Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Crypt.EPACK.1243 scheint den Rechner lahm zu legen (https://www.trojaner-board.de/168207-crypt-epack-1243-scheint-rechner-lahm-legen.html)

Joahpi 24.06.2015 22:07
Crypt.EPACK.1243 scheint den Rechner lahm zu legen
 
Liste der Anhänge anzeigen (Anzahl: 1)
Guten Tag alle zusammen.
Seit einer Woche macht unser Rechner Probleme. Sobald eine Internetverbindung besteht, quillt der Arbeitsspeicher über und der Rechner wir extrem langsam.
Die Netzwerkaktivität ist sehr stark. An die Nutzung des Rechners ist nicht mehr zu denken.
In der ersten Verzweiflung habe ich versucht, einige Prozesse die meiner Ansicht nach das System zu stark belasten, zu beenden. Das hat aber nichts verändert. Der Echtzeitscanner von Avira lässt sich nicht mehr aktivieren, das ist ein weiteres Phänomen.
Danach habe ich dann versucht, das System zurück auf einen Widerherstellungspunkt zu stellen, das Scheiter jedoch an einer Datei im Verzeichnis C:/Windows/System32/Drivers/ die sich nicht löschen lässt und vom Datum her mit dem Beginn der Probleme übereinstimmt. Als weiteren Übeltäter habe ich die Datei Syshost.exe mit gleichem Datum ausgemacht, in der sich der Trojaner Crypt.EPACK.1243 eingeschlichen haben soll. Den habe ich nun mit Avira Antivir und Malwarebytes versucht zu entfernen, das Problem besteht jedoch weiterhin.

Nun weis ich nicht mehr weiter

Inzwischen habe ich Defogger, frst64 und ohne Erfolg Gmer durchlaufen lassen, da bekomme ich jedoch die Fehlermeldung "C:\Windows\system32\config\system: der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird."

Ich hoffe mir kann jemand helfen

Joachim

cosinus 24.06.2015 22:13
Hi und :hallo:

Logs bitte nicht anhängen, notfalls splitten und über mehrere Postings verteilt posten

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Joahpi 24.06.2015 22:19
OK danke, ich versuche es noch einmal, hier das Ergebnis von AVIRA
Code:
24.06.2015 21:23 [System-Scanner] Malware gefunden
      Die Datei
      'C:\$Recycle.Bin\S-1-5-21-3928908445-2049478909-3784465887-1001\$RJVOR3K.vir'
      enthielt einen Virus oder unerwünschtes Programm 'ADWARE/Iminent.Gen' [adware].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1aa0ded8.qua'
      verschoben!

24.06.2015 21:23 [System-Scanner] Suche
      Suchlauf beendet [Der Suchlauf wurde abgebrochen!].
      Anzahl Dateien:        278043
      Anzahl Verzeichnisse:        3968
      Anzahl Malware:        3
      Anzahl Warnungen:        0

24.06.2015 21:23 [System-Scanner] Malware gefunden
      Die Datei
      'C:\$Recycle.Bin\S-1-5-21-3928908445-2049478909-3784465887-1001\$RUR9QUA.vir'
      enthielt einen Virus oder unerwünschtes Programm 'PUA/DownloadGuide.Gen'
      [riskware].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '48ca8429.qua'
      verschoben!

24.06.2015 21:23 [System-Scanner] Malware gefunden
      Die Datei
      'C:\$Recycle.Bin\S-1-5-21-3928908445-2049478909-3784465887-1001\$RWP7MST.vir'
      enthielt einen Virus oder unerwünschtes Programm 'TR/Crypt.EPACK.1245' [trojan].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '505fab8f.qua'
      verschoben!

24.06.2015 20:34 [System-Scanner] Suche
      Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
      Anzahl Dateien:        4305
      Anzahl Verzeichnisse:        0
      Anzahl Malware:        0
      Anzahl Warnungen:        0

24.06.2015 20:31 [Planer] Auftrag gestartet
      Auftrag "Schnelle Systemprüfung"
      wurde erfolgreich gestartet.

24.06.2015 20:15 [Planer] Auftrag gestartet
      Auftrag "Vollständige Systemprüfung"
      wurde erfolgreich gestartet.


      VDF Version:       

24.06.2015 06:00 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.32.0
      VDF Version:        8.11.242.94

24.06.2015 05:59 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

24.06.2015 05:58 [Echtzeit-Scanner] Dienst gestoppt
      Der Dienst wurde gestoppt.

24.06.2015 05:58 [Planer] Dienst gestoppt
      Der Dienst wurde gestoppt.

24.06.2015 05:46 [Updater] Update nicht ausgeführt
      Das Update von Computer *****-PC (127.0.0.1) von "'unbekannt'" ist
      fehlgeschlagen.
      Keine Internetverbindung.
      Es wurden keine neuen Dateien geladen.

24.06.2015 05:46 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

24.06.2015 05:37 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.572
      Engine Version:       
      VDF Version:       

24.06.2015 05:37 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.32.0
      VDF Version:        8.11.242.94

24.06.2015 05:36 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

23.06.2015 17:01 [Echtzeit-Scanner] Dienst gestoppt
      Der Dienst wurde gestoppt.

23.06.2015 17:01 [Planer] Dienst gestoppt
      Der Dienst wurde gestoppt.

23.06.2015 17:01 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.572
      Engine Version:       
      VDF Version:       

23.06.2015 17:01 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.32.0
      VDF Version:        8.11.242.94

23.06.2015 17:00 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

23.06.2015 16:52 [Updater] Update nicht ausgeführt
      Das Update von Computer *****-PC (127.0.0.1) von "'unbekannt'" ist
      fehlgeschlagen.
      Keine Internetverbindung.
      Es wurden keine neuen Dateien geladen.

23.06.2015 16:52 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

23.06.2015 16:30 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.572
      Engine Version:       
      VDF Version:       

23.06.2015 16:30 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.32.0
      VDF Version:        8.11.242.94

23.06.2015 16:29 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

23.06.2015 16:18 [Echtzeit-Scanner] Dienst gestoppt
      Der Dienst wurde gestoppt.

23.06.2015 16:18 [Planer] Dienst gestoppt
      Der Dienst wurde gestoppt.

23.06.2015 16:17 [System-Scanner] Suche
      Suchlauf beendet [Der Suchlauf wurde abgebrochen!].
      Anzahl Dateien:        1
      Anzahl Verzeichnisse:        0
      Anzahl Malware:        0
      Anzahl Warnungen:        0

23.06.2015 14:52 [Updater] Update nicht ausgeführt
      Das Update von Computer *****-PC (127.0.0.1) von "'unbekannt'" ist
      fehlgeschlagen.
      Keine Internetverbindung.
      Es wurden keine neuen Dateien geladen.

23.06.2015 14:52 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

23.06.2015 06:09 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.242.94
      xbv00215.vdf 8.11.242.82
      xbv00216.vdf 8.11.242.84
      xbv00217.vdf 8.11.242.86
      xbv00218.vdf 8.11.242.90
      xbv00219.vdf 8.11.242.92
      xbv00220.vdf 8.11.242.94
      local001.vdf

23.06.2015 05:57 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

23.06.2015 05:56 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.572
      Engine Version:       
      VDF Version:       

23.06.2015 05:56 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.32.0
      VDF Version:        8.11.242.80

23.06.2015 05:56 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

22.06.2015 22:03 [Echtzeit-Scanner] Dienst gestoppt
      Der Dienst wurde gestoppt.

22.06.2015 22:03 [Planer] Dienst gestoppt
      Der Dienst wurde gestoppt.

22.06.2015 21:12 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.572
      Engine Version:       
      VDF Version:       

22.06.2015 21:12 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.32.0
      VDF Version:        8.11.242.80

22.06.2015 21:09 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

22.06.2015 21:08 [Echtzeit-Scanner] Dienst gestoppt
      Der Dienst wurde gestoppt.

22.06.2015 21:08 [Planer] Dienst gestoppt
      Der Dienst wurde gestoppt.

22.06.2015 20:54 [Updater] Update nicht ausgeführt
      Das Update von Computer *****-PC (127.0.0.1) von "'unbekannt'" ist
      fehlgeschlagen.
      Keine Internetverbindung.
      Es wurden keine neuen Dateien geladen.

22.06.2015 20:54 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

22.06.2015 20:50 [System-Scanner] Suche
      Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
      Anzahl Dateien:        1
      Anzahl Verzeichnisse:        0
      Anzahl Malware:        0
      Anzahl Warnungen:        0

22.06.2015 20:45 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.572
      Engine Version:       
      VDF Version:       

22.06.2015 20:44 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.32.0
      VDF Version:        8.11.242.80

22.06.2015 20:44 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

22.06.2015 20:36 [Echtzeit-Scanner] Dienst gestoppt
      Der Dienst wurde gestoppt.

22.06.2015 20:36 [Planer] Dienst gestoppt
      Der Dienst wurde gestoppt.

22.06.2015 20:28 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.572
      Engine Version:       
      VDF Version:       

22.06.2015 20:28 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.32.0
      VDF Version:        8.11.242.80

22.06.2015 20:28 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

22.06.2015 14:51 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.242.80
      xbv00205.vdf 8.11.242.30
      xbv00206.vdf 8.11.242.40
      xbv00207.vdf 8.11.242.50
      xbv00208.vdf 8.11.242.60
      xbv00209.vdf 8.11.242.70
      xbv00210.vdf 8.11.242.72
      xbv00211.vdf 8.11.242.74
      xbv00212.vdf 8.11.242.76
      xbv00213.vdf 8.11.242.78
      xbv00214.vdf 8.11.242.80
      local000.vdf
      webcat2.dat
      webcat3.dat
      webcat4.dat

22.06.2015 14:42 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

21.06.2015 14:14 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.572
      Engine Version:       
      VDF Version:       

21.06.2015 14:14 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.32.0
      VDF Version:        8.11.242.14

21.06.2015 14:13 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

21.06.2015 14:12 [Echtzeit-Scanner] Dienst gestoppt
      Der Dienst wurde gestoppt.

21.06.2015 14:12 [Planer] Dienst gestoppt
      Der Dienst wurde gestoppt.

21.06.2015 13:24 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.242.14
      xbv00200.vdf 8.11.241.242
      xbv00201.vdf 8.11.241.246
      xbv00202.vdf 8.11.241.254
      xbv00203.vdf 8.11.242.6
      xbv00204.vdf 8.11.242.14
      local001.vdf
      webcat1.dat
      webcat2.dat
      webcat3.dat
      webcat4.dat

21.06.2015 13:23 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

21.06.2015 13:14 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.572
      Engine Version:       
      VDF Version:       

21.06.2015 13:14 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.32.0
      VDF Version:        8.11.241.240

21.06.2015 13:14 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

20.06.2015 16:25 [Echtzeit-Scanner] Dienst gestoppt
      Der Dienst wurde gestoppt.

20.06.2015 16:25 [Planer] Dienst gestoppt
      Der Dienst wurde gestoppt.

20.06.2015 16:22 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

20.06.2015 09:19 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.241.240
      xbv00196.vdf 8.11.241.232
      xbv00197.vdf 8.11.241.234
      xbv00198.vdf 8.11.241.238
      xbv00199.vdf 8.11.241.240
      local000.vdf
      webcat1.dat
      webcat2.dat
      webcat3.dat
      webcat4.dat

20.06.2015 09:18 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

19.06.2015 18:53 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.572
      Engine Version:       
      VDF Version:       

19.06.2015 18:53 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.32.0
      VDF Version:        8.11.241.220

19.06.2015 18:52 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

19.06.2015 18:02 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.572
      Engine Version:       
      VDF Version:       

19.06.2015 18:02 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.32.0
      VDF Version:        8.11.241.220

19.06.2015 18:01 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

19.06.2015 18:00 [Echtzeit-Scanner] Dienst gestoppt
      Der Dienst wurde gestoppt.

19.06.2015 18:00 [Planer] Dienst gestoppt
      Der Dienst wurde gestoppt.

