32\iml.vbs ()
Startup: C:\Users\Sirius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IML.lnk [2015-10-23]
ShortcutTarget: IML.lnk -> C:\Windows\System32\iml.vbs ()
Startup: C:\Users\Sirius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2014-11-11]
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{59927D77-1D1E-4DF6-AAA9-C2AFA2D30A1B}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{9681DFA6-8862-405C-B4F0-36952295336D}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SK2M&ocid=SK2MDHP&osmkt=de-de
HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de
SearchScopes: HKLM-x32 -> {4FC76085-CCF7-4274-946C-2EE42B73E562} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-09-13] (Kaspersky Lab ZAO)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-26] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-09-13] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-08-21] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-26] (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-08-21] (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2014-04-20] (Kaspersky Lab ZAO)
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  Keine Datei
Toolbar: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default
FF SearchEngineOrder.1: Yahoo! (Avast)
FF SearchEngineOrder.3: Bing 
FF SelectedSearchEngine: Bing 
FF Homepage: hxxp://www.msn.com/de-ch/
FF Keyword.URL: hxxp://www.bing.com/search?FORM=SK2MDF&PC=SK2M&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-11] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-11] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-08] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2013-09-17] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-02-18] (DivX, LLC)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2011-12-01] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2011-12-01] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-08-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-08-21] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2015-09-13] ()
FF Plugin-x32: @kaspersky.com/online_banking -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2015-09-13] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2015-09-13] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2014-07-24] (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-02-05] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-02-05] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-24] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-24] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-09-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-09-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-09-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-09-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-09-24] (Apple Inc.)
FF SearchPlugin: C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\searchplugins\bing-.xml [2015-10-31]
FF SearchPlugin: C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\searchplugins\das-daelim-forum.xml [2015-07-17]
FF SearchPlugin: C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\searchplugins\google-images.xml [2014-07-30]
FF SearchPlugin: C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\searchplugins\google-maps.xml [2014-07-30]
FF Extension: Foxy-Secure v7 - C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\extensions\fox@foxy.sec.com [2014-08-21] [ist nicht signiert]
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-06-02] [ist nicht signiert]
FF Extension: convert2mp3.net YouTube2MP3 Converter - C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\extensions\info@convert2mp3.net.xpi [2015-05-29]
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2015-09-13] [ist nicht signiert]
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2015-09-13] [ist nicht signiert]
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com [2015-09-13] [ist nicht signiert]
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com [2015-09-13] [ist nicht signiert]
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2015-09-13] [ist nicht signiert]
FF Extension: Greasemonkey - C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2015-11-21]
FF Extension: Avira Browser Safety - C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\Extensions\abs@avira.com [2015-10-23] [ist nicht signiert]
FF Extension: Bing Search Engine - C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\Extensions\bingsearch.full@microsoft.com [2015-11-30] [ist nicht signiert]
FF Extension: Bing Search - C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\Extensions\bingsearch.full@microsoft.com.xpi [2015-10-31]
FF Extension: Cliqz - C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\Extensions\cliqz@cliqz.com.xpi [2015-11-29] [ist nicht signiert]
FF Extension: German Dictionary - C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\Extensions\de-DE@dictionaries.addons.mozilla.org [2014-06-08] [ist nicht signiert]
FF Extension: VideoConverter - C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\Extensions\{05251959-bc87-43d6-a1c9-3c79a4784fb8}.xpi [2015-10-31] [ist nicht signiert]
FF Extension: Video Manager - C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\Extensions\{2dbdad93-d494-466d-b332-9dbe9c978968}.xpi [2015-08-25] [ist nicht signiert]
FF Extension: Adblock Plus - C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-11-29]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-26] [ist nicht signiert]
FF HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\extensions\cliqz@cliqz.com => nicht gefunden

Chrome: 
=======
CHR Profile: C:\Users\Sirius\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Kaspersky Protection) - C:\Users\Sirius\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2015-11-07]
CHR Extension: (Avast SafePrice) - C:\Users\Sirius\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-11-07]
CHR Extension: (Avira Browserschutz) - C:\Users\Sirius\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-11-07]
CHR Extension: (Avast Online Security) - C:\Users\Sirius\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-07]
CHR Extension: (Skype Click to Call) - C:\Users\Sirius\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-11-07]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Sirius\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-07]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - hxxps://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - <kein Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - hxxps://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-10-26]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-26]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-26] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4048280 2015-10-26] (Avast Software)
R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 NetgearSwitchUSB; C:\Program Files (x86)\NETGEAR\A6210\NetgearSwitchUSB.exe [210648 2014-05-13] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [820960 2014-12-20] (Mister Group)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2145080 2015-06-25] (TuneUp Software)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 A6210; C:\Windows\System32\DRIVERS\A6210.sys [2208984 2014-06-20] (Ralink Technology Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-26] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-26] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-26] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-08] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-26] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-26] (AVAST Software)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [24496 2011-12-19] (Intel Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [141320 2015-09-13] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [793800 2015-09-13] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-11-30] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [132656 2015-10-26] (AVAST Software)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] ()
S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [31144 2015-06-04] (TuneUp Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [274336 2015-10-26] (Avast Software)
S3 catchme; \??\C:\Users\Sirius\AppData\Local\Temp\catchme.sys [X]
U3 DfSdkS; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-11-30 20:03 - 2015-11-30 20:03 - 02350080 _____ (Farbar) C:\Users\Sirius\Downloads\FRST64(1).exe
2015-11-30 19:49 - 2015-11-30 19:49 - 00000000 ____D C:\Users\Sirius\Desktop\FRST-OlderVersion
2015-11-30 19:44 - 2015-11-30 19:44 - 00000000 ____D C:\Users\Sirius\Downloads\FRST-OlderVersion
2015-11-30 15:16 - 2015-11-30 15:16 - 00072157 _____ C:\Users\Sirius\Desktop\JRT.txt
2015-11-30 15:06 - 2015-11-30 15:06 - 00003261 _____ C:\Users\Sirius\Desktop\AdwCleaner[C2].txt
2015-11-30 15:02 - 2015-11-30 15:02 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-11-30 14:53 - 2015-11-30 14:53 - 00002234 _____ C:\Users\Sirius\Desktop\mbam.txt
2015-11-30 14:20 - 2015-11-30 14:20 - 01599336 _____ (Malwarebytes) C:\Users\Sirius\Downloads\JRT.exe
2015-11-30 14:18 - 2015-11-30 14:19 - 01733632 _____ C:\Users\Sirius\Downloads\AdwCleaner_5.022.exe
2015-11-30 14:11 - 2015-11-30 14:12 - 22908888 _____ (Malwarebytes ) C:\Users\Sirius\Downloads\mbam-setup-2.2.0.1024(1).exe
2015-11-29 21:03 - 2015-11-30 14:18 - 00113880 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-11-29 21:03 - 2015-11-30 14:17 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-11-29 21:03 - 2015-11-30 14:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-11-29 21:03 - 2015-11-30 14:17 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-11-29 21:03 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2015-11-29 21:03 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-11-29 21:03 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2015-11-29 20:55 - 2015-11-29 21:05 - 00002144 _____ C:\Users\Sirius\Desktop\ Malwarebytes Anti-Malware  - Malware Scanner - CHIP Downloader.lnk
2015-11-29 20:51 - 2015-11-29 20:51 - 22908888 _____ (Malwarebytes ) C:\Users\Sirius\Downloads\mbam-setup-2.2.0.1024.exe
2015-11-25 17:05 - 2015-11-25 17:15 - 00030224 _____ C:\ComboFix.txt
2015-11-25 15:43 - 2011-06-26 07:45 - 00256000 _____ C:\windows\PEV.exe
2015-11-25 15:43 - 2010-11-07 18:20 - 00208896 _____ C:\windows\MBR.exe
2015-11-25 15:43 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2015-11-25 15:43 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2015-11-25 15:43 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2015-11-25 15:43 - 2000-08-31 01:00 - 00098816 _____ C:\windows\sed.exe
2015-11-25 15:43 - 2000-08-31 01:00 - 00080412 _____ C:\windows\grep.exe
2015-11-25 15:43 - 2000-08-31 01:00 - 00068096 _____ C:\windows\zip.exe
2015-11-25 15:42 - 2015-11-25 15:42 - 05640282 _____ (Swearware) C:\Users\Sirius\Downloads\ComboFix(1).exe
2015-11-25 14:33 - 2015-11-25 17:06 - 00000000 ____D C:\Qoobox
2015-11-25 14:33 - 2015-11-25 16:23 - 00000000 ____D C:\windows\erdnt
2015-11-25 14:32 - 2015-11-25 14:32 - 05640282 ____R (Swearware) C:\Users\Sirius\Downloads\ComboFix.exe
2015-11-24 15:05 - 2015-11-24 15:06 - 00229648 _____ C:\TDSSKiller.3.1.0.6_24.11.2015_15.05.54_log.txt
2015-11-24 15:02 - 2015-11-24 15:02 - 04397752 _____ (Kaspersky Lab ZAO) C:\Users\Sirius\Downloads\tdsskiller(1).exe
2015-11-23 18:33 - 2015-11-23 18:36 - 00454426 _____ C:\TDSSKiller.3.1.0.6_23.11.2015_18.33.43_log.txt
2015-11-23 18:33 - 2015-11-23 18:33 - 04397752 _____ (Kaspersky Lab ZAO) C:\Users\Sirius\Downloads\tdsskiller.exe
2015-11-23 17:19 - 2015-11-23 18:33 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-11-23 17:16 - 2015-11-23 18:33 - 00000000 ____D C:\Users\Sirius\Desktop\mbar
2015-11-23 17:03 - 2015-11-23 17:04 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Sirius\Downloads\mbar-1.09.3.1001.exe
2015-11-23 17:03 - 2015-11-23 17:04 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Sirius\Downloads\mbar-1.09.3.1001(1).exe
2015-11-22 21:55 - 2015-11-22 21:55 - 00102773 _____ C:\Users\Sirius\Documents\Deine Zugangsdaten für Plaghunter_ Jetzt starten!.eml
2015-11-22 12:22 - 2015-11-30 20:10 - 00033394 _____ C:\Users\Sirius\Downloads\FRST.txt
2015-11-22 12:19 - 2015-11-30 19:44 - 02350080 _____ (Farbar) C:\Users\Sirius\Downloads\FRST64.exe
2015-11-22 10:19 - 2015-11-22 12:24 - 00060332 _____ C:\Users\Sirius\Downloads\Shortcut.txt
2015-11-22 10:18 - 2015-11-22 12:24 - 00045308 _____ C:\Users\Sirius\Downloads\Addition.txt
2015-11-15 16:29 - 2015-11-15 16:30 - 05813872 _____ (ParetoLogic Inc.) C:\Users\Sirius\Downloads\ParetoLogic PC Health Advisor_de(1).exe
2015-11-15 16:29 - 2015-11-15 16:29 - 05813872 _____ (ParetoLogic Inc.) C:\Users\Sirius\Downloads\ParetoLogic PC Health Advisor_de.exe
2015-11-15 10:42 - 2015-11-15 10:43 - 67654920 _____ C:\Users\Sirius\Downloads\55501(2).mp4
2015-11-15 10:38 - 2015-11-15 10:39 - 79840136 _____ C:\Users\Sirius\Downloads\54846.flv
2015-11-15 10:35 - 2015-11-15 10:35 - 20745244 _____ C:\Users\Sirius\Downloads\55641.mp4
2015-11-14 23:00 - 2015-11-14 23:00 - 05115331 _____ C:\Users\Sirius\Downloads\55647.flv
2015-11-14 22:57 - 2015-11-14 22:58 - 44227645 _____ C:\Users\Sirius\Downloads\55646.flv
2015-11-14 22:52 - 2015-11-14 22:54 - 67654920 _____ C:\Users\Sirius\Downloads\55501.mp4
2015-11-14 22:52 - 2015-11-14 22:54 - 67654920 _____ C:\Users\Sirius\Downloads\55501(1).mp4
2015-11-12 19:01 - 2015-11-03 18:55 - 03211264 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-11-11 10:07 - 2015-11-11 10:07 - 02002416 _____ (Trend Micro Inc.) C:\Users\Sirius\Downloads\HousecallLauncher.exe
2015-11-11 08:29 - 2015-11-03 23:10 - 00390344 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-11-11 08:29 - 2015-11-03 22:51 - 00342728 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-11-11 08:29 - 2015-10-31 00:46 - 25818624 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-11-11 08:29 - 2015-10-31 00:40 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-11-11 08:29 - 2015-10-31 00:40 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-11-11 08:29 - 2015-10-31 00:25 - 02886656 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-11-11 08:29 - 2015-10-31 00:25 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-11-11 08:29 - 2015-10-31 00:25 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-11-11 08:29 - 2015-10-31 00:25 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-11-11 08:29 - 2015-10-31 00:24 - 00585728 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-11-11 08:29 - 2015-10-31 00:24 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-11-11 08:29 - 2015-10-31 00:17 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-11-11 08:29 - 2015-10-31 00:16 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-11-11 08:29 - 2015-10-31 00:13 - 00616960 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-11-11 08:29 - 2015-10-31 00:12 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-11-11 08:29 - 2015-10-31 00:12 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-11-11 08:29 - 2015-10-31 00:11 - 05990912 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-11-11 08:29 - 2015-10-31 00:11 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-11-11 08:29 - 2015-10-31 00:11 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-11-11 08:29 - 2015-10-31 00:04 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-11-11 08:29 - 2015-10-31 00:01 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-11-11 08:29 - 2015-10-30 23:58 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-11-11 08:29 - 2015-10-30 23:53 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-11-11 08:29 - 2015-10-30 23:52 - 20331520 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-11-11 08:29 - 2015-10-30 23:49 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-11-11 08:29 - 2015-10-30 23:49 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-11-11 08:29 - 2015-10-30 23:47 - 00504832 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-11-11 08:29 - 2015-10-30 23:46 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-11-11 08:29 - 2015-10-30 23:46 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-11-11 08:29 - 2015-10-30 23:45 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-11-11 08:29 - 2015-10-30 23:45 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-11-11 08:29 - 2015-10-30 23:44 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2015-11-11 08:29 - 2015-10-30 23:44 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-11-11 08:29 - 2015-10-30 23:42 - 02279936 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-11-11 08:29 - 2015-10-30 23:39 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-11-11 08:29 - 2015-10-30 23:39 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-11-11 08:29 - 2015-10-30 23:37 - 00480256 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-11-11 