19.06.2015 17:59 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Windows\System32\drivers\203938b5.sys'
      wurde ein Virus oder unerwünschtes Programm 'HEUR/APC (Cloud)' [HEUR/APC]
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

19.06.2015 17:53 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.241.220
      xbv00194.vdf 8.11.241.212
      xbv00195.vdf 8.11.241.220
      local001.vdf
      webcat1.dat
      webcat3.dat
      webcat4.dat

19.06.2015 17:52 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

19.06.2015 13:55 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aecore.dll 8.3.7.2
      aeheur.dll 8.1.4.1746
      aeoffice.dll 8.3.1.38
      aescript.dll 8.2.2.74
      aeset.dat 8.3.32.0
      aevdf.dat 8.11.241.204
      xbv00189.vdf 8.11.241.174
      xbv00190.vdf 8.11.241.176
      xbv00191.vdf 8.11.241.188
      xbv00192.vdf 8.11.241.196
      xbv00193.vdf 8.11.241.204
      local000.vdf
      webcat1.dat
      webcat2.dat
      webcat3.dat
      webcat4.dat

19.06.2015 13:53 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

18.06.2015 19:24 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.241.166
      xbv00184.vdf 8.11.241.150
      xbv00185.vdf 8.11.241.160
      xbv00186.vdf 8.11.241.162
      xbv00187.vdf 8.11.241.164
      xbv00188.vdf 8.11.241.166
      local001.vdf
      webcat0.dat
      webcat1.dat
      webcat2.dat
      webcat3.dat
      webcat4.dat

18.06.2015 19:24 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

18.06.2015 11:10 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.241.140
      xbv00180.vdf 8.11.241.116
      xbv00181.vdf 8.11.241.118
      xbv00182.vdf 8.11.241.128
      xbv00183.vdf 8.11.241.140
      local000.vdf
      webcat2.dat
      webcat3.dat
      webcat4.dat

18.06.2015 11:10 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

17.06.2015 20:38 [System-Scanner] Suche
      Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
      Anzahl Dateien:        4482
      Anzahl Verzeichnisse:        0
      Anzahl Malware:        0
      Anzahl Warnungen:        0

17.06.2015 20:33 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.241.108
      xbv00176.vdf 8.11.241.102
      xbv00177.vdf 8.11.241.104
      xbv00178.vdf 8.11.241.106
      xbv00179.vdf 8.11.241.108
      local001.vdf
      webcat2.dat
      webcat3.dat
      webcat4.dat

17.06.2015 20:31 [Planer] Auftrag gestartet
      Auftrag "Schnelle Systemprüfung"
      wurde erfolgreich gestartet.

17.06.2015 20:31 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

17.06.2015 11:37 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.241.100
      xbv00167.vdf 8.11.241.40
      xbv00168.vdf 8.11.241.42
      xbv00169.vdf 8.11.241.54
      xbv00170.vdf 8.11.241.64
      xbv00171.vdf 8.11.241.74
      xbv00172.vdf 8.11.241.84
      xbv00173.vdf 8.11.241.94
      xbv00174.vdf 8.11.241.98
      xbv00175.vdf 8.11.241.100
      local000.vdf
      webcat2.dat
      webcat4.dat
      repair.rdf 1.0.8.54

17.06.2015 11:36 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

16.06.2015 19:48 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      webcat2.dat
      webcat3.dat
      webcat4.dat

16.06.2015 19:47 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

16.06.2015 16:30 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.241.36
      xbv00152.vdf 8.11.240.234
      xbv00153.vdf 8.11.240.246
      xbv00154.vdf 8.11.241.2
      xbv00155.vdf 8.11.241.14
      xbv00156.vdf 8.11.241.16
      xbv00157.vdf 8.11.241.18
      xbv00158.vdf 8.11.241.20
      xbv00159.vdf 8.11.241.22
      xbv00160.vdf 8.11.241.24
      xbv00161.vdf 8.11.241.26
      xbv00162.vdf 8.11.241.28
      xbv00163.vdf 8.11.241.30
      xbv00164.vdf 8.11.241.32
      xbv00165.vdf 8.11.241.34
      xbv00166.vdf 8.11.241.36
      local001.vdf
      webcat1.dat
      webcat2.dat
      webcat3.dat
      webcat4.dat
      repair.rdf 1.0.8.52

16.06.2015 16:29 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

15.06.2015 14:40 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.240.218
      xbv00146.vdf 8.11.240.198
      xbv00147.vdf 8.11.240.200
      xbv00148.vdf 8.11.240.202
      xbv00149.vdf 8.11.240.204
      xbv00150.vdf 8.11.240.206
      xbv00151.vdf 8.11.240.218
      local000.vdf
      webcat2.dat
      webcat3.dat
      webcat4.dat
      repair.rdf 1.0.8.46

15.06.2015 14:39 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

14.06.2015 20:39 [Updater] Update erfolgreich durchgeführt
      Update auf Computer *****-PC (192.168.179.26) von
      "hxxp://personal.avira-update.com/update" wurde erfolgreich durchgeführt.
      Es sind keine neuen Engine/VDF Dateien verfügbar.

14.06.2015 20:39 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

14.06.2015 18:41 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.240.196
      xbv00136.vdf 8.11.240.112
      xbv00137.vdf 8.11.240.126
      xbv00138.vdf 8.11.240.140
      xbv00139.vdf 8.11.240.142
      xbv00140.vdf 8.11.240.144
      xbv00141.vdf 8.11.240.158
      xbv00142.vdf 8.11.240.170
      xbv00143.vdf 8.11.240.182
      xbv00144.vdf 8.11.240.194
      xbv00145.vdf 8.11.240.196
      local001.vdf
      webcat2.dat
      webcat3.dat
      webcat4.dat

14.06.2015 18:38 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

13.06.2015 12:06 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.240.98
      xbv00128.vdf 8.11.240.54
      xbv00129.vdf 8.11.240.56
      xbv00130.vdf 8.11.240.58
      xbv00131.vdf 8.11.240.60
      xbv00132.vdf 8.11.240.64
      xbv00133.vdf 8.11.240.66
      xbv00134.vdf 8.11.240.84
      xbv00135.vdf 8.11.240.98
      local000.vdf
      webcat2.dat
      webcat3.dat
      webcat4.dat
      repair.rdf 1.0.8.44

13.06.2015 11:59 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

13.06.2015 11:50 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.572
      Engine Version:       
      VDF Version:       

13.06.2015 11:50 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.30.48
      VDF Version:        8.11.240.52

13.06.2015 11:49 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

12.06.2015 08:01 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

11.06.2015 18:04 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aeheur.dll 8.1.4.1734
      aescript.dll 8.2.2.72
      aeset.dat 8.3.30.48
      aevdf.dat 8.11.240.34
      xbv00118.vdf 8.11.240.28
      xbv00119.vdf 8.11.240.30
      xbv00120.vdf 8.11.240.32
      xbv00121.vdf 8.11.240.34
      local000.vdf
      webcat1.dat
      webcat2.dat
      webcat3.dat
      webcat4.dat
      repair.rdf 1.0.8.42

11.06.2015 18:03 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

11.06.2015 10:17 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.240.14
      xbv00117.vdf 8.11.240.14
      local001.vdf
      webcat1.dat
      webcat3.dat
      webcat4.dat

11.06.2015 10:16 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

11.06.2015 03:40 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.572
      Engine Version:       
      VDF Version:       

11.06.2015 03:40 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.30.46
      VDF Version:        8.11.239.254

11.06.2015 03:40 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

11.06.2015 03:37 [Echtzeit-Scanner] Dienst gestoppt
      Der Dienst wurde gestoppt.

11.06.2015 03:37 [Planer] Dienst gestoppt
      Der Dienst wurde gestoppt.

11.06.2015 03:03 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aeheur.dll 8.1.4.1722
      aeoffice.dll 8.3.1.34
      aescript.dll 8.2.2.70
      aeset.dat 8.3.30.46
      aedroid.dll 8.4.3.238
      aemobile.dll 8.1.7.4
      aevdf.dat 8.11.239.254
      xbv00110.vdf 8.11.239.216
      xbv00111.vdf 8.11.239.218
      xbv00112.vdf 8.11.239.220
      xbv00113.vdf 8.11.239.222
      xbv00114.vdf 8.11.239.224
      xbv00115.vdf 8.11.239.240
      xbv00116.vdf 8.11.239.254
      local000.vdf
      webcat1.dat
      webcat3.dat
      webcat4.dat

11.06.2015 03:00 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

10.06.2015 15:35 [System-Scanner] Suche
      Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
      Anzahl Dateien:        4307
      Anzahl Verzeichnisse:        0
      Anzahl Malware:        0
      Anzahl Warnungen:        0

10.06.2015 15:31 [Planer] Auftrag gestartet
      Auftrag "Schnelle Systemprüfung"
      wurde erfolgreich gestartet.

10.06.2015 15:22 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      Product.Config
      Product.Config
      Product.Config
      Product.Config
      Product.Config
      avinet.dll 15.0.11.478
      avipc.dll 15.0.11.478
      avmres.dll 15.0.11.478
      Win32APIWrapper.dll 15.0.11.478
      systemutilities.dll 15.0.11.546
      productutilities.dll 15.0.11.572
      avwinll.dll 15.0.11.478
      cfglib.dll 15.0.11.550
      libeay32.dll 1.0.1.9
      msgclient.dll 15.0.11.550
      CommonImageRc.dll 15.0.11.478
      ProductImageRc.dll 15.0.11.478
      ProductImageRc.dll 15.0.11.478
      ProductImageRc.dll 15.0.11.478
      ProductImageRc.dll 15.0.11.478
      CommonTextRc.dll 15.0.11.478
      ProductTextRc.dll 15.0.11.478
      ProductTextRc.dll 15.0.11.478
      ProductTextRc.dll 15.0.11.478
      ProductTextRc.dll 15.0.11.478
      scewxmlw.dll 15.0.11.478
      ssleay32.dll 1.0.1.9
      update.dll 15.0.11.574
      UpdateUtilities.dll 15.0.11.572
      update.exe 15.0.11.572
      updaterc.dll 15.0.11.478
      updgui.dll 15.0.11.574
      updguirc.dll 15.0.11.478
      updrgui.exe 15.0.11.550
      avacl.dll 15.0.11.478
      avadmin.exe 15.0.11.550
      avarkt.dll 15.0.11.478
      avbb.dll 15.0.11.550
      avcenter.exe 15.0.11.574
      avconfig.cpl 15.0.11.550
      avconfig.dll 15.0.11.574
      avconfig.exe 15.0.11.574
      avconfigrc.dll 15.0.11.478
      avesvc.dll 15.0.11.550
      avesvcr.dll 15.0.11.478
      avevtlog.dll 15.0.11.550
      avevtrc.dll 15.0.11.478
      avgio.dll 15.0.11.478
      avgnt.exe 15.0.11.574
      avgntflt.cat
      avgntflt.inf
      avgntflt.sys 15.0.11.550
      avguard.exe 15.0.11.572
      avguard.xml 15.0.11.478
      avipbb.cat
      avipbb.inf
      avipbb.sys 15.0.11.550
      avipc64.dll 15.0.11.478
      avlode.dll 15.0.11.572
      avmailc.exe 15.0.11.550
      avmailc7.exe 15.0.11.550
      avmailcr.dll 15.0.11.478
      avmaildlgcr.dll 15.0.11.478
      avmcdlg.exe 15.0.11.574
      avnotify.dll 15.0.11.478
      avnotify.exe 15.0.11.574
      avpref.dll 15.0.11.478
      avreg.dll 15.0.11.550
      avrep.dll 15.0.11.478
      Repair.dll 15.0.11.572
      rdf.dll 15.0.11.546
      avrestart.exe 15.0.11.574
      avscan.exe 15.0.11.574
      avscanrc.dll 15.0.11.478
      avscplr.dll 15.0.11.550
      avshadow.exe 15.0.11.574
      avsmtp.dll 15.0.11.478
      avupgsvc.exe 15.0.11.478
      avwebg7.exe 15.0.11.572
      avwebgrc.dll 15.0.11.478
      avwebgrd.exe 15.0.11.572
      avwin.chm
      avwmi.dll 15.0.11.550
      avwsc.exe 15.0.11.550
      build.dat 15.0.11.574
      ccavscanex.dll 15.0.11.574
      ccavscanexrc.dll 15.0.11.478
      ccev.dll 15.0.11.574
      ccevrc.dll 15.0.11.478
      ccevw.dll 15.0.11.550
      ccfwmgt.dll 15.0.11.574
      ccfwmgtrc.dll 15.0.11.478
      ccgen.dll 15.0.11.574
      ccgenrc.dll 15.0.11.478
      avira_de____fm.exe 1.1.37.30000
      ccgenw.dll 15.0.11.550
      ccgrdrc.dll 15.0.11.478
      ccgrdw.dll 15.0.11.550
      ccguard.dll 15.0.11.574
      cchips.dll 15.0.11.574
      cchipsrc.dll 15.0.11.478
      cclic.dll 15.0.11.574
      cclicrc.dll 15.0.11.478
      cclicw.dll 15.0.11.550
      ccmainrc.dll 15.0.11.478
      ccmgrdrc.dll 15.0.11.478
      ccmguard.dll 15.0.11.574
      ccmsg.dll 15.0.11.574
      ccmsgrc.dll 15.0.11.478
      ccprofil.dll 15.0.11.574
      ccquamgr.dll 15.0.11.574
      ccquarc.dll 15.0.11.478
      ccquaw.dll 15.0.11.572
      ccreporc.dll 15.0.11.478
      ccreport.dll 15.0.11.574
      ccrepow.dll 15.0.11.550
      ccscanrc.dll 15.0.11.478
      ccscanw.dll 15.0.11.550
      ccsched.dll 15.0.11.574
      ccschedw.dll 15.0.11.550
      ccscherc.dll 15.0.11.478
      ccuac.exe 15.0.11.574
      ccupdate.dll 15.0.11.574
      ccupdrc.dll 15.0.11.478
      ccupdw.dll 15.0.11.550
      ccwebtabs.dll 15.0.11.574
      ccwebtabsrc.dll 15.0.11.478
      ccwgrd.dll 15.0.11.574
      ccwgrdrc.dll 15.0.11.478
      ccwgrdw.dll 15.0.11.550
      ccwkrlib.dll 15.0.11.572
      cfgprofile.dll 15.0.11.550
      checkt.exe 15.0.11.478
      extdlgfw.dll 15.0.11.574
      fact.exe 15.0.11.574
      factrc.dll 15.0.11.478
      firewall.dll 15.0.11.478
      gavidb.dll 15.0.11.572
      gpsauth.dll 15.0.11.572
      gpavgio.dll 15.0.11.572
      gpevtlog.dll 15.0.11.550
      gpgavid.dll 15.0.11.542
      gpgen.dll 15.0.11.550
      gpgenrep.dll 15.0.11.550
      gpgrd.dll 15.0.11.550
      gpgui.dll 15.0.11.550
      gpipc.dll 15.0.11.550
      gplegacy.dll 15.0.11.542
      gpschd.dll 15.0.11.572
      grdcore.dll 15.0.11.550
      guardgui.exe 15.0.11.574
      guardmsg.dll 15.0.11.478
      inssda64.exe 15.0.11.478
      ipmgui.exe 15.0.11.550
      libcurl.dll 7.39.0.0
      licmgr.dll 15.0.11.478
      licmgr.exe 15.0.11.574
      luke.dll 15.0.11.550
      lukeres.dll 15.0.11.478
      mgrs.dll 15.0.11.478
      netnt.dll 15.0.11.478
      onlcfg.dll 15.0.11.542
      rchelp.dll 15.0.11.478
      restartrc.dll 15.0.11.478
      rscdwld.exe 15.0.11.574
      rscdwrc.dll 15.0.11.478
      sched.exe 15.0.11.572
      sched.xml 15.0.11.478
      schedr.dll 15.0.11.478
      setup.dll 15.0.11.478
      setup.exe 15.0.11.574
      setuppending.exe 15.0.11.550
      shlext64.dll 15.0.11.550
      sqlite3.dll 15.0.11.478
      sweb.zip
      updjob.avj
      webcat.dll 15.0.11.550
      webcatrc.dll 15.0.11.478
      wksstats.dll 15.0.11.572
      wsctool.exe 15.0.11.550
      about.htm
      ccplg.xml
      prodinfo.dat
      rchelp.dll 15.0.11.478
      rchelp.dll 15.0.11.478
      rchelp.dll 15.0.11.478
      ccplg.xml
      SecurityCenter.exe 15.0.11.572
      AdministrativeRightsProvider.exe 15.0.11.572
      MessageBus.dll 15.0.11.572
      MessageBusConnectorScanner.dll 15.0.11.572
      MessageBusConnectorQuarantine.dll 15.0.11.572
      MessageBusConnectorConfig.dll 15.0.11.572
      MessageBusConnectorStatus.dll 15.0.11.572
      MessageBusConnectorScheduler.dll 15.0.11.572
      MessageBusConnectorHelp.dll 15.0.11.572
      index.html
      marketing_de-de.html
      marketing_en-us.html
      waiting.hdpi.png
      avicon.hdpi.png
      radar_green.hdpi.png
      laptop.hdpi.png
      radar_red.hdpi.png
      scripts.js
      templates.js
      vendor.js
      main.css
      de-de.json
      aevdf.dat 8.11.239.212
      xbv00100.vdf 8.11.239.124
      xbv00101.vdf 8.11.239.140
      xbv00102.vdf 8.11.239.142
      xbv00103.vdf 8.11.239.144
      xbv00104.vdf 8.11.239.160
      xbv00105.vdf 8.11.239.176
      xbv00106.vdf 8.11.239.192
      xbv00107.vdf 8.11.239.208
      xbv00108.vdf 8.11.239.210
      xbv00109.vdf 8.11.239.212
      local001.vdf
      webcat1.dat
      webcat2.dat
      webcat3.dat
      webcat4.dat
      repair.rdf 1.0.8.38
      avgntflt.sys 15.0.11.550
      avipbb.sys 15.0.11.550

10.06.2015 15:21 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.572
      Engine Version:       
      VDF Version:       

10.06.2015 15:21 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.11.550
      Engine Version:        8.3.30.40
      VDF Version:        8.11.239.212

10.06.2015 15:21 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.11.572

10.06.2015 15:19 [Planer] Dienst gestoppt
      Der Dienst wurde gestoppt.

10.06.2015 15:19 [Echtzeit-Scanner] Dienst gestoppt
      Der Dienst wurde gestoppt.

10.06.2015 15:15 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

10.06.2015 15:06 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.10.414
      Engine Version:       
      VDF Version:       

10.06.2015 15:06 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.10.414
      Engine Version:        8.3.30.40
      VDF Version:        8.11.239.92

10.06.2015 15:05 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.10.414

09.06.2015 16:34 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.239.92
      xbv00089.vdf 8.11.239.12
      xbv00090.vdf 8.11.239.16
      xbv00091.vdf 8.11.239.18
      xbv00092.vdf 8.11.239.20
      xbv00093.vdf 8.11.239.22
      xbv00094.vdf 8.11.239.24
      xbv00095.vdf 8.11.239.42
      xbv00096.vdf 8.11.239.44
      xbv00097.vdf 8.11.239.60
      xbv00098.vdf 8.11.239.76
      xbv00099.vdf 8.11.239.92
      local000.vdf
      webcat1.dat
      webcat2.dat
      webcat3.dat
      webcat4.dat
      repair.rdf 1.0.8.34
      avweb.yml 14.0.5.22

09.06.2015 16:31 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

08.06.2015 14:38 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.238.250
      xbv00085.vdf 8.11.238.196
      xbv00086.vdf 8.11.238.214
      xbv00087.vdf 8.11.238.232
      xbv00088.vdf 8.11.238.250
      local001.vdf
      webcat0.dat
      webcat1.dat
      webcat2.dat
      webcat3.dat
      webcat4.dat
      repair.rdf 1.0.8.32

08.06.2015 14:37 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

07.06.2015 21:54 [Updater] Update erfolgreich durchgeführt
      Update auf Computer *****-PC (192.168.179.26) von
      "hxxp://personal.avira-update.com/update" wurde erfolgreich durchgeführt.
      Es sind keine neuen Engine/VDF Dateien verfügbar.

07.06.2015 21:54 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

07.06.2015 19:54 [Updater] Update erfolgreich durchgeführt
      Update auf Computer *****-PC (192.168.179.26) von
      "hxxp://personal.avira-update.com/update" wurde erfolgreich durchgeführt.
      Es sind keine neuen Engine/VDF Dateien verfügbar.

07.06.2015 19:54 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

07.06.2015 17:35 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.238.178
      xbv00084.vdf 8.11.238.178
      local000.vdf

07.06.2015 17:34 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

07.06.2015 14:04 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.238.140
      xbv00083.vdf 8.11.238.140
      local001.vdf
      webcat2.dat
      webcat3.dat
      webcat4.dat

07.06.2015 14:03 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

06.06.2015 18:51 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.238.122
      xbv00082.vdf 8.11.238.122
      local000.vdf

06.06.2015 18:50 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

06.06.2015 13:15 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.238.102
      xbv00081.vdf 8.11.238.102
      local001.vdf
      webcat2.dat
      webcat4.dat

06.06.2015 13:13 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

06.06.2015 09:45 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.238.98
      xbv00073.vdf 8.11.238.10
      xbv00074.vdf 8.11.238.12
      xbv00075.vdf 8.11.238.32
      xbv00076.vdf 8.11.238.52
      xbv00077.vdf 8.11.238.72
      xbv00078.vdf 8.11.238.94
      xbv00079.vdf 8.11.238.96
      xbv00080.vdf 8.11.238.98
      local000.vdf
      webcat1.dat
      webcat2.dat
      webcat3.dat
      webcat4.dat
      repair.rdf 1.0.8.26

06.06.2015 09:44 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

05.06.2015 09:09 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      webcat3.dat
      webcat4.dat

05.06.2015 09:08 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

05.06.2015 08:09 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.10.414
      Engine Version:       
      VDF Version:       

05.06.2015 08:09 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.10.414
      Engine Version:        8.3.30.40
      VDF Version:        8.11.238.8

05.06.2015 08:08 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.10.414

05.06.2015 07:09 [Updater] Update erfolgreich durchgeführt
      Update von Avira Free Antivirus auf Computer *****-PC (192.168.179.26)
      erfolgreich durchgeführt.
      Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
      aktualisiert:
      aevdf.dat 8.11.238.8
      xbv00070.vdf 8.11.238.4
      xbv00071.vdf 8.11.238.6
      xbv00072.vdf 8.11.238.8
      local001.vdf
      webcat3.dat
      webcat4.dat

05.06.2015 07:08 [Planer] Auftrag gestartet
      Auftrag "Automatisches Update Free"
      wurde erfolgreich gestartet.

05.06.2015 06:59 [Echtzeit-Scanner] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.10.414
      Engine Version:       
      VDF Version:       

05.06.2015 06:59 [Hilfsdienst] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version:        15.0.10.414
      Engine Version:        8.3.30.40
      VDF Version:        8.11.238.0

05.06.2015 06:58 [Planer] Dienst gestartet
      Der Dienst wurde gestartet.
      Dienst Version 15.0.10.414