08:29 - 2015-10-30 23:36 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-11-11 08:29 - 2015-10-30 23:36 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-11-11 08:29 - 2015-10-30 23:36 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-11-11 08:29 - 2015-10-30 23:34 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2015-11-11 08:29 - 2015-10-30 23:32 - 00720896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-11-11 08:29 - 2015-10-30 23:31 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-11-11 08:29 - 2015-10-30 23:29 - 02126336 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-11-11 08:29 - 2015-10-30 23:29 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-11-11 08:29 - 2015-10-30 23:28 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-11-11 08:29 - 2015-10-30 23:23 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-11-11 08:29 - 2015-10-30 23:22 - 14457856 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-11-11 08:29 - 2015-10-30 23:21 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-11-11 08:29 - 2015-10-30 23:19 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-11-11 08:29 - 2015-10-30 23:18 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-11-11 08:29 - 2015-10-30 23:17 - 02487808 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-11-11 08:29 - 2015-10-30 23:17 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2015-11-11 08:29 - 2015-10-30 23:16 - 04527616 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-11-11 08:29 - 2015-10-30 23:11 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2015-11-11 08:29 - 2015-10-30 23:10 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-11-11 08:29 - 2015-10-30 23:09 - 12854272 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-11-11 08:29 - 2015-10-30 23:09 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-11-11 08:29 - 2015-10-30 23:09 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-11-11 08:29 - 2015-10-30 23:04 - 01547264 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-11-11 08:29 - 2015-10-30 22:53 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-11-11 08:29 - 2015-10-30 22:51 - 02011136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-11-11 08:29 - 2015-10-30 22:48 - 01311744 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-11-11 08:29 - 2015-10-30 22:46 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-11-11 08:29 - 2015-10-20 19:42 - 03168768 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-11-11 08:29 - 2015-10-20 19:42 - 02608128 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-11-11 08:29 - 2015-10-20 19:42 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-11-11 08:29 - 2015-10-20 19:42 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-11-11 08:29 - 2015-10-20 19:42 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-11-11 08:29 - 2015-10-20 19:42 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-11-11 08:29 - 2015-10-20 19:42 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-11-11 08:29 - 2015-10-20 19:41 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-11-11 08:29 - 2015-10-20 19:41 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-11-11 08:29 - 2015-10-20 19:41 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-11-11 08:29 - 2015-10-20 19:41 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-11-11 08:29 - 2015-10-20 18:46 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-11-11 08:29 - 2015-10-20 18:46 - 00174080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-11-11 08:29 - 2015-10-20 18:46 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-11-11 08:29 - 2015-10-20 18:46 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-11-11 08:29 - 2015-10-20 18:45 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-11-11 08:28 - 2015-10-29 18:50 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\apphelp.dll
2015-11-11 08:28 - 2015-10-29 18:50 - 00072192 _____ (Microsoft Corporation) C:\windows\system32\aelupsvc.dll
2015-11-11 08:28 - 2015-10-29 18:50 - 00023552 _____ (Microsoft Corporation) C:\windows\system32\sdbinst.exe
2015-11-11 08:28 - 2015-10-29 18:50 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\shimeng.dll
2015-11-11 08:28 - 2015-10-29 18:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\shimeng.dll
2015-11-11 08:28 - 2015-10-29 18:49 - 00295936 _____ (Microsoft Corporation) C:\windows\SysWOW64\apphelp.dll
2015-11-11 08:28 - 2015-10-29 18:49 - 00020992 _____ (Microsoft Corporation) C:\windows\SysWOW64\sdbinst.exe
2015-11-11 08:28 - 2015-10-20 02:12 - 05570496 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-11-11 08:28 - 2015-10-20 02:12 - 00154560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-11-11 08:28 - 2015-10-20 02:12 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-11-11 08:28 - 2015-10-20 02:09 - 01730496 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-11-11 08:28 - 2015-10-20 02:06 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-11-11 08:28 - 2015-10-20 02:06 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-11-11 08:28 - 2015-10-20 02:06 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2015-11-11 08:28 - 2015-10-20 02:06 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 01216512 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 01164800 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00729600 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00344064 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00312320 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-11-11 08:28 - 2015-10-20 02:05 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-11-11 08:28 - 2015-10-20 02:05 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-11-11 08:28 - 2015-10-20 02:05 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-11-11 08:28 - 2015-10-20 02:04 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-11-11 08:28 - 2015-10-20 02:04 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-11-11 08:28 - 2015-10-20 02:04 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-11-11 08:28 - 2015-10-20 02:00 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-11-11 08:28 - 2015-10-20 01:59 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:52 - 03991488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-11-11 08:28 - 2015-10-20 01:52 - 03935680 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-11-11 08:28 - 2015-10-20 01:48 - 01311768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-11-11 08:28 - 2015-10-20 01:45 - 00552960 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-11-11 08:28 - 2015-10-20 01:45 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-11-11 08:28 - 2015-10-20 01:45 - 00251392 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-11-11 08:28 - 2015-10-20 01:45 - 00223232 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-11-11 08:28 - 2015-10-20 01:45 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-11-11 08:28 - 2015-10-20 01:45 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-11-11 08:28 - 2015-10-20 01:45 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-11-11 08:28 - 2015-10-20 01:45 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll
2015-11-11 08:28 - 2015-10-20 01:45 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-11-11 08:28 - 2015-10-20 01:45 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-11-11 08:28 - 2015-10-20 01:45 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-11-11 08:28 - 2015-10-20 01:45 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-11-11 08:28 - 2015-10-20 01:44 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-11-11 08:28 - 2015-10-20 01:44 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-11-11 08:28 - 2015-10-20 01:44 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-11-11 08:28 - 2015-10-20 01:44 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-11-11 08:28 - 2015-10-20 01:44 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-11-11 08:28 - 2015-10-20 01:44 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-11-11 08:28 - 2015-10-20 01:39 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-11-11 08:28 - 2015-10-20 01:39 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 00:41 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-11-11 08:28 - 2015-10-20 00:40 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2015-11-11 08:28 - 2015-10-20 00:40 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-11-11 08:28 - 2015-10-20 00:29 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-11-11 08:28 - 2015-10-20 00:29 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-11-11 08:28 - 2015-10-20 00:27 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 00:27 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 00:27 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-11-11 08:28 - 2015-10-20 00:27 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-11-11 08:28 - 2015-10-13 17:41 - 00497664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2015-11-11 08:28 - 2015-10-13 17:40 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys
2015-11-11 08:28 - 2015-10-13 05:57 - 00950720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys
2015-11-11 08:28 - 2015-10-01 19:00 - 00275456 _____ (Microsoft Corporation) C:\windows\system32\InkEd.dll
2015-11-11 08:28 - 2015-10-01 19:00 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\jnwmon.dll
2015-11-11 08:28 - 2015-10-01 18:50 - 00216064 _____ (Microsoft Corporation) C:\windows\SysWOW64\InkEd.dll
2015-11-11 08:28 - 2015-09-23 14:15 - 00460776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2015-11-11 08:28 - 2015-09-23 14:15 - 00299632 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll
2015-11-11 08:28 - 2015-09-23 14:09 - 00251000 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcryptprimitives.dll
2015-11-09 16:12 - 2015-11-09 16:12 - 00012872 _____ (SurfRight B.V.) C:\windows\system32\bootdelete.exe
2015-11-03 15:09 - 2015-11-03 15:10 - 65301142 _____ C:\Users\Sirius\Downloads\forca bossman s.mp4
2015-11-03 14:44 - 2015-11-03 14:45 - 30679069 _____ C:\Users\Sirius\Downloads\Cybercrime Opfer - Welt der Wunder(1).mp4
2015-11-03 14:42 - 2015-11-03 14:43 - 30679069 _____ C:\Users\Sirius\Downloads\Cybercrime Opfer - Welt der Wunder.mp4
2015-11-02 22:36 - 2015-11-02 22:36 - 02248704 _____ C:\Users\Sirius\Downloads\adwcleaner-4-208-multi-win.exe
2015-11-02 22:26 - 2015-11-02 22:26 - 02248704 _____ C:\Users\Sirius\Downloads\adwcleaner_4.208(3).exe
2015-11-02 22:25 - 2015-11-02 22:25 - 02248704 _____ C:\Users\Sirius\Downloads\adwcleaner_4.208(2).exe
2015-11-02 22:19 - 2015-11-02 22:19 - 01708032 _____ C:\Users\Sirius\Downloads\adwcleaner_5.016.exe
2015-11-02 22:19 - 2015-11-02 22:19 - 01708032 _____ C:\Users\Sirius\Downloads\adwcleaner_5.016(1).exe
2015-11-02 22:17 - 2015-11-02 22:17 - 01708032 _____ C:\Users\Sirius\Downloads\adwcleaner_5-016_fr_430277.exe
2015-11-02 22:04 - 2015-11-03 16:04 - 00000000 ____D C:\Users\Sirius\AppData\Roaming\PyBitmessage
2015-11-02 14:48 - 2015-11-25 20:54 - 00000000 ____D C:\Users\Sirius\chan4 random b
2015-11-01 12:20 - 2015-11-07 22:55 - 00000000 ____D C:\Users\Sirius\chan4 imageboard handsome men hm
2015-10-31 19:17 - 2015-10-31 19:17 - 00003490 _____ C:\windows\system32\.crusader