Joahpi 24.06.2015 22:24
Ich glaube nun habe ich es
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:24-06-2015
Ran by ******* (administrator) on *******-PC on 24-06-2015 22:37:31
Running from C:\Users\*******\Desktop
Loaded Profiles: ******* &  (Available Profiles: ******* & Jonas & Franzi & Kathi & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\avmike.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\certsrv.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(Acer Group) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\vVX3000.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe
() C:\Users\*******\AppData\Local\Amazon Music\Amazon Music Helper.exe
() C:\Program Files (x86)\Packard Bell\Hotkey Utility\HotkeyUtility.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft) C:\Program Files (x86)\Packard Bell\Hotkey Utility\HotkeyUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
() C:\Users\*******\Desktop\Defogger.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9608224 2009-11-17] (Realtek Semiconductor)
HKLM\...\Run: [OOTag] => C:\Program Files (x86)\Packard Bell\OOBEOffer\ootag.exe [13856 2010-02-23] (Microsoft)
HKLM\...\Run: [VX3000] => C:\Windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-25] (CANON INC.)
HKLM-x32\...\Run: [OOTag] => C:\Program Files (x86)\Packard Bell\OOBEOffer\OOTag.exe [13856 2010-02-23] (Microsoft)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Hotkey Utility] => C:\Program Files (x86)\Packard Bell\Hotkey Utility\HotkeyUtility.exe [563744 2010-03-26] ()
HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [588648 2009-07-25] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LifeCam] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKLM-x32\...\Run: [NPSStartup] => [X]
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [ApnUpdater] => "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1213848 2010-09-14] (CANON INC.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [730416 2015-06-10] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152544 2012-12-12] (Apple Inc.)
HKLM-x32\...\Run: [FreePDF Assistant] => C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [130864 2015-05-21] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [54072 2015-04-14] (Malwarebytes Corporation)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2937528 2010-11-21] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [AutoStartNPSAgent] => C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [95576 2010-07-04] (Samsung Electronics Co., Ltd.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [Amazon Music] => C:\Users\*******\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886784 2015-05-07] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\MountPoints2: {91103586-91b5-11e4-b5c0-90fba686074c} - K:\iLinker.exe
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2937528 2010-11-21] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [AutoStartNPSAgent] => C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [95576 2010-07-04] (Samsung Electronics Co., Ltd.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Amazon Music] => C:\Users\*******\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886784 2015-05-07] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {91103586-91b5-11e4-b5c0-90fba686074c} - K:\iLinker.exe
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Facebook Update] => C:\Users\Franzi\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-12-15] (Facebook Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\MountPoints2: {91103586-91b5-11e4-b5c0-90fba686074c} - K:\iLinker.exe
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Facebook Update] => C:\Users\Franzi\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-12-15] (Facebook Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {91103586-91b5-11e4-b5c0-90fba686074c} - K:\iLinker.exe
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\MountPoints2: {91103586-91b5-11e4-b5c0-90fba686074c} - K:\iLinker.exe
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Packard Bell.scr [425984 2009-08-05] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {91103586-91b5-11e4-b5c0-90fba686074c} - K:\iLinker.exe
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Packard Bell.scr [425984 2009-08-05] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\RunOnce: [ScrSav] => C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162336 2009-07-22] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Packard Bell.scr [425984 2009-08-05] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [ScrSav] => C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162336 2009-07-22] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Packard Bell.scr [425984 2009-08-05] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk [2010-11-21]
ShortcutTarget: GamersFirst LIVE!.lnk -> C:\Program Files (x86)\GamersFirst\LIVE!\Live.exe (GamersFirst)
Startup: C:\Users\Franzi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-03-11]
ShortcutTarget: Dropbox.lnk -> C:\Users\*******\AppData\Roaming\Dropbox\bin\Dropbox.exe (No File)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
ShellIconOverlayIdentifiers: [Symbol-Overlay-Steuerprogramm für AutoCAD Digitale Signaturen] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2010-02-10] (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
GroupPolicyUsers\S-1-5-21-3928908445-2049478909-3784465887-1004\User: Group Policy Restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-3928908445-2049478909-3784465887-1003\User: Group Policy Restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.as-holm.de/
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.as-holm.de/
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://domredi.com/1/
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
URLSearchHook: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001 - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File
URLSearchHook: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File
SearchScopes: HKLM-x32 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001 -> DefaultScope {2ED9D2A9-CE4C-43CD-A8DC-CA6E7AE24351} URL = hxxp://search.softonic.com/INF00225/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=711
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001 -> {2ED9D2A9-CE4C-43CD-A8DC-CA6E7AE24351} URL = hxxp://search.softonic.com/INF00225/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=711
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {2ED9D2A9-CE4C-43CD-A8DC-CA6E7AE24351} URL = hxxp://search.softonic.com/INF00225/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=711
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {2ED9D2A9-CE4C-43CD-A8DC-CA6E7AE24351} URL = hxxp://search.softonic.com/INF00225/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=711
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> {3A4D4030-84C7-44ED-88F6-848AF6DC65DD} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=1840E579-392B-4023-8A89-361012000303&apn_sauid=F292E45F-2D8D-4264-A64A-296226E6CEA9&
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {3A4D4030-84C7-44ED-88F6-848AF6DC65DD} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=1840E579-392B-4023-8A89-361012000303&apn_sauid=F292E45F-2D8D-4264-A64A-296226E6CEA9&
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)
BHO-x32: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2010-11-08] (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-03] (Google Inc.)
BHO-x32: Ask Toolbar -> {D4027C7F-154A-4066-A1AD-4243D8127440} -> C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18] (Oracle Corporation)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2010-11-08] (CANON INC.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
DPF: HKLM-x32 {73888E2B-FF04-416C-8847-984D7FC4507F} hxxp://eggerstedt.dyndns.org:1030/RtspVaPgDecNew2.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Tcpip\Parameters: [DhcpNameServer] 192.168.179.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2012-10-31] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-14] (CANON INC.)
FF Plugin-x32: @gamersfirst.com/LiveLauncher -> C:\Program Files (x86)\GamersFirst\LIVE!\nplivelauncher.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-12-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-12-18] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Franzi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Franzi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)

Chrome:
=======
CHR Profile: C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-01-22]
CHR Extension: (Google Search) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-01-22]
CHR Extension: (Avira Browser Safety) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]
CHR Extension: (Google Wallet) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28]
CHR Extension: (Gmail) - C:\Users\*******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-01-22]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Locked "2b5b93e885bc6a00" service could not be unlocked. <===== ATTENTION

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [827184 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [450808 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [450808 2015-06-10] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1188360 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [208632 2015-05-21] (Avira Operations GmbH & Co. KG)
R2 avmike; C:\Program Files\FRITZ!Fernzugang\avmike.exe [336248 2012-02-02] (AVM Berlin)
R2 certsrv; C:\Program Files\FRITZ!Fernzugang\certsrv.exe [143736 2011-10-31] (AVM Berlin)
S3 GameConsoleService; C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe [238328 2009-10-10] (WildTangent, Inc.)
R2 Greg_Service; C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 nwtsrv; C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe [189304 2011-10-31] (AVM Berlin)
R2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 StarMoney 8.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
R2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
U3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 1394ohci; C:\Windows\system32\drivers\1394ohci.sys [229888 2010-11-20] () [File not signed]
U5 2b5b93e885bc6a00; C:\Windows\System32\Drivers\2b5b93e885bc6a00.sys [88504 2015-06-19] () <===== ATTENTION Necurs Rootkit?
R0 ACPI; C:\Windows\System32\drivers\ACPI.sys [334208 2010-11-20] () [File not signed]
S3 AcpiPmi; C:\Windows\system32\drivers\acpipmi.sys [12800 2010-11-20] () [File not signed]
S3 adp94xx; C:\Windows\system32\DRIVERS\adp94xx.sys [491088 2009-07-14] () [File not signed]
S3 adpahci; C:\Windows\system32\DRIVERS\adpahci.sys [339536 2009-07-14] () [File not signed]
S3 adpu320; C:\Windows\system32\DRIVERS\adpu320.sys [182864 2009-07-14] () [File not signed]
R1 AFD; C:\Windows\system32\drivers\afd.sys [497152 2014-05-30] () [File not signed]
S3 agp440; C:\Windows\system32\drivers\agp440.sys [61008 2009-07-14] () [File not signed]
R2 aksdf; C:\Windows\system32\drivers\aksdf.sys [78208 2011-11-24] () [File not signed]
S3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [53760 2011-02-09] () [File not signed]
S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [21120 2011-08-09] () [File not signed]
S3 aliide; C:\Windows\system32\drivers\aliide.sys [15440 2009-07-14] () [File not signed]
S3 amdide; C:\Windows\system32\drivers\amdide.sys [15440 2009-07-14] () [File not signed]
S3 AmdK8; C:\Windows\system32\DRIVERS\amdk8.sys [64512 2009-07-14] () [File not signed]
S3 AmdPPM; C:\Windows\system32\DRIVERS\amdppm.sys [60928 2009-07-14] () [File not signed]
S3 amdsata; C:\Windows\system32\drivers\amdsata.sys [107904 2011-03-11] () [File not signed]
S3 amdsbs; C:\Windows\system32\DRIVERS\amdsbs.sys [194128 2009-07-14] () [File not signed]
R0 amdxata; C:\Windows\System32\drivers\amdxata.sys [27008 2011-03-11] () [File not signed]
S3 AppID; C:\Windows\system32\drivers\appid.sys [61440 2015-02-03] () [File not signed]
S3 arc; C:\Windows\system32\DRIVERS\arc.sys [87632 2009-07-14] () [File not signed]
S3 arcsas; C:\Windows\system32\DRIVERS\arcsas.sys [97856 2009-07-14] () [File not signed]
S3 AsyncMac; C:\Windows\System32\DRIVERS\asyncmac.sys [23040 2009-07-14] () [File not signed]
R0 atapi; C:\Windows\System32\drivers\atapi.sys [24128 2009-07-14] () [File not signed]
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [153256 2015-06-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132656 2015-06-10] () [File not signed]
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] () [File not signed]
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-05] () [File not signed]
S3 b06bdrv; C:\Windows\system32\DRIVERS\bxvbda.sys [468480 2009-06-10] () [File not signed]
R3 b57nd60a; C:\Windows\System32\DRIVERS\b57nd60a.sys [321064 2007-11-15] () [File not signed]
U5 BattC; C:\Windows\System32\Drivers\BattC.sys [28240 2009-07-14] () [File not signed]
R1 Beep; C:\Windows\System32\Drivers\Beep.sys [6656 2009-07-14] ()
R1 blbdrive; C:\Windows\system32\DRIVERS\blbdrive.sys [45056 2009-07-14] () [File not signed]
R3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [90624 2011-02-23] () [File not signed]
S3 BrFiltLo; C:\Windows\system32\DRIVERS\BrFiltLo.sys [18432 2009-06-10] () [File not signed]
S3 BrFiltUp; C:\Windows\system32\DRIVERS\BrFiltUp.sys [8704 2009-06-10] () [File not signed]
S3 Brserid; C:\Windows\System32\Drivers\Brserid.sys [286720 2009-07-14] () [File not signed]
S3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [47104 2009-06-10] () [File not signed]
S3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [14976 2009-06-10] () [File not signed]
S3 BrUsbSer; C:\Windows\System32\Drivers\BrUsbSer.sys [14720 2009-06-10] () [File not signed]
S3 BTHMODEM; C:\Windows\system32\DRIVERS\bthmodem.sys [72192 2009-07-14] () [File not signed]
S4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [92160 2009-07-14] () [File not signed]
R1 cdrom; C:\Windows\System32\DRIVERS\cdrom.sys [147456 2010-11-20] () [File not signed]
S3 circlass; C:\Windows\system32\DRIVERS\circlass.sys [45568 2009-07-14] () [File not signed]
R0 CLFS; C:\Windows\System32\CLFS.sys [367552 2015-03-04] () [File not signed]
S3 CmBatt; C:\Windows\system32\DRIVERS\CmBatt.sys [17664 2009-07-14] () [File not signed]
S3 cmdide; C:\Windows\system32\drivers\cmdide.sys [17488 2009-07-14] () [File not signed]
R0 CNG; C:\Windows\System32\Drivers\cng.sys [459336 2015-01-31] () [File not signed]
S3 Compbatt; C:\Windows\system32\DRIVERS\compbatt.sys [21584 2009-07-14] () [File not signed]
R3 CompositeBus; C:\Windows\system32\drivers\CompositeBus.sys [38912 2010-11-20] () [File not signed]
S4 crcdisk; C:\Windows\system32\DRIVERS\crcdisk.sys [24144 2009-07-14] () [File not signed]
R1 DfsC; C:\Windows\System32\Drivers\dfsc.sys [102400 2010-11-20] () [File not signed]
R1 discache; C:\Windows\System32\drivers\discache.sys [40448 2009-07-14] () [File not signed]
R0 Disk; C:\Windows\System32\DRIVERS\disk.sys [73280 2009-07-14] () [File not signed]
S3 drmkaud; C:\Windows\system32\drivers\drmkaud.sys [5632 2009-07-14] () [File not signed]
R3 DXGKrnl; C:\Windows\System32\drivers\dxgkrnl.sys [985536 2014-06-16] () [File not signed]
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] () [File not signed]
S3 elxstor; C:\Windows\system32\DRIVERS\elxstor.sys [530496 2009-07-14] () [File not signed]
S3 ErrDev; C:\Windows\system32\drivers\errdev.sys [9728 2009-07-14] () [File not signed]
S3 exfat; C:\Windows\System32\Drivers\exfat.sys [195072 2009-07-14] () [File not signed]
R3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [204800 2009-07-14] () [File not signed]
S3 fdc; C:\Windows\system32\DRIVERS\fdc.sys [29696 2009-07-14] () [File not signed]
R0 FileInfo; C:\Windows\System32\drivers\fileinfo.sys [70224 2009-07-14] () [File not signed]
S3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [34304 2009-07-14] () [File not signed]
S3 flpydisk; C:\Windows\system32\DRIVERS\flpydisk.sys [24576 2009-07-14] () [File not signed]
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [289664 2010-11-20] () [File not signed]
U0 frcv; C:\Windows\System32\drivers\tsqic.sys [79064 2015-06-24] (Malwarebytes Corporation)
S3 FsDepends; C:\Windows\System32\drivers\FsDepends.sys [55376 2009-07-14] () [File not signed]
S3 fssfltr; C:\Windows\System32\DRIVERS\fssfltr.sys [48488 2012-03-08] () [File not signed]
U0 Fs_Rec; C:\Windows\System32\Drivers\Fs_Rec.sys [23408 2012-03-01] () [File not signed]
R0 fvevol; C:\Windows\System32\DRIVERS\fvevol.sys [223752 2013-01-24] () [File not signed]
S3 gagp30kx; C:\Windows\system32\DRIVERS\gagp30kx.sys [65088 2009-07-14] () [File not signed]
R3 GEARAspiWDM; C:\Windows\System32\DRIVERS\GEARAspiWDM.sys [33240 2012-08-21] () [File not signed]
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [321536 2011-10-07] () [File not signed]
S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232 2009-06-10] () [File not signed]
S3 HdAudAddService; C:\Windows\system32\drivers\HdAudio.sys [350208 2010-11-20] () [File not signed]
R3 HDAudBus; C:\Windows\system32\drivers\HDAudBus.sys [122368 2010-11-20] () [File not signed]
S3 HidBatt; C:\Windows\system32\DRIVERS\HidBatt.sys [26624 2009-07-14] () [File not signed]
S3 HidBth; C:\Windows\system32\DRIVERS\hidbth.sys [100864 2009-07-14] () [File not signed]
S3 HidIr; C:\Windows\system32\DRIVERS\hidir.sys [46592 2009-07-14] () [File not signed]
R3 HidUsb; C:\Windows\System32\DRIVERS\hidusb.sys [30208 2010-11-20] () [File not signed]
S3 HpSAMD; C:\Windows\system32\drivers\HpSAMD.sys [78720 2010-11-20] () [File not signed]
R3 HTTP; C:\Windows\System32\drivers\HTTP.sys [754688 2015-02-25] () [File not signed]
R0 hwpolicy; C:\Windows\System32\drivers\hwpolicy.sys [14720 2010-11-20] () [File not signed]
S3 i8042prt; C:\Windows\system32\drivers\i8042prt.sys [105472 2009-07-14] () [File not signed]
S3 iaStorV; C:\Windows\system32\drivers\iaStorV.sys [410496 2011-03-11] () [File not signed]
S3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [6108416 2009-06-10] () [File not signed]
S3 iirsp; C:\Windows\system32\DRIVERS\iirsp.sys [44112 2009-07-14] () [File not signed]
R3 IntcAzAudAddService; C:\Windows\System32\drivers\RTKVHD64.sys [2037408 2009-11-17] () [File not signed]
R0 intelide; C:\Windows\System32\drivers\intelide.sys [16960 2009-07-14] () [File not signed]
R3 intelppm; C:\Windows\System32\DRIVERS\intelppm.sys [62464 2009-07-14] () [File not signed]
S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [82944 2010-11-20] () [File not signed]
S3 IPMIDRV; C:\Windows\system32\drivers\IPMIDrv.sys [78848 2010-11-20] () [File not signed]
S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [116224 2009-07-14] () [File not signed]
S3 IRENUM; C:\Windows\System32\drivers\irenum.sys [17920 2009-07-14] () [File not signed]
S3 isapnp; C:\Windows\system32\drivers\isapnp.sys [20544 2009-07-14] () [File not signed]
S3 iScsiPrt; C:\Windows\system32\drivers\msiscsi.sys [274880 2014-02-04] () [File not signed]
R3 kbdclass; C:\Windows\System32\DRIVERS\kbdclass.sys [50768 2009-07-14] () [File not signed]
R3 kbdhid; C:\Windows\System32\DRIVERS\kbdhid.sys [33280 2010-11-20] () [File not signed]
R0 KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [95680 2015-05-25] () [File not signed]
R0 KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [155584 2015-05-25] () [File not signed]
R3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [20992 2009-07-14] () [File not signed]
R2 lltdio; C:\Windows\System32\DRIVERS\lltdio.sys [60928 2009-07-14] () [File not signed]
S3 LSI_FC; C:\Windows\system32\DRIVERS\lsi_fc.sys [114752 2009-07-14] () [File not signed]
S3 LSI_SAS; C:\Windows\system32\DRIVERS\lsi_sas.sys [106560 2009-07-14] () [File not signed]
S3 LSI_SAS2; C:\Windows\system32\DRIVERS\lsi_sas2.sys [65600 2009-07-14] () [File not signed]
S3 LSI_SCSI; C:\Windows\system32\DRIVERS\lsi_scsi.sys [115776 2009-07-14] () [File not signed]
R2 luafv; C:\Windows\system32\drivers\luafv.sys [113152 2009-07-14] () [File not signed]
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
S3 megasas; C:\Windows\system32\DRIVERS\megasas.sys [35392 2009-07-14] () [File not signed]
S3 MegaSR; C:\Windows\system32\DRIVERS\MegaSR.sys [284736 2009-07-14] () [File not signed]
S3 Modem; C:\Windows\System32\drivers\modem.sys [40448 2009-07-14] () [File not signed]
R3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-14] () [File not signed]
R3 mouclass; C:\Windows\System32\DRIVERS\mouclass.sys [49216 2009-07-14] () [File not signed]
R3 mouhid; C:\Windows\System32\DRIVERS\mouhid.sys [31232 2009-07-14] () [File not signed]
R0 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [94656 2015-02-03] () [File not signed]
S3 mpio; C:\Windows\system32\drivers\mpio.sys [155008 2010-11-20] () [File not signed]
R3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [77312 2009-07-14] () [File not signed]
S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [141312 2014-12-19] () [File not signed]
R3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [158208 2011-04-27] () [File not signed]
R3 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [288768 2011-07-09] () [File not signed]
R3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [128000 2011-04-27] () [File not signed]
S3 msahci; C:\Windows\system32\drivers\msahci.sys [31104 2010-11-20] () [File not signed]
S3 msdsm; C:\Windows\system32\drivers\msdsm.sys [140672 2010-11-20] () [File not signed]
R1 Msfs; C:\Windows\System32\Drivers\Msfs.sys [26112 2009-07-14] ()
S3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [8192 2009-07-14] () [File not signed]
R0 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [15424 2009-07-14] () [File not signed]
S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [11136 2009-07-14] () [File not signed]
S3 MSPCLOCK; C:\Windows\System32\drivers\MSPCLOCK.sys [7168 2009-07-14] () [File not signed]
S3 MSPQM; C:\Windows\System32\drivers\MSPQM.sys [6784 2009-07-14] () [File not signed]
S3 MsRPC; C:\Windows\System32\Drivers\MsRPC.sys [366976 2010-11-20] ()
R1 mssmbios; C:\Windows\system32\drivers\mssmbios.sys [32320 2009-07-14] () [File not signed]
S3 MSTEE; C:\Windows\System32\drivers\MSTEE.sys [8064 2009-07-14] () [File not signed]
S3 MTConfig; C:\Windows\system32\DRIVERS\MTConfig.sys [15360 2009-07-14] () [File not signed]
R0 Mup; C:\Windows\System32\Drivers\mup.sys [60496 2009-07-14] () [File not signed]
R3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [318976 2009-07-14] () [File not signed]
R0 NDIS; C:\Windows\System32\drivers\ndis.sys [950128 2012-08-22] () [File not signed]
S3 NdisCap; C:\Windows\System32\DRIVERS\ndiscap.sys [35328 2009-07-14] () [File not signed]
R3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [24064 2009-07-14] () [File not signed]
R3 Ndisuio; C:\Windows\System32\DRIVERS\ndisuio.sys [56832 2010-11-20] () [File not signed]
R3 NdisWan; C:\Windows\System32\DRIVERS\ndiswan.sys [164352 2010-11-20] () [File not signed]
R3 NDProxy; C:\Windows\System32\Drivers\NDProxy.sys [57856 2010-11-20] ()
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [22528 2012-03-26] () [File not signed]
R1 NetBIOS; C:\Windows\System32\DRIVERS\netbios.sys [44544 2009-07-14] () [File not signed]
R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [261632 2010-11-20] () [File not signed]
S3 nfrd960; C:\Windows\system32\DRIVERS\nfrd960.sys [51264 2009-07-14] () [File not signed]
R1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [44032 2009-07-14] ()
R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [24576 2009-07-14] () [File not signed]
R3 Ntfs; C:\Windows\System32\Drivers\Ntfs.sys [1684928 2014-01-24] ()
R1 Null; C:\Windows\System32\Drivers\Null.sys [6144 2009-07-14] () [File not signed]
R3 NVHDA; C:\Windows\System32\drivers\nvhda64v.sys [84512 2009-08-21] () [File not signed]
R3 nvlddmkm; C:\Windows\System32\DRIVERS\nvlddmkm.sys [11036448 2013-02-26] () [File not signed]
S3 nvraid; C:\Windows\system32\drivers\nvraid.sys [148352 2011-03-11] () [File not signed]
S3 nvstor; C:\Windows\system32\drivers\nvstor.sys [166272 2011-03-11] () [File not signed]
S3 nv_agp; C:\Windows\system32\drivers\nv_agp.sys [122960 2009-07-14] () [File not signed]
R3 NWIM; C:\Windows\System32\DRIVERS\avmnwim.sys [412024 2011-07-05] () [File not signed]
S3 ohci1394; C:\Windows\system32\drivers\ohci1394.sys [72832 2009-07-14] () [File not signed]
R3 Parport; C:\Windows\System32\DRIVERS\parport.sys [97280 2009-07-14] () [File not signed]
R0 partmgr; C:\Windows\System32\drivers\partmgr.sys [75120 2012-03-17] () [File not signed]
R0 pci; C:\Windows\System32\drivers\pci.sys [184704 2010-11-20] () [File not signed]
S3 pciide; C:\Windows\system32\drivers\pciide.sys [12352 2009-07-14] () [File not signed]
S3 pcmcia; C:\Windows\system32\DRIVERS\pcmcia.sys [220752 2009-07-14] () [File not signed]
R0 pcw; C:\Windows\System32\drivers\pcw.sys [50768 2009-07-14] () [File not signed]
R2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [663552 2015-02-03] () [File not signed]
R3 PptpMiniport; C:\Windows\System32\DRIVERS\raspptp.sys [111104 2010-11-20] () [File not signed]
S3 Processor; C:\Windows\system32\DRIVERS\processr.sys [60416 2009-07-14] () [File not signed]
R1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-20] () [File not signed]
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [55024 2008-06-16] () [File not signed]
S3 ql2300; C:\Windows\system32\DRIVERS\ql2300.sys [1524816 2009-07-14] () [File not signed]
S3 ql40xx; C:\Windows\system32\DRIVERS\ql40xx.sys [128592 2009-07-14] () [File not signed]
S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [46592 2009-07-14] () [File not signed]
S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [14848 2009-07-14] () [File not signed]
R3 RasAgileVpn; C:\Windows\System32\DRIVERS\AgileVpn.sys [60416 2009-07-14] () [File not signed]
R3 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-20] () [File not signed]
R3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [92672 2009-07-14] () [File not signed]
R3 RasSstp; C:\Windows\System32\DRIVERS\rassstp.sys [83968 2009-07-14] () [File not signed]
R1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [309248 2010-11-20] () [File not signed]
S3 rdpbus; C:\Windows\system32\DRIVERS\rdpbus.sys [24064 2009-07-14] () [File not signed]
R1 RDPCDD; C:\Windows\System32\DRIVERS\RDPCDD.sys [7680 2009-07-14] () [File not signed]
R1 RDPENCDD; C:\Windows\System32\drivers\rdpencdd.sys [7680 2009-07-14] () [File not signed]
R1 RDPREFMP; C:\Windows\System32\drivers\rdprefmp.sys [8192 2009-07-14] () [File not signed]
S3 RdpVideoMiniport; C:\Windows\System32\drivers\rdpvideominiport.sys [19456 2012-08-23] () [File not signed]
S3 RDPWD; C:\Windows\System32\Drivers\RDPWD.sys [212480 2014-07-17] ()
R0 rdyboost; C:\Windows\System32\drivers\rdyboost.sys [213888 2010-11-20] () [File not signed]
R2 rspndr; C:\Windows\System32\DRIVERS\rspndr.sys [76800 2009-07-14] () [File not signed]
S3 sbp2port; C:\Windows\system32\drivers\sbp2port.sys [103808 2010-11-20] () [File not signed]
S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [29696 2010-11-20] () [File not signed]
R2 secdrv; C:\Windows\System32\Drivers\secdrv.sys [23040 2009-06-10] ()
R3 Serenum; C:\Windows\System32\DRIVERS\serenum.sys [23552 2009-07-14] () [File not signed]
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] () [File not signed]
S3 sermouse; C:\Windows\system32\DRIVERS\sermouse.sys [26624 2009-07-14] () [File not signed]
S3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [14336 2009-07-14] () [File not signed]
S3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [13824 2009-07-14] () [File not signed]
S3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [14336 2010-11-20] () [File not signed]
S3 sfloppy; C:\Windows\system32\DRIVERS\sfloppy.sys [16896 2009-07-14] () [File not signed]
S3 SiSRaid2; C:\Windows\system32\DRIVERS\SiSRaid2.sys [43584 2009-07-14] () [File not signed]
S3 SiSRaid4; C:\Windows\system32\DRIVERS\sisraid4.sys [80464 2009-07-14] () [File not signed]
S3 Smb; C:\Windows\System32\DRIVERS\smb.sys [93184 2009-07-14] () [File not signed]
S3 SPCP825K; C:\Windows\System32\DRIVERS\SPCP825K.sys [42056 2010-07-19] () [File not signed]
R0 spldr; C:\Windows\System32\Drivers\spldr.sys [19008 2009-07-14] ()
R3 srv; C:\Windows\System32\DRIVERS\srv.sys [467456 2011-04-29] () [File not signed]