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-11-30 20:10 - 2015-09-24 22:19 - 00000000 ____D C:\FRST
2015-11-30 20:10 - 2014-03-03 17:22 - 00001106 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-30 20:09 - 2015-09-12 17:27 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2015-11-30 20:08 - 2012-09-14 06:50 - 00000000 ____D C:\ProgramData\NVIDIA
2015-11-30 20:08 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-11-30 20:05 - 2013-06-28 23:54 - 00000000 ____D C:\Users\Sirius\AppData\Roaming\Skype
2015-11-30 20:03 - 2014-03-03 17:22 - 00001110 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-30 19:49 - 2015-09-24 22:18 - 02350080 _____ (Farbar) C:\Users\Sirius\Desktop\FRST64.exe
2015-11-30 19:22 - 2013-05-26 11:31 - 00000000 ____D C:\Users\Sirius
2015-11-30 19:17 - 2013-05-26 12:30 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-11-30 15:13 - 2014-08-21 13:23 - 00000000 ____D C:\ProgramData\IObit
2015-11-30 15:13 - 2014-08-21 13:22 - 00000000 ____D C:\Users\Sirius\AppData\Roaming\IObit
2015-11-30 15:13 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-30 15:13 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-30 15:11 - 2011-04-12 08:43 - 00702964 _____ C:\windows\system32\perfh007.dat
2015-11-30 15:11 - 2011-04-12 08:43 - 00150604 _____ C:\windows\system32\perfc007.dat
2015-11-30 15:11 - 2009-07-14 06:13 - 01629436 _____ C:\windows\system32\PerfStringBackup.INI
2015-11-30 15:11 - 2009-07-14 04:20 - 00000000 ____D C:\windows\inf
2015-11-30 15:02 - 2015-04-20 16:31 - 00000000 ____D C:\AdwCleaner
2015-11-30 12:42 - 2015-04-08 15:26 - 00000000 ____D C:\Users\Sirius\AppData\Roaming\FileAdvisor
2015-11-29 22:57 - 2015-04-07 22:20 - 00003518 _____ C:\windows\System32\Tasks\FileAdvisorCheck
2015-11-29 22:57 - 2015-04-07 22:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\File Type Advisor
2015-11-29 22:57 - 2015-04-07 22:20 - 00000000 ____D C:\Program Files (x86)\File Type Advisor
2015-11-29 20:41 - 2015-07-15 22:09 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-11-25 16:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2015-11-25 16:52 - 2009-07-14 03:34 - 00000215 _____ C:\windows\system.ini
2015-11-25 15:35 - 2015-09-20 18:43 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-11-25 15:20 - 2015-09-24 14:22 - 00000000 ____D C:\Program Files\HitmanPro
2015-11-25 15:16 - 2015-09-20 18:43 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-11-25 15:13 - 2015-09-24 14:34 - 00000000 ____D C:\windows\CryptoGuard
2015-11-25 13:35 - 2015-09-24 14:21 - 00000000 ____D C:\ProgramData\HitmanPro
2015-11-24 18:39 - 2015-10-26 00:25 - 00004182 _____ C:\windows\System32\Tasks\avast! Emergency Update
2015-11-24 18:36 - 2014-08-18 18:41 - 00000000 ____D C:\Users\Sirius\AppData\Local\ElevatedDiagnostics
2015-11-24 18:35 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2015-11-23 12:35 - 2014-02-27 13:04 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-11-23 12:35 - 2013-06-28 23:54 - 00000000 ____D C:\ProgramData\Skype
2015-11-23 12:27 - 2015-10-25 17:30 - 00000000 ____D C:\Program Files (x86)\WinRAR
2015-11-23 12:27 - 2009-07-14 05:45 - 00423880 _____ C:\windows\system32\FNTCACHE.DAT
2015-11-22 18:45 - 2013-05-26 12:39 - 00000000 ____D C:\Users\Sirius\AppData\Local\CrashDumps
2015-11-22 11:02 - 2015-10-25 00:58 - 00000000 ____D C:\Users\Sirius\FRST64
2015-11-22 10:39 - 2013-05-26 11:31 - 00112904 _____ C:\Users\Sirius\AppData\Local\GDIPFONTCACHEV1.DAT
2015-11-22 10:34 - 2013-10-05 18:58 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-11-22 10:33 - 2014-04-11 12:23 - 00000000 ____D C:\ProgramData\Package Cache
2015-11-17 19:59 - 2015-10-11 08:30 - 00000000 ____D C:\Users\Sirius\Desktop\Tor Browser
2015-11-15 19:39 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2015-11-11 22:56 - 2013-08-15 23:52 - 00000000 ____D C:\windows\system32\MRT
2015-11-11 22:51 - 2013-06-02 17:38 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-11-11 22:51 - 2012-09-06 12:56 - 145617392 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-11-11 22:41 - 2013-05-26 12:29 - 01602780 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2015-11-11 22:40 - 2011-04-12 08:55 - 00000000 ____D C:\Program Files\Windows Journal
2015-11-11 16:17 - 2013-05-26 12:30 - 00780488 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-11-11 16:17 - 2013-05-26 12:30 - 00142536 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-11 16:17 - 2013-05-26 12:30 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-11-11 12:02 - 2015-09-15 11:37 - 00000000 ____D C:\Program Files\Common Files\AV
2015-11-08 08:18 - 2015-09-20 07:32 - 00000000 ____D C:\Users\Sirius\Tracing
2015-11-08 00:25 - 2015-10-26 00:25 - 01059656 _____ (AVAST Software) C:\windows\system32\Drivers\aswsnx.sys
2015-11-08 00:25 - 2015-10-26 00:25 - 00449992 _____ (AVAST Software) C:\windows\system32\Drivers\aswsp.sys
2015-11-01 08:12 - 2015-09-06 19:33 - 00000000 ____D C:\Users\Sirius\Documents\Alles eigene Dokumente X
2015-10-31 18:30 - 2014-12-26 18:10 - 00003886 _____ C:\windows\System32\Tasks\Adobe Acrobat Update Task
2015-10-31 14:48 - 2015-09-13 19:59 - 00000000 ___RD C:\Users\Sirius\iCloudDrive

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2013-12-03 16:46 - 2013-09-16 22:20 - 6583664 _____ (AVAST Software) C:\Program Files\AVAST Softwar
2015-09-01 17:11 - 2015-09-01 17:11 - 0007605 _____ () C:\Users\Sirius\AppData\Local\Resmon.ResmonCfg
2011-05-22 14:09 - 2015-09-20 19:53 - 0019624 _____ () C:\ProgramData\iml.xml
2011-05-22 14:09 - 2011-05-22 14:09 - 0019624 _____ () C:\ProgramData\winiml.dat

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\winiml.dat
C:\Users\Sirius\adwcleaner_5.008.exe


Einige Dateien in TEMP:
====================
C:\Users\Sirius\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\windows\system32\winlogon.exe => Datei ist digital signiert
C:\windows\system32\wininit.exe => Datei ist digital signiert
C:\windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\windows\explorer.exe => Datei ist digital signiert
C:\windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\windows\system32\svchost.exe => Datei ist digital signiert
C:\windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\windows\system32\services.exe => Datei ist digital signiert
C:\windows\system32\User32.dll => Datei ist digital signiert
C:\windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\windows\system32\userinit.exe => Datei ist digital signiert
C:\windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\windows\system32\rpcss.dll => Datei ist digital signiert
C:\windows\system32\dnsapi.dll => Datei ist digital signiert
C:\windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-11-20 06:58

==================== Ende von FRST.txt ============================
und die Logdatei von Addition.txt

Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:30-11-2015
durchgeführt von Sirius (2015-11-30 20:11:56)
Gestartet von C:\Users\Sirius\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2013-05-26 10:31:34)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3371264838-1097148996-1726480658-500 - Administrator - Disabled)
Gast (S-1-5-21-3371264838-1097148996-1726480658-501 - Limited - Disabled)
Sirius (S-1-5-21-3371264838-1097148996-1726480658-1001 - Administrator - Enabled) => C:\Users\Sirius

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Kaspersky Internet Security (Enabled - Up to date) {B41C7598-35F6-4D89-7D0E-7ADE69B4047B}
AS: Kaspersky Internet Security (Enabled - Up to date) {0F7D947C-13CC-4207-47BE-41AC12334EC6}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: Kaspersky Internet Security (Enabled) {8C27F4BD-7F99-4CD1-5651-D3EB97674300}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Apple Application Support (32-Bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.4.2233 - AVAST Software)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Camera RAW Plug-In for EPSON Creativity Suite (HKLM-x32\...\{8DAC1AE4-33D1-4A78-8A42-00E09EDECC3E}) (Version: 2.1.0.0 - )
CameraHelperMsi (x32 Version: 13.40.836.0 - Logitech) Hidden
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 1.0.0 - CLIQZ.com)
CX4300_5500_DX4400 Handbuch (HKLM-x32\...\CX4300_5500_DX4400 Handbuch) (Version:  - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC)
EPSON Attach To Email (HKLM-x32\...\InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}) (Version: 1.01.0000 - SEIKO EPSON)
EPSON Attach To Email (x32 Version: 1.01.0000 - SEIKO EPSON) Hidden
EPSON Copy Utility 3 (HKLM-x32\...\{67EDD823-135A-4D59-87BD-950616D6E857}) (Version: 3.2.0.0 - )
EPSON Easy Photo Print (HKLM-x32\...\{B66E665A-DF96-4C38-9422-C7F74BC1B4E5}) (Version: 1.4.2.0 - )
EPSON File Manager (HKLM-x32\...\{2EB81825-E9EE-44F4-8F51-1240C3898DC6}) (Version: 1.3.0.0 - )
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
EPSON Scan Assistant (HKLM-x32\...\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}) (Version: 1.10.00 - )
EPSON-Drucker-Software (HKLM\...\EPSON Printer and Utilities) (Version:  - )
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
File Type Advisor 1.6 (HKLM-x32\...\File Type Advisor_is1) (Version:  - )
Free Audio Converter version 5.0.34.225 (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.34.225 - DVDVideoSoft Ltd.)
Free M4a to MP3 Converter 8.4 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
Free YouTube Download version 3.2.20.1230 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.20.1230 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
GeoGebra 5 (HKLM-x32\...\GeoGebra 5) (Version: 5.0.101.0 - International GeoGebra Institute)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.86 - Google Inc.)
Google Update Helper (x32 Version: 1.3.21.169 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
iCloud (HKLM\...\{B33C558F-772F-4308-A059-390FBF9BAAAE}) (Version: 5.0.2.61 - Apple Inc.)
ICQ 8.1 (build 6327) (HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\ICQ) (Version: 8.1.6327.0 - Mail.Ru)
IM Lock (HKLM-x32\...\IMLock) (Version:  - Comvigo, Inc.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.2.0.1006 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)
iTunes (HKLM\...\{E690A491-702F-4DEC-9977-C015D1DBB57C}) (Version: 12.3.1.23 - Apple Inc.)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{653C1B5A-3287-47B1-8613-0745D4E771C4}) (Version: 15.0.0.463 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 15.0.0.463 - Kaspersky Lab) Hidden
Logitech Vid HD (HKLM-x32\...\Logitech Vid) (Version: 7.2 (7259) - Logitech Inc..)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.40 - Logitech Inc.)
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3bcf8c72-b231-4d28-9f39-3405c22d8b5a}) (Version: 11.0.61030.0 - Microsoft Corporation)
Mozilla Firefox 40.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 40.0.3 (x86 de)) (Version: 40.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.3 - Mozilla)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Nero 2015 (HKLM-x32\...\{847D6818-3BA4-4F41-B5B7-4505D8E012B7}) (Version: 16.0.01300 - Nero AG)
Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 16.0.1002 - Nero AG)
NETGEAR A6210 Genie (HKLM-x32\...\InstallShield_{F4C8CAD7-6E60-438A-8F2A-193C89C9171B}) (Version: 1.0.0.25 - NETGEAR)
NETGEAR A6210 Genie (x32 Version: 1.0.0.25 - NETGEAR) Hidden
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)
PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Prerequisite installer (x32 Version: 16.0.0000 - Nero AG) Hidden
Python 3.4.1 (HKLM-x32\...\{df32bb9e-3ed8-36b5-a649-e8c845c5f3a2}) (Version: 3.4.1150 - Python Software Foundation)
QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)
Skype™ 7.14 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.14.106 - Skype Technologies S.A.)
System Explorer 7.0.0 (HKLM-x32\...\{40F485F7-6478-4896-B0D5-F94BE677EB78}_is1) (Version:  - Mister Group)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.353 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.353 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.353 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4600.4 - TuneUp Software) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
xVideoServiceThief (HKLM-x32\...\{64A2A800-1992-4933-87A0-EB05F95A67E0}) (Version: 2.5.1 - Xesc & Technology)
Zuma Deluxe RA (HKLM-x32\...\Zuma Deluxe RA) (Version:  - )

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Sirius\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay => Keine Datei