R3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [410112 2011-04-29] () [File not signed]
R3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [168448 2011-04-29] () [File not signed]
S3 ssm_bus; C:\Windows\System32\DRIVERS\ssm_bus.sys [136192 2010-04-27] () [File not signed]
S3 ssm_mdfl; C:\Windows\System32\DRIVERS\ssm_mdfl.sys [18944 2010-04-27] () [File not signed]
S3 ssm_mdm; C:\Windows\System32\DRIVERS\ssm_mdm.sys [172032 2010-04-27] () [File not signed]
S3 stexstor; C:\Windows\system32\DRIVERS\stexstor.sys [24656 2009-07-14] () [File not signed]
R3 swenum; C:\Windows\system32\drivers\swenum.sys [12496 2009-07-14] () [File not signed]
R0 Tcpip; C:\Windows\System32\drivers\tcpip.sys [1903552 2014-04-05] () [File not signed]
S3 TCPIP6; C:\Windows\System32\DRIVERS\tcpip.sys [1903552 2014-04-05] () [File not signed]
R2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [45568 2012-10-03] () [File not signed]
S3 TDPIPE; C:\Windows\System32\drivers\tdpipe.sys [15872 2009-07-14] () [File not signed]
S3 TDTCP; C:\Windows\System32\drivers\tdtcp.sys [23552 2012-02-17] () [File not signed]
R1 tdx; C:\Windows\System32\DRIVERS\tdx.sys [119296 2014-11-11] () [File not signed]
R1 TermDD; C:\Windows\system32\drivers\termdd.sys [63360 2010-11-20] () [File not signed]
S3 TFsExDisk; C:\Windows\System32\Drivers\TFsExDisk.sys [16448 2010-06-14] () [File not signed]
S3 tssecsrv; C:\Windows\System32\DRIVERS\tssecsrv.sys [39936 2014-07-17] () [File not signed]
S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [57856 2012-08-23] () [File not signed]
R3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-20] () [File not signed]
S3 uagp35; C:\Windows\system32\DRIVERS\uagp35.sys [64080 2009-07-14] () [File not signed]
S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [328192 2010-11-20] () [File not signed]
S3 uliagpkx; C:\Windows\system32\drivers\uliagpkx.sys [64592 2009-07-14] () [File not signed]
R3 umbus; C:\Windows\system32\drivers\umbus.sys [48640 2010-11-20] () [File not signed]
S3 UmPass; C:\Windows\system32\DRIVERS\umpass.sys [9728 2009-07-14] () [File not signed]
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [53760 2012-09-28] () [File not signed]
S3 usbaudio; C:\Windows\system32\drivers\usbaudio.sys [109824 2013-07-12] () [File not signed]
R3 usbccgp; C:\Windows\System32\DRIVERS\usbccgp.sys [99840 2013-11-27] () [File not signed]
S3 usbcir; C:\Windows\system32\drivers\usbcir.sys [100864 2013-07-12] () [File not signed]
R3 usbehci; C:\Windows\system32\drivers\usbehci.sys [53248 2013-11-27] () [File not signed]
R3 usbhub; C:\Windows\System32\DRIVERS\usbhub.sys [343040 2013-11-27] () [File not signed]
S3 usbohci; C:\Windows\system32\drivers\usbohci.sys [25600 2013-11-27] () [File not signed]
R3 usbprint; C:\Windows\System32\DRIVERS\usbprint.sys [25088 2009-07-14] () [File not signed]
R3 usbscan; C:\Windows\system32\drivers\usbscan.sys [42496 2013-07-03] () [File not signed]
R3 USBSTOR; C:\Windows\System32\DRIVERS\USBSTOR.SYS [91648 2011-03-11] () [File not signed]
R3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2013-11-27] () [File not signed]
R0 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [36432 2009-07-14] () [File not signed]
S3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [29184 2009-07-14] () [File not signed]
R1 VgaSave; C:\Windows\System32\drivers\vga.sys [29184 2009-07-14] () [File not signed]
S3 vhdmp; C:\Windows\system32\drivers\vhdmp.sys [215936 2010-11-20] () [File not signed]
S3 viaide; C:\Windows\system32\drivers\viaide.sys [17488 2009-07-14] () [File not signed]
R0 volmgr; C:\Windows\System32\drivers\volmgr.sys [71552 2010-11-20] () [File not signed]
R0 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [363392 2010-11-20] () [File not signed]
R0 volsnap; C:\Windows\System32\drivers\volsnap.sys [295808 2010-11-20] () [File not signed]
S3 vsmraid; C:\Windows\system32\DRIVERS\vsmraid.sys [161872 2009-07-14] () [File not signed]
S3 vwifibus; C:\Windows\System32\drivers\vwifibus.sys [24576 2009-07-14] () [File not signed]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] () [File not signed]
S3 VX3000; C:\Windows\System32\DRIVERS\VX3000.sys [2060144 2010-05-20] () [File not signed]
S3 WacomPen; C:\Windows\system32\DRIVERS\wacompen.sys [27776 2009-07-14] () [File not signed]
S3 WANARP; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] () [File not signed]
R1 Wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] () [File not signed]
S3 Wd; C:\Windows\system32\DRIVERS\wd.sys [21056 2009-07-14] () [File not signed]
R0 Wdf01000; C:\Windows\System32\drivers\Wdf01000.sys [785624 2013-06-26] () [File not signed]
R1 WfpLwf; C:\Windows\System32\DRIVERS\wfplwf.sys [12800 2009-07-14] () [File not signed]
S3 WIMMount; C:\Windows\System32\drivers\wimmount.sys [22096 2009-07-14] () [File not signed]
S3 WinUsb; C:\Windows\System32\DRIVERS\WinUsb.sys [41984 2010-11-20] () [File not signed]
R3 WmiAcpi; C:\Windows\system32\drivers\wmiacpi.sys [14336 2009-07-14] () [File not signed]
S4 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [21504 2009-07-14] () [File not signed]
R3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [87040 2012-07-26] () [File not signed]
R3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [198656 2012-07-26] () [File not signed]
U5 2b5b93e885bc6a00;  <===== ATTENTION Locked Service
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 sxuptp; system32\DRIVERS\sxuptp.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-24 22:35 - 2015-06-24 22:37 - 00043903 _____ C:\Users\*******\Desktop\Addition.txt
2015-06-24 22:34 - 2015-06-24 22:37 - 00067323 _____ C:\Users\*******\Desktop\FRST.txt
2015-06-24 22:34 - 2015-06-24 22:37 - 00000000 ____D C:\FRST
2015-06-24 22:33 - 2015-06-24 22:32 - 02112512 _____ (Farbar) C:\Users\*******\Desktop\FRST64.exe
2015-06-24 22:31 - 2015-06-24 22:31 - 00000476 _____ C:\Users\*******\Desktop\defogger_disable.log
2015-06-24 22:31 - 2015-06-24 22:31 - 00000000 _____ C:\Users\*******\defogger_reenable
2015-06-24 22:25 - 2015-06-24 22:20 - 00380416 _____ C:\Users\*******\Desktop\Gmer-19357.exe
2015-06-24 22:25 - 2015-06-24 22:19 - 00050477 _____ C:\Users\*******\Desktop\Defogger.exe
2015-06-24 22:08 - 2015-06-24 22:19 - 01636352 _____ (Farbar) C:\Users\*******\Desktop\FRST.exe
2015-06-24 21:52 - 2015-06-24 21:52 - 00079064 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\tsqic.sys
2015-06-24 21:51 - 2015-06-24 21:51 - 00000000 ____D C:\Users\*******\AppData\Local\{E7287810-097C-4426-8C80-FE34181130E6}
2015-06-24 21:42 - 2015-06-24 21:42 - 00001218 _____ C:\Users\*******\Desktop\malware 1.txt
2015-06-24 21:27 - 2015-06-24 22:27 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-24 21:27 - 2015-06-24 21:27 - 00001118 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-06-24 21:27 - 2015-06-24 21:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-06-24 21:27 - 2015-06-24 21:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-24 21:27 - 2015-06-24 21:27 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-24 21:27 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-06-24 21:27 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-06-24 21:27 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-06-24 20:54 - 2015-06-24 20:54 - 00000703 _____ C:\Users\*******\Desktop\mbam-setup-2.1.6.1022 - Verknüpfung.lnk
2015-06-24 05:59 - 2015-06-24 05:59 - 00000000 ____D C:\ProgramData\PMB Files
2015-06-22 14:49 - 2015-06-22 14:49 - 00000000 ____D C:\Users\*******\AppData\Local\{7CEAEA71-D543-40A4-A564-2C6008044B18}
2015-06-21 13:50 - 2015-06-21 13:50 - 02931056 _____ C:\Users\*******\Downloads\SecurityTaskManager_Setup.exe
2015-06-21 13:38 - 2015-06-21 13:38 - 00000000 ____D C:\Users\*******\AppData\Local\{951BBBC7-3419-4377-95E9-740EEDE66B85}
2015-06-19 18:28 - 2015-06-19 18:28 - 00000000 ____D C:\Users\*******\AppData\Local\{4440FC7D-C0F4-4601-9912-D7C6FF875FCC}
2015-06-19 18:27 - 2015-06-24 21:53 - 00007655 _____ C:\Users\*******\AppData\Local\Resmon.ResmonCfg
2015-06-19 18:01 - 2015-06-19 18:01 - 00088504 _____ C:\Windows\system32\Drivers\2b5b93e885bc6a00.sys
2015-06-19 17:58 - 2015-06-19 17:58 - 00000000 ___HD C:\ProgramData\{CA2FACF7-9029-4A21-892B-E7F60B39FF1A}
2015-06-18 11:14 - 2015-06-19 13:53 - 00000000 ____D C:\Users\Jonas\AppData\Local\{EA7E46CE-AB76-46C4-A65B-48BC06911FE2}
2015-06-18 11:14 - 2015-06-18 11:14 - 00000000 ____D C:\Users\Jonas\AppData\Local\GWX
2015-06-17 20:53 - 2015-06-17 20:53 - 00000000 ____D C:\Users\*******\AppData\Local\{CD1A3A81-833E-4B22-B6EC-147446855768}
2015-06-17 20:34 - 2015-06-17 20:34 - 00000000 ____D C:\Users\Jonas\AppData\Local\{90D4594C-86ED-4EF8-A507-A4116B7DDFA8}
2015-06-16 19:49 - 2015-06-16 19:49 - 00000000 ____D C:\Users\Kathi\AppData\Local\{E55BD9A8-B2A1-49CB-AC8D-1909E2785747}
2015-06-13 12:07 - 2015-06-13 12:07 - 00002168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-06-13 11:55 - 2015-06-13 11:55 - 00001132 _____ C:\Users\Public\Desktop\Avira.lnk
2015-06-13 11:54 - 2015-06-13 11:54 - 00000000 ____D C:\Users\*******\AppData\Local\{F0E4A01C-F7FB-4630-9CA0-B75285E36743}
2015-06-13 11:49 - 2015-06-13 11:49 - 00862016 _____ C:\Windows\Minidump\061315-23930-01.dmp
2015-06-12 08:03 - 2015-06-12 08:03 - 00000000 ____D C:\Users\*******\AppData\Local\{2735133C-7E0D-4AEE-8403-6595DA4302DC}
2015-06-11 10:28 - 2015-06-11 10:28 - 00000000 ____D C:\Users\*******\AppData\Local\{2FE03937-1486-4709-9705-6F9B8851FAEA}
2015-06-10 15:43 - 2015-05-25 20:24 - 05569984 _____ C:\Windows\system32\ntoskrnl.exe
2015-06-10 15:43 - 2015-05-25 20:23 - 00155584 _____ C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-10 15:43 - 2015-05-25 20:23 - 00095680 _____ C:\Windows\system32\Drivers\ksecdd.sys
2015-06-10 15:43 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00043520 _____ C:\Windows\system32\csrsrv.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-10 15:43 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-10 15:43 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-10 15:43 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-10 15:43 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-10 15:43 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-10 15:43 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-10 15:43 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-10 15:43 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-10 15:43 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-10 15:43 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-10 15:43 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-10 15:43 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-10 15:43 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-10 15:43 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-10 15:43 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-10 15:43 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-10 15:43 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-10 15:43 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-10 15:43 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-10 15:43 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-10 15:43 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 15:43 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-10 15:43 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-10 15:43 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-10 15:43 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-10 15:43 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-10 15:42 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-10 15:42 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-10 15:42 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 15:42 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-10 15:42 - 2015-05-25 19:08 - 03206144 _____ C:\Windows\system32\win32k.sys
2015-06-10 15:42 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-10 15:42 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-10 15:42 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-10 15:42 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-10 15:42 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-10 15:42 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-10 15:42 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-10 15:42 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-10 15:42 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-10 15:42 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-10 15:42 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-10 15:42 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-10 15:42 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-10 15:42 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-10 15:42 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-10 15:42 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-10 15:42 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-10 15:42 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-10 15:42 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-10 15:42 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-10 15:42 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-10 15:42 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-10 15:42 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-10 15:42 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-10 15:42 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-10 15:42 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-10 15:42 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 15:42 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-10 15:42 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-10 15:42 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 15:42 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 15:42 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 15:42 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-10 15:42 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-10 15:42 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 15:42 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 15:42 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-10 15:42 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 15:42 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 15:42 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-10 15:42 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 15:42 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-10 15:42 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-10 15:42 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 15:42 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-10 15:42 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-10 15:42 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 15:42 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 15:42 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-10 15:42 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 15:42 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 15:42 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-10 15:42 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 15:42 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-10 15:42 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 15:42 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-10 15:42 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-10 15:42 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-10 15:42 - 2015-04-11 05:19 - 00069888 _____ C:\Windows\system32\Drivers\stream.sys
2015-06-10 15:10 - 2015-06-10 15:10 - 00000000 ____D C:\Users\*******\AppData\Local\{E0E4E1A2-284A-4C0A-9BF2-831F52251A45}
2015-06-10 15:05 - 2015-06-10 15:05 - 00821856 _____ C:\Windows\Minidump\061015-20654-01.dmp
2015-06-09 16:33 - 2015-06-09 16:34 - 00000000 ____D C:\Users\Franzi\AppData\Local\{2476C28F-AB07-482B-BD1E-0CB87CA663A3}
2015-06-08 14:37 - 2015-06-08 14:38 - 00000000 ____D C:\Users\*******\AppData\Local\{79823855-6130-4DB8-A4AC-347C0628FF4F}
2015-06-07 18:07 - 2015-06-07 18:07 - 00000000 ____D C:\Users\*******\AppData\Local\{F46DA7C9-ED81-46ED-B0A8-4FCFE6954335}
2015-06-05 08:08 - 2015-06-05 08:08 - 00833032 _____ C:\Windows\Minidump\060515-18392-01.dmp
2015-06-05 07:17 - 2015-06-05 07:17 - 00001152 _____ C:\Users\*******\Desktop\Amazon Music.lnk
2015-06-05 07:16 - 2015-06-05 07:17 - 41033208 _____ (Amazon) C:\Users\*******\Downloads\AmazonMusicInstaller.exe
2015-06-05 07:03 - 2015-06-05 07:04 - 00000000 ____D C:\Users\*******\AppData\Local\{A2E55548-A532-49F9-A794-DA72A9E0F270}
2015-06-05 07:00 - 2015-06-05 07:00 - 00000000 ____D C:\Users\*******\AppData\Local\GWX
2015-06-05 06:58 - 2015-06-05 06:58 - 00873320 _____ C:\Windows\Minidump\060515-19905-01.dmp
2015-06-04 20:48 - 2015-06-04 20:48 - 00000000 ____D C:\Users\Franzi\AppData\Local\{497D942B-BD8D-4273-9C76-A94891439FCF}
2015-06-04 09:15 - 2015-06-04 09:15 - 00000000 ____D C:\Users\*******\AppData\Local\{A6620B4F-A98F-414A-8741-11DB41ACD917}
2015-06-03 14:50 - 2015-06-03 14:50 - 00000000 ____D C:\Users\*******\AppData\Local\{A68F3C73-9FAA-4CB8-8139-B732CEB63E33}
2015-06-02 18:06 - 2015-06-02 18:06 - 00000000 ____D C:\Users\Kathi\AppData\Local\GWX
2015-06-02 17:51 - 2015-06-02 17:51 - 00814696 _____ C:\Windows\Minidump\060215-19063-01.dmp
2015-06-01 15:03 - 2015-06-01 15:03 - 00000000 ____D C:\Users\Franzi\AppData\Local\{9FB7F37B-F715-416A-B3F8-D981C8F0D1B2}
2015-06-01 15:02 - 2015-06-01 15:02 - 00000000 ____D C:\Users\Franzi\AppData\Local\GWX
2015-06-01 07:17 - 2015-06-01 07:17 - 00819792 _____ C:\Windows\Minidump\060115-19671-01.dmp
2015-05-31 18:01 - 2015-05-31 18:01 - 00000000 ____D C:\Users\Franzi\AppData\Local\{BA95F12D-F725-450A-A5AB-7E79B153ED99}
2015-05-29 07:02 - 2015-05-29 07:02 - 00000000 ____D C:\Users\*******\AppData\Local\{6A9EE71C-FA44-4BE9-B2C0-646E3914AE1E}
2015-05-29 06:32 - 2015-05-29 06:32 - 00000000 ____D C:\Users\*******\AppData\Local\{406B0EDB-F8AC-4389-944F-85EAD14A7CFE}
2015-05-28 19:35 - 2015-05-28 19:35 - 00814984 _____ C:\Windows\Minidump\052815-18766-01.dmp
2015-05-28 13:13 - 2015-05-28 13:13 - 00000000 ____D C:\Users\Franzi\AppData\Local\{429AD207-1D86-4532-82BB-15B6077F19CE}
2015-05-28 09:26 - 2015-05-28 09:26 - 00000000 ____D C:\Users\*******\AppData\Local\{E5F2BA79-EE98-4819-A6B4-41F6ABCE38E0}
2015-05-27 18:11 - 2015-05-27 18:11 - 00000000 ____D C:\Users\Franzi\AppData\Local\{A1B29565-6E07-4382-8E39-38E562DB4189}
2015-05-27 08:12 - 2015-05-27 08:12 - 00000000 ____D C:\Users\*******\AppData\Local\{48F306A2-93DB-4BBE-AFA8-08C924A6941F}
2015-05-27 08:11 - 2015-05-27 08:11 - 00000000 ____D C:\Users\Kathi\AppData\Local\{5DF776B8-67BC-4B61-BB47-C8FCE42B55AB}
2015-05-26 19:04 - 2015-05-26 19:05 - 00000000 ____D C:\Users\Kathi\AppData\Local\{BD89496F-B649-427A-B63F-B0CF937A616F}
2015-05-26 17:54 - 2015-05-26 17:54 - 00001972 _____ C:\Users\*******\Desktop\3476-123 col - Verknüpfung.lnk
2015-05-26 17:24 - 2015-05-26 17:24 - 00000000 ____D C:\Users\*******\AppData\Local\{447A7B38-A890-4C0F-A929-BEA4AD5A297F}
2015-05-25 21:04 - 2015-05-25 21:04 - 00001921 _____ C:\Users\*******\Downloads\4118006_Umsatzliste.csv
2015-05-25 19:02 - 2015-05-25 19:02 - 00000000 ____D C:\Users\Franzi\AppData\Local\{7ECB0A1F-B023-4C09-A1D9-3038F7DB3F82}
2015-05-25 19:00 - 2015-05-25 19:00 - 00851280 _____ C:\Windows\Minidump\052515-17986-01.dmp