==================== Wiederherstellungspunkte =========================

11-11-2015 22:38:33 Windows Update
12-11-2015 23:01:53 Windows Update
17-11-2015 13:51:19 Windows Update
22-11-2015 10:31:22 Python 3.5.0 (32-bit)
24-11-2015 14:31:50 Windows Update
29-11-2015 20:32:27 Windows Update
30-11-2015 15:13:06 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2015-11-25 16:12 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0AD0EF28-8BFE-4F65-86A5-3878083D1AA2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-24] (Google Inc.)
Task: {18C56262-DCA1-409C-9F3D-D59EC9D7989C} - System32\Tasks\{557252A0-EED8-4FA1-A15A-70371C42924D} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.73.105.457/de/abandoninstall?page=tsWLM
Task: {1D681340-ED65-4AF4-8FEF-F68E19E6425A} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {249B6EC9-7937-4E4E-9DBF-75D60DCF6225} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
Task: {3853D509-0C98-406B-B94F-F50545C58D93} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-24] (Google Inc.)
Task: {5FDBC1AD-E96F-415F-AFE0-424F816F8AA7} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2014-01-10] ()
Task: {64180AD9-4F34-4AF3-A220-6270397E7B98} - System32\Tasks\0214dUpdateInfo => C:\ProgramData\Avg_Update_0214d\0214d_AVG-Secure-Search-Update.exe
Task: {6F2E487F-849B-45DE-9358-D6EA7DAAD6C3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-26] (Apple Inc.)
Task: {7526E307-7466-4FD2-8A1A-9E99BBBEE1C0} - System32\Tasks\{2AC9D564-8715-4DB8-8113-65B9192DB68B} => Firefox.exe hxxp://ui.skype.com/ui/0/6.16.0.105/de/abandoninstall?page=tsMain
Task: {9135E992-9FC0-4C93-81EB-9F2F9296EC12} - System32\Tasks\FileAdvisorUpdate => C:\Program Files (x86)\File Type Advisor\fileadvisor.exe [2014-02-24] (File Type Advisor)
Task: {927C6C6D-7E85-4C2D-8CC4-71DD7F5D70CB} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-11] (Adobe Systems Incorporated)
Task: {9BF78643-EB0D-4BD6-AA32-DE33F33412FE} - System32\Tasks\{688A142C-E63D-4137-AC25-07A73EA22D75} => pcalua.exe -a C:\Users\Sirius\epson324571eu.exe -d C:\Users\Sirius
Task: {AB0D4428-EBCE-495B-BCD2-EE72460CFB96} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-25] (Oracle Corporation)
Task: {AE8AFB42-A845-4321-B275-08C05E023FD3} - System32\Tasks\FileAdvisorCheck => C:\Program Files (x86)\File Type Advisor\file-type-advisor.exe [2014-02-24] (                                                            )
Task: {BEEB2E93-4362-401F-A086-6ED9E19A86A2} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-10-26] (AVAST Software)
Task: {C257213D-1C58-4F87-9064-4A6A277A51AD} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2014-05-20] (Nero AG)
Task: {D8FC0CA3-58A6-41A6-A98E-A1EE4C611400} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {EA30B170-7F1F-4364-8A82-B8CCA5AAAF7D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {F78413D1-0641-444C-BF92-FB6452C26D2E} - System32\Tasks\{C4A2D6C0-11E0-47E4-8A99-09122CE63141} => pcalua.exe -a C:\Users\Sirius\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=smt
Task: {FAD609A3-40D4-44FC-9893-BE7E336517B6} - System32\Tasks\{619DCEB5-267C-43AA-8C4E-23E4A282D4B2} => Firefox.exe hxxp://ui.skype.com/ui/0/6.16.59.105/de/abandoninstall?page=tsPlugin

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2012-09-14 06:50 - 2015-02-05 20:07 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-01-20 22:35 - 2015-01-20 22:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-05-13 16:57 - 2014-05-13 16:57 - 00210648 _____ () C:\Program Files (x86)\NETGEAR\A6210\NetgearSwitchUSB.exe
2015-06-25 06:53 - 2015-06-25 06:53 - 00699704 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2015-10-26 00:24 - 2015-10-26 00:24 - 00103376 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-10-26 00:24 - 2015-10-26 00:24 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-11-30 19:47 - 2015-11-30 19:47 - 02812928 _____ () C:\Program Files\AVAST Software\Avast\defs\15113001\algo.dll
2014-03-06 14:00 - 2014-03-06 14:00 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\kpcengine.2.3.dll
2015-10-13 05:46 - 2015-10-13 05:46 - 01040144 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 00237328 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 02145304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 07956504 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00342552 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00029208 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00128536 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2014-06-19 09:50 - 2014-06-19 09:50 - 00122880 _____ () C:\Program Files (x86)\NETGEAR\A6210\Ralink.dll
2015-10-26 00:24 - 2015-10-26 00:24 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-10-15 20:46 - 2014-10-15 20:46 - 00172544 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\2dace9622c68c6ce58d55a6950eeaa95\IsdiInterop.ni.dll
2012-09-06 12:22 - 2012-05-30 12:55 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-09-06 12:27 - 2011-12-16 09:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\ProgramData\TEMP:AD022376

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\...\100sexlinks.com -> 100sexlinks.com

Da befinden sich 4787 mehr Seiten.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3371264838-1097148996-1726480658-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Sirius\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{2BBF4D3E-635A-48A1-8208-89A0EC12CA5E}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{025A7CBA-CB58-4E09-895E-0C6793097C37}] => (Allow) LPort=2869
FirewallRules: [{0A1996EE-51EF-4A71-AFDC-2405B7B42063}] => (Allow) LPort=1900
FirewallRules: [{3C863F79-344C-4A6D-96A4-B779F0C616EB}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{56C82CD5-E2C4-4EAD-AF7F-D412A052E4A5}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{ED5DE7F0-E2EA-4BDB-BE4C-82BE47881EE6}] => (Allow) C:\Users\Sirius\AppData\Roaming\ICQM\icq.exe
FirewallRules: [{17A193F1-DB7E-4C4A-A8BE-B5ACE737A3D4}] => (Allow) C:\Users\Sirius\AppData\Roaming\ICQM\icq.exe
FirewallRules: [{0246A5FA-3958-4FD3-BBAD-B080ECF63959}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{96A7BEC7-E9BA-48AB-8CA6-44AD20B53322}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{CC35A445-14BD-4F73-8588-31BD7B8B3C1F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8E486ECA-DAD3-49D8-8E22-2F51EEB779E7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{B7F99EB3-53B2-4297-ADE7-74DFABE3F555}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{1F82BF7C-D350-445E-B5D1-4E885A78E2C8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{0AD59E22-916E-43EB-86C6-465FB0DDA7A9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{41E2B586-67DD-4A50-B8C9-30F66680A3F6}] => (Allow) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
FirewallRules: [{4FF05F63-20A8-4141-9156-A06B8FB0637D}] => (Allow) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
FirewallRules: [{1897F9CD-2007-4276-96A2-44E34B8AC83C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BCFCF98D-E156-4AB6-A63A-7BDC1F5BFA2A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{3939B105-B193-48C5-BA2D-65A9FF63394F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{CCC39E8D-CADB-465E-B609-887179915A86}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{388BD5BC-2807-4D98-84E5-4405F0DA23E3}] => (Allow) C:\Program Files (x86)\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{C0B11E3F-4F76-45F7-A09B-7B6288089E87}] => (Allow) C:\Program Files (x86)\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{771F279C-B8A3-4B10-B23F-E392199A6F63}] => (Allow) C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\StartNBR.exe
FirewallRules: [{D76E66D4-CDAE-46AC-B56E-9D713D4BC00E}] => (Allow) C:\Program Files (x86)\Nero\KM\NMDllHost.exe
FirewallRules: [{30A20E5E-2D8D-4412-A81B-876DF658DF74}] => (Allow) C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\nero.exe
FirewallRules: [{F2810879-6C03-4B66-BA21-4F7B7A2F6DED}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{46E40BF7-4B06-4F71-92CF-0D2FE2A0BCCD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F100AE73-491B-472F-A4AD-6940A08362F1}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{84157DA8-63A5-4DF1-9CC7-295A6A943093}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{8432E29B-D6D7-40EE-AF9C-B1E210C2F6AD}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{A40F84DB-93A4-49B5-A8BB-4ED168DBEDB6}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{20CC82D7-111E-408A-9B25-DF43F1BE8CBF}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{759A8F87-41C1-40ED-A023-5C584D7BD86A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/30/2015 08:10:18 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1600) WebCacheLocal: Versuch, Datei "C:\Users\Sirius\AppData\Local\Microsoft\Windows\WebCache\V01.chk" für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.