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-24 22:37 - 2009-07-14 06:45 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-24 22:37 - 2009-07-14 06:45 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-24 22:31 - 2010-10-03 12:25 - 00000000 ____D C:\Users\*******
2015-06-24 21:52 - 2013-02-11 12:15 - 00000000 ____D C:\Users\Jonas\AppData\Roaming\Systweak
2015-06-24 21:52 - 2013-02-09 11:42 - 00000000 ____D C:\Users\Kathi\AppData\Roaming\Systweak
2015-06-24 21:52 - 2013-02-07 20:22 - 00000000 ____D C:\Users\Franzi\AppData\Roaming\Systweak
2015-06-24 21:47 - 2014-01-05 16:13 - 00000000 ____D C:\Program Files (x86)\StarMoney 9.0 S-Edition
2015-06-24 21:23 - 2013-08-17 17:50 - 00000000 ____D C:\Users\*******\AppData\Roaming\Skype
2015-06-24 21:23 - 2013-08-13 15:13 - 00000000 ____D C:\ProgramData\Skype
2015-06-24 20:09 - 2010-11-21 14:57 - 00000000 ____D C:\Users\*******\AppData\Local\PMB Files
2015-06-24 19:36 - 2011-07-31 16:48 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2015-06-24 19:36 - 2010-05-10 13:17 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-24 19:36 - 2009-07-14 06:51 - 00124770 _____ C:\Windows\setupact.log
2015-06-24 05:41 - 2010-05-08 05:19 - 00699432 _____ C:\Windows\system32\perfh007.dat
2015-06-24 05:41 - 2010-05-08 05:19 - 00149572 _____ C:\Windows\system32\perfc007.dat
2015-06-24 05:41 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-23 06:42 - 2013-01-22 15:18 - 00002187 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-22 21:56 - 2010-10-03 12:42 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-22 21:56 - 2010-10-03 12:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-22 21:44 - 2013-01-22 15:18 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-22 21:23 - 2012-12-15 13:18 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004UA.job
2015-06-22 21:09 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-22 20:43 - 2015-04-06 11:29 - 00000000 ___SD C:\Windows\system32\GWX
2015-06-22 20:43 - 2013-01-22 15:18 - 00000000 ____D C:\Windows\system32\Macromed
2015-06-22 20:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2015-06-22 20:33 - 2010-05-10 13:09 - 01748571 _____ C:\Windows\WindowsUpdate.log
2015-06-22 20:26 - 2015-04-06 11:29 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-06-22 14:42 - 2012-12-15 13:18 - 00000910 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004Core.job
2015-06-21 14:33 - 2013-01-05 22:07 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-06-20 09:28 - 2011-05-13 20:53 - 00000000 ____D C:\Users\*******\AppData\Local\CrashDumps
2015-06-19 18:01 - 2012-12-25 16:28 - 00000000 ____D C:\ProgramData\Avira
2015-06-19 18:01 - 2010-03-15 15:09 - 00699598 _____ C:\Windows\PFRO.log
2015-06-19 14:21 - 2011-02-22 13:46 - 00000000 ____D C:\Users\Kathi\AppData\Local\CrashDumps
2015-06-18 11:15 - 2015-03-13 10:00 - 00000000 __SHD C:\Users\Jonas\AppData\Local\EmieBrowserModeList
2015-06-18 11:15 - 2014-04-30 19:35 - 00000000 __SHD C:\Users\Jonas\AppData\Local\EmieUserList
2015-06-18 11:15 - 2014-04-30 19:35 - 00000000 __SHD C:\Users\Jonas\AppData\Local\EmieSiteList
2015-06-18 11:14 - 2010-10-03 19:51 - 00000000 ____D C:\Users\Jonas\Tracing
2015-06-17 11:38 - 2014-11-18 17:05 - 00000000 __SHD C:\Users\Kathi\AppData\Local\EmieBrowserModeList
2015-06-17 11:38 - 2014-05-02 16:01 - 00000000 __SHD C:\Users\Kathi\AppData\Local\EmieUserList
2015-06-17 11:38 - 2014-05-02 16:01 - 00000000 __SHD C:\Users\Kathi\AppData\Local\EmieSiteList
2015-06-16 16:45 - 2012-12-25 15:50 - 00002198 ____H C:\Users\*******\Documents\Default.rdp
2015-06-13 12:09 - 2014-11-13 17:47 - 00000000 __SHD C:\Users\*******\AppData\Local\EmieBrowserModeList
2015-06-13 12:09 - 2014-04-23 11:45 - 00000000 __SHD C:\Users\*******\AppData\Local\EmieUserList
2015-06-13 12:09 - 2014-04-23 11:45 - 00000000 __SHD C:\Users\*******\AppData\Local\EmieSiteList
2015-06-13 12:06 - 2010-03-15 15:02 - 00000000 ____D C:\Program Files (x86)\Google
2015-06-13 11:55 - 2014-08-06 08:55 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-13 11:54 - 2012-12-25 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-06-13 11:54 - 2012-12-25 16:28 - 00000000 ____D C:\Program Files (x86)\Avira
2015-06-13 11:49 - 2011-09-30 07:40 - 346127470 _____ C:\Windows\MEMORY.DMP
2015-06-13 11:49 - 2011-09-30 07:40 - 00000000 ____D C:\Windows\Minidump
2015-06-12 08:02 - 2013-01-22 15:18 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-12 08:01 - 2013-01-22 15:18 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-12 08:01 - 2013-01-22 15:18 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-11 10:18 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-11 03:39 - 2009-07-14 06:45 - 00414912 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-11 03:36 - 2014-12-12 04:31 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-11 03:36 - 2014-05-07 03:01 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-11 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-11 03:18 - 2010-03-15 14:52 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-11 03:16 - 2013-08-16 03:02 - 00000000 ____D C:\Windows\system32\MRT
2015-06-11 03:05 - 2010-11-14 16:32 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-10 15:17 - 2013-03-28 10:06 - 00153256 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-06-10 15:17 - 2013-03-28 10:06 - 00132656 _____ C:\Windows\system32\Drivers\avipbb.sys
2015-06-09 16:34 - 2014-03-06 20:56 - 00000000 ___RD C:\Users\Franzi\Dropbox
2015-06-09 16:34 - 2014-03-06 20:51 - 00000000 ____D C:\Users\Franzi\AppData\Roaming\Dropbox
2015-06-09 16:33 - 2010-10-03 19:14 - 00000000 ____D C:\Users\Franzi\Tracing
2015-06-07 20:51 - 2013-12-25 19:02 - 00000000 ____D C:\Users\*******\AppData\Local\iCopy
2015-05-26 19:16 - 2014-04-04 15:06 - 00000000 ____D C:\Users\Kathi\AppData\Local\Windows Live
2015-05-25 19:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing

==================== Files in the root of some directories =======

2011-05-02 14:33 - 2011-08-03 11:56 - 0005120 _____ () C:\Users\*******\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-06-19 18:27 - 2015-06-24 21:53 - 0007655 _____ () C:\Users\*******\AppData\Local\Resmon.ResmonCfg

Files to move or delete:
====================
C:\Users\*******\War_Rock_20100921.exe


Some files in TEMP:
====================
C:\Users\*******\AppData\Local\Temp\AcDeltree.exe
C:\Users\*******\AppData\Local\Temp\ApnStub.exe
C:\Users\*******\AppData\Local\Temp\AskSLib.dll
C:\Users\*******\AppData\Local\Temp\avgnt.exe
C:\Users\*******\AppData\Local\Temp\GdiPlus.dll
C:\Users\*******\AppData\Local\Temp\InstallerMessageBox.exe
C:\Users\*******\AppData\Local\Temp\install_flashplayer11x32ax_gtbp_chra_aih.exe
C:\Users\*******\AppData\Local\Temp\install_flashplayer11x32ax_gtbp_chra_aih_1.exe
C:\Users\*******\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\*******\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\*******\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\*******\AppData\Local\Temp\MSETUP4.EXE
C:\Users\*******\AppData\Local\Temp\NPSInstallerProxy.exe
C:\Users\*******\AppData\Local\Temp\NPSInstallerProxyMessageBoxHookDll.dll
C:\Users\*******\AppData\Local\Temp\SearchWithGoogleUpdate.exe
C:\Users\*******\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Franzi\AppData\Local\Temp\AskSLib.dll
C:\Users\Franzi\AppData\Local\Temp\avgnt.exe
C:\Users\Franzi\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpj7g68k.dll
C:\Users\Franzi\AppData\Local\Temp\install_flashplayer11x32ax_aih.exe
C:\Users\Franzi\AppData\Local\Temp\install_flashplayer11x32ax_gtbp_chra_aih.exe
C:\Users\Franzi\AppData\Local\Temp\setup.exe
C:\Users\Franzi\AppData\Local\Temp\wlsetup-cvr.exe
C:\Users\Jonas\AppData\Local\Temp\AskSLib.dll
C:\Users\Jonas\AppData\Local\Temp\avgnt.exe
C:\Users\Kathi\AppData\Local\Temp\AskSLib.dll
C:\Users\Kathi\AppData\Local\Temp\avgnt.exe
C:\Users\Kathi\AppData\Local\Temp\install_flashplayer11x32ax_gtbp_chra_aih.exe
C:\Users\Kathi\AppData\Local\Temp\install_flashplayer11x64ax_gtbp_chra_aih.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys
[2011-05-25 18:06] - [2010-11-20 15:34] - 0295808 ____A () D41D8CD98F00B204E9800998ECF8427E

C:\Windows\System32\Drivers\volsnap.sys No Company Name <===== ATTENTION!



testsigning: ==> testsigning is on. Check for possible unsigned rootkit driver <===== ATTENTION!

cosinus 24.06.2015 22:24
Bitte in CODE-Tags, Beitrag entsprechend editieren

Joahpi 24.06.2015 22:27
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version:24-06-2015
Ran by Ahrendt at 2015-06-24 22:38:15
Running from C:\Users\Ahrendt\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3928908445-2049478909-3784465887-500 - Administrator - Disabled)
Ahrendt (S-1-5-21-3928908445-2049478909-3784465887-1001 - Administrator - Enabled) => C:\Users\Ahrendt
Franzi (S-1-5-21-3928908445-2049478909-3784465887-1004 - Limited - Enabled) => C:\Users\Franzi
Gast (S-1-5-21-3928908445-2049478909-3784465887-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3928908445-2049478909-3784465887-1002 - Limited - Enabled)
Jonas (S-1-5-21-3928908445-2049478909-3784465887-1003 - Limited - Enabled) => C:\Users\Jonas
Kathi (S-1-5-21-3928908445-2049478909-3784465887-1005 - Limited - Enabled) => C:\Users\Kathi
UpdatusUser (S-1-5-21-3928908445-2049478909-3784465887-1006 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Photoshop Elements 8.0 (HKLM-x32\...\Adobe Photoshop Elements 8.0) (Version: 8.0 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
Amazon Music (HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Amazon Amazon Music) (Version: 3.9.5.820 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Amazon Amazon Music) (Version: 3.9.5.820 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{CCE825DB-347A-4004-A186-5F4A6FDD8547}) (Version: 2.3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{D70884EA-E2CE-4539-91DB-4766CC1E5F5F}) (Version: 6.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ask Toolbar (HKLM-x32\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.13.1.0 - Ask.com) <==== ATTENTION
Avira (HKLM-x32\...\{0696cc37-db90-4000-be99-4a173ca7c8af}) (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.11.574 - Avira Operations GmbH & Co. KG)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.82 - WildTangent) Hidden
Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Blasterball 3 (x32 Version: 2.2.0.82 - WildTangent) Hidden
Bob the Builder Can-Do-Zoo (x32 Version: 2.2.0.82 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Build-a-lot 2 (x32 Version: 2.2.0.82 - WildTangent) Hidden
CAD-Modul 2011 (HKLM\...\CAD-Modul 2011) (Version: 18.1.49.0 - liNear GmbH)
CAD-Modul 2011 (Version: 18.1.49.0 - liNear GmbH) Hidden
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version:  - )
Canon Kurzwahlprogramm (HKLM-x32\...\Speed Dial Utility) (Version:  - )
Canon MP Navigator EX 4.1 (HKLM-x32\...\MP Navigator EX 4.1) (Version:  - )
Canon MX420 series Benutzerregistrierung (HKLM-x32\...\Canon MX420 series Benutzerregistrierung) (Version:  - )
Canon MX420 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX420_series) (Version:  - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )
Chicken Invaders 3 - Revenge of the Yolk (x32 Version: 2.2.0.82 - WildTangent) Hidden
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Dropbox) (Version: 3.4.6 - Dropbox, Inc.)
Dropbox (HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Dropbox) (Version: 3.4.6 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{E0B19DF7-B1C7-4937-82C4-0E4B1E346965}) (Version: 2.1.0901 - OEM)
ElsterFormular (HKLM-x32\...\ElsterFormular 13.2.0.8623k) (Version: 16.1.16483 - Landesfinanzdirektion Thüringen)
Escape Rosecliff Island (x32 Version: 2.2.0.82 - WildTangent) Hidden
ESOP 4.0 (HKLM-x32\...\ESOP 4.0_is1) (Version: 4.0 - Viessmann GmbH)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Faerie Solitaire (x32 Version: 2.2.0.82 - WildTangent) Hidden
FATE - The Traitor Soul (x32 Version: 2.2.0.82 - WildTangent) Hidden
FMS (HKLM-x32\...\FMS) (Version:  - )
FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version:  - )
FRITZ!Box-Fernzugang einrichten (HKLM-x32\...\{EFADD989-D9F2-49F6-A280-675951CC78D3}) (Version: 1.0.3 - AVM Berlin)
FRITZ!Fernzugang (HKLM\...\{5001E5BC-C9BF-4598-AB89-E7318C76C5F4}) (Version: 1.2.6 - AVM Berlin)
GamersFirst LIVE! (HKLM-x32\...\GamersFirst LIVE!) (Version:  - GamersFirst)
GIMP 2.8.8 (HKLM\...\GIMP-2_is1) (Version: 2.8.8 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.04) (Version: 9.04 - Artifex Software Inc.)
GPS Master 1.2.0.0 (HKLM-x32\...\GPS Master_is1) (Version: 1.0 - GPS Master)
Hotkey Utility (HKLM-x32\...\Hotkey Utility) (Version: 2.05.3003 - Packard Bell)
iCopy (HKLM-x32\...\iCopy) (Version: 1.6.1 - Matteo Rossi)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Packard Bell)
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
Insaniquarium Deluxe (x32 Version: 2.2.0.82 - WildTangent) Hidden
iTunes (HKLM\...\{0E5D76AD-A3FB-48D5-8400-8903B10317D3}) (Version: 11.0.1.12 - Apple Inc.)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Jewel Quest (x32 Version: 2.2.0.82 - WildTangent) Hidden
Jewel Quest Solitaire 3 (x32 Version: 2.2.0.82 - WildTangent) Hidden
JNLP (HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\JNLP) (Version:  - JNLP)
JNLP (HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\JNLP) (Version:  - JNLP)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
liNear Admin (HKLM-x32\...\liNear Admin) (Version: 1.00 - liNear GmbH)
liNear Admin (x32 Version: 1.00 - liNear GmbH) Hidden
liNear CAD Bibliotheken (HKLM-x32\...\liNear CAD-Daten) (Version: 1.00 - liNear GmbH)
liNear CAD-Daten (x32 Version: 1.00 - liNear GmbH) Hidden
liNear Produktdaten (x32 Version: 2.00 - liNear GmbH) Hidden
liNear Produktdatensätze (HKLM-x32\...\liNear Produktdaten) (Version: 2.00 - liNear GmbH)
liNear Updater (HKLM-x32\...\liNear Updater) (Version: 2.00 - liNear GmbH)
liNear Updater (x32 Version: 2.00 - liNear GmbH) Hidden
Mahjongg Artifacts (x32 Version: 2.2.0.82 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{6965A8D2-465D-4F98-9FAA-0E9E2348F329}) (Version: 3.22.270.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Language Pack 2007 - German/Deutsch (HKLM-x32\...\OMUI.de-de) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.218 (HKLM\...\{BBBE35B2-9349-3C48-BD3D-F574B17C7924}) (Version: 9.0.21022.218 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 Essentials (HKLM-x32\...\{330e1566-027d-4d04-a8c5-011f9f6e8bc7}) (Version:  - Nero AG)
Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.0.36 - Symantec)
NVIDIA 3D Vision Treiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.9 - NVIDIA Corporation)
NVIDIA Grafiktreiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}) (Version: 9.09.0814 - NVIDIA Corporation)
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
Orange Line 3 - Erweiterungskurs Sprachtrainer (HKLM-x32\...\{C7F41948-6B7E-4811-B558-F4790585D7EA}) (Version: 1.00.000 - Klett)
Packard Bell Game Console (x32 Version:  - WildTangent) Hidden
Packard Bell Games (HKLM-x32\...\WildTangent packardbell Master Uninstall) (Version: 1.0.0.80 - WildTangent)
Packard Bell InfoCentre (HKLM-x32\...\Packard Bell InfoCentre) (Version: 3.02.3000 - Packard Bell)
Packard Bell Recovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3007 - Packard Bell)
Packard Bell Registration (HKLM-x32\...\Packard Bell Registration) (Version: 1.02.3006 - Packard Bell)
Packard Bell ScreenSaver (HKLM-x32\...\Packard Bell Screensaver) (Version: 1.1.0812 - Packard Bell Incorporated)
Packard Bell