Error: (11/30/2015 08:08:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/30/2015 07:52:49 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 30.11.2015.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2e00

Startzeit: 01d12b9fd8c10a2e

Endzeit: 0

Anwendungspfad: C:\Users\Sirius\Desktop\FRST64.exe

Berichts-ID: 87e645c6-9793-11e5-8251-902b34d4b1e6

Error: (11/30/2015 07:46:15 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 30.11.2015.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 5084

Startzeit: 01d12b9f15b8b24b

Endzeit: 3

Anwendungspfad: C:\Users\Sirius\Downloads\FRST64.exe

Berichts-ID: 9bd3ecf7-9792-11e5-8251-902b34d4b1e6

Error: (11/30/2015 03:05:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/30/2015 00:39:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/29/2015 08:27:42 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/25/2015 05:28:07 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/25/2015 04:34:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/25/2015 04:12:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


Systemfehler:
=============
Error: (11/30/2015 08:10:13 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (11/30/2015 03:13:25 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/30/2015 03:13:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/30/2015 03:06:11 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (11/30/2015 03:03:06 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (11/30/2015 03:02:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/30/2015 03:02:38 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/30/2015 03:02:38 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/30/2015 03:02:37 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/30/2015 03:02:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2015-11-25 16:46:36.200
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Sirius\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-11-25 16:46:36.129
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Sirius\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-11-25 16:46:36.057
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Sirius\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-11-25 16:46:35.982
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Sirius\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-11-25 16:46:35.892
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Sirius\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-11-25 16:46:35.822
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Sirius\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-11-25 16:04:52.863
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Sirius\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-11-25 16:04:52.793
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Sirius\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-11-25 16:04:52.723
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Sirius\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-11-25 16:04:52.653
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Sirius\AppData\Local\Temp\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-3330 CPU @ 3.00GHz
Prozentuale Nutzung des RAM: 27%
Installierter physikalischer RAM: 8134.46 MB
Verfügbarer physikalischer RAM: 5859.64 MB
Summe virtueller Speicher: 16267.13 MB
Verfügbarer virtueller Speicher: 13765.32 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:921.41 GB) (Free:792.75 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F384E437)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=921.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=10 GB) - (Type=27)

==================== Ende von Addition.txt ============================
Bitte gebe mir Auskunft darüber, wie das Ergebnis nach der Auswertung aller bisherigen Logfiles ausgefallen ist.

Welchen Zusammenhang könnten die seltsamen Aktionen an meinem PC, die ich hier ausführlich beschrieb, damals möglicherweise gehabt haben?

Gebe mir bitte eine Rückmeldung, schrauber.
Vielen lieben Dank.

Freundliche Grüße

PS: Es wäre wirklich ein großartiges Geschenk, falls die Auswertung mir die Panik nehmen kann.
__________________
Alt 01.12.2015, 20:18   #19
schrauber
/// the machine
/// TB-Ausbilder
 
?Spurensicherung? - Standard

?Spurensicherung?


Ich sah und sehe nur Adware, sonst nix.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 01.12.2015, 21:28   #20
Mike B
 
?Spurensicherung? - Standard

?Spurensicherung?


Zitat:
Zitat von schrauber Beitrag anzeigen
Ich sah und sehe nur Adware, sonst nix.
Vielen lieben Dank für deine Rückmeldung.

Wenn ich das richtig verstehe, liegt also in deiner Analyse kein Befund eines Trojaners oder sonstiger Spionagesoftware vor- ist das richtig so ?

Können all die merkwürdigen Auffälligkeiten, die mir damals an meinem Compi auffielen, auf die gefundene Adware und PUP zurückzuführen sein bzw. kann Adware solche seltsamen Dinge verursachen ?

Und, geht es weiter oder ist mit der letzten FRST.text- Logdatei alles abgeschlossen und ist mein PC nun bereinigt ?

Vielen Dank schrauber, für deine (bisherige) Hilfe und Begleitung.

Freundliche Grüße


Alt 02.12.2015, 16:44   #21
schrauber
/// the machine
/// TB-Ausbilder
 
?Spurensicherung? - Standard

?Spurensicherung?


Adware kann auch etliches verbiegen, das kann man so nicht mehr klar abgrenzen.
Wir machen noch Kontrollscans


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
--> ?Spurensicherung?

Alt 03.12.2015, 21:42   #22
Mike B
 
?Spurensicherung? - Standard

?Spurensicherung?


Hallo schrauber

Melde mich morgen zurück, fühle mich heute wie gerädert. Sorry!

Beste Grüsse

Alt 04.12.2015, 16:26   #23
schrauber
/// the machine
/// TB-Ausbilder
 
?Spurensicherung? - Standard

?Spurensicherung?


ok
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 06.12.2015, 22:59   #24
Mike B
 
?Spurensicherung? - Standard

?Spurensicherung?


Hallo schrauber

Sorry, dass ich mich erst jetzt zurück melde. Jetzt wissen wir warum ich mich Letztens wie gerädert gefühlt habe, weil eine Rachenentzündung im Anmarsch war, welche ich nun habe.

Woher kommen denn bitte plötzlich die 19 Befunde her und sind diese gefährlich?

Hier nun der ESET-Scan:

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=bd4c6465971ac14cbf45209cb73d9a61
# end=init
# utc_time=2015-12-06 07:22:38
# local_time=2015-12-06 08:22:38 (+0100, Mitteleuropäische Zeit)
# country="Switzerland"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 27068
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=bd4c6465971ac14cbf45209cb73d9a61
# end=updated
# utc_time=2015-12-06 07:26:19
# local_time=2015-12-06 08:26:19 (+0100, Mitteleuropäische Zeit)
# country="Switzerland"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=bd4c6465971ac14cbf45209cb73d9a61
# engine=27068
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-12-06 09:14:16
# local_time=2015-12-06 10:14:16 (+0100, Mitteleuropäische Zeit)
# country="Switzerland"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 88 251320 3624612 0 0
# compatibility_mode_1='Kaspersky Internet Security'
# compatibility_mode=1296 16777213 100 100 451162 53512738 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 152980 201066306 0 0
# scanned=326351
# found=19
# cleaned=0
# scan_time=6476
sh=468C48A6C27291369E427EEC08681642BFED455E ft=1 fh=913a4b5265448c0b vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\$RECYCLE.BIN\S-1-5-21-3371264838-1097148996-1726480658-1001\$R5YUKRU.exe"
sh=AAA623029121715DD514658EB72C344C182CE5D4 ft=1 fh=2063f527e15bc225 vn="Variante von MSIL/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\JustCloud\BackupStackUI.dll.vir"
sh=A34823AE5BFE9A9395F76D5858F4D944D11159D6 ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\defsearchp@gmail.com!1.0.0.1038.xpi.vir"
sh=36AA7400EE35CB6CA6CF32C46A8BB31E679C4FFC ft=1 fh=da43a5723df0ecd9 vn="Variante von Win32/ELEX.FP evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZipper\dup.exe.vir"
sh=81461DAC78F68863E41C39776093AE4584AA9AA9 ft=1 fh=cbfed2a22de9ee45 vn="Variante von Win32/ELEX.BU evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZipper\eUninstall.exe.vir"
sh=BA3084EE744CA602991B245162D32FC2AA38C4EB ft=1 fh=4229c61246f7f925 vn="Variante von Win32/ELEX.BR evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZipper\TrayDownloader.exe.vir"
sh=9650EF30CFD36FB4DEB468C3465B853E5438EBD3 ft=1 fh=001b636159c29bf6 vn="Variante von Win32/ELEX.CK evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZipper\winzipersvc.exe.vir"
sh=67253D17261151B49F7E293CDA36C87E31CB5C35 ft=1 fh=7335aecef2f9fac8 vn="Variante von Win32/ELEX.BU evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZipper\WinZipper.exe.vir"
sh=A416ACC21756868987F275190BD1033BF74E180C ft=1 fh=d3699c00a2c5c199 vn="Variante von Win32/Adware.Synatix.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sirius\AppData\Local\DownloadGuide\Offers\protegere.exe.vir"
sh=6E3B67D520770342CF5AED0F013D34B2386EE776 ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sirius\AppData\Roaming\Mozilla\Firefox\Profiles\0w280uar.default\Extensions\searchengine@gmail.com\chrome\content\toolbar.js.vir"
sh=106E0DD0A8B0FF0026F5A3F2B63F0E15936545A8 ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sirius\AppData\Local\Mozilla\Firefox\Profiles\0w280uar.default\cache2\entries\D5A001714A9C63336522CB1636D870B32656047C"
sh=F43DC2757D89158E061EB109C3D4B450C9EDA155 ft=1 fh=f0ef89835c075e10 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sirius\AppData\Local\Temp\DMR\dmr_72.exe"
sh=77BF90EEC15B613C3EFCE5E365D0133412FDCA62 ft=1 fh=9d478429c390c771 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sirius\Dateien aus Papierkorb 2\Paint NET - CHIP-Installer.exe"
sh=6180F9756D6ED518B8C3B2C25348A1F427BA6552 ft=1 fh=723f9bef15bee5ff vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sirius\Desktop\Glary Utilities - CHIP-Installer.exe"
sh=060350A9C6E04F0E2C32A5C68078CEFF107A5DC7 ft=1 fh=5cc38f176724f508 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sirius\Desktop\Process Explorer - CHIP-Installer.exe"
sh=0ED49CD81F9013042CB0D60376A444C4944D7F3B ft=1 fh=6ce28b3f5010c6bb vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sirius\Desktop\Process Hacker - CHIP-Installer.exe"
sh=2D2E3C2C13420D52271821700E70E17FB3439E71 ft=1 fh=071b3bb6fbe8090e vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sirius\Desktop\SpyBot Search Destroy - CHIP-Installer.exe"
sh=0E84496E7BDD950E4D921B34FF79976F3BB73294 ft=1 fh=de2d7dd1f30a55bd vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sirius\Downloads\7 Zip 32 Bit - CHIP-Installer.exe"
sh=3CF0A3288587F10A98DBF728720FF972934ADB33 ft=0 fh=0000000000000000 vn="Variante von Win32/AdWare.RegTweaker.A Anwendung" ac=I fn="C:\Users\Sirius\Downloads\wisepcdoctor_Setup.rar"
Beste Grüße und nochmals vielen lieben Dank an dich, lieber schrauber.

Alt 07.12.2015, 21:53   #25
schrauber
/// the machine
/// TB-Ausbilder
 
?Spurensicherung? - Standard

?Spurensicherung?


Naja, schau mal auf die Funde .

Adware in der Quarantäne vom AdwCleaner, dein FF Profil hat noch bissl Adware, und....

Zitat:
C:\Users\Sirius\Desktop\Glary Utilities - CHIP-Installer.exe

C:\Users\Sirius\Desktop\Process Explorer - CHIP-Installer.exe

C:\Users\Sirius\Desktop\Process Hacker - CHIP-Installer.exe

C:\Users\Sirius\Desktop\SpyBot Search Destroy - CHIP-Installer.exe

C:\Users\Sirius\Downloads\7 Zip 32 Bit - CHIP-Installer.exe
Die größte legale Malwareschleuder Deutschlands:

Downloadverhalten überdenken:
CHIP-Installer - was ist das? - Anleitungen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 14.12.2015, 18:13   #26
Mike B
 
?Spurensicherung? - Standard

?Spurensicherung?


Hallo schrauber

Also jetzt stehe ich gerade vor einem großen Fragezeichen, und zwar deshalb:
Zitat:
Zitat von schrauber Beitrag anzeigen
Naja, schau mal auf die Funde .

Adware in der Quarantäne vom AdwCleaner
Konkret:
Als ich damals (da war ich noch nicht im Trojaner-Board registriert) einen gründlichen Virenscan mit Avast durchführte, fand Avast die bereits zu anfangs genannten fünf Infektionen.

a) C:\AdwCleaner\Quarantine\C\Program Files (x86)\FindRight\updateFindRight.exe.vir

b) C:\AdwCleaner\Quarantine\C\Program Files (x86)\FindRight\bin\UtilFindRight.exe.vir

c) C:\AdwCleaner\Quarantine\C\Users\Sirius\AppData\Local\DownloadGuide\Offers\ResultsAlphaSetup.exe.virI>nsis.hdr

d) C:\AdwCleaner\Quarantine\C\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe.vir

e) C:\AdwCleaner\Quarantine\C\ProgramData\WindowsMangerProtect\update\update.exe.vir

Status war:

a) Win32:Malware-gen

b) Win32:Malware-gen

c) PUP:NSIS.BrowseFox-D[PUP]

d) Win32:Rootkit-gen[Rtk]

e) Win32: Dropper-gen[Drp]

Genau so wie hier dargestellt, wurden die von Avast angezeigt. Mich überrascht jetzt am meisten dass die ja alle in Quarantäne waren und einige davon von Avast als hohes Risiko eingestuft wurden.

Dass mit meinem Rechner was nicht stimmen konnte, war offensichtlich. Doch wie lässt sich das mit der AdwCleaner-Quarantäne und den Avast-Befunden erklären?

War vielleicht der AdwCleaner selbst das übel oder kann es sein, dass das Zeugs in der Quarantäne sich plötzlich reaktivierte?

Was denkst du bitte, wie man sich das erklären könnte?

Zwischenzeitlich habe ich wieder ein Problem und zwar folgendes:
Nicht immer, aber sehr oft, wenn ich etwas zu den Lesezeichen hinzufügen möchte, besteht plötzlich seit Tagen das Problem, dass der ganze Prozess extrem Lange dauert und oft braucht es einen zweiten Anlauf, um die gewünschte Seite zu den Lesezeichen hinzuzufügen.

Vielen lieben Dank und beste Grüße

Alt 17.12.2015, 23:45   #27
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
?Spurensicherung? - Standard

?Spurensicherung?


Schritt 1



Bitte starte FRST erneut, markiere auch die checkbox und drücke auf Untersuchen.
Bitte poste mir den Inhalt der beiden Logs die erstellt werden.
__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Antwort
Seite 2 von 2 1 2

Themen zu ?Spurensicherung?
aktuelle, avast, bot, computer, entfernt, experten, forum, freeware, google, guten, helft, infektion, installiert, kaspersky, microsoft, prozesse, rechner, spuren, system, thema, virenschutzprogramm, woche, wochen, worte, zurückverfolgen


« Malwarebytes Logdatei | Mein PC Ist plötzlich sehr langsam und hängt sich teilweise auch plötzlich auf. »


Zum Thema ?Spurensicherung? - Downloade Dir bitte Malwarebytes Anti-Malware Installiere das Programm in den vorgegebenen Pfad. ( Bebilderte Anleitung zu MBAM ) Starte Malwarebytes' Anti-Malware (MBAM). Klicke im Anschluss auf Scannen , wähle den - ?Spurensicherung?...
Archiv
Du betrachtest: ?Spurensicherung? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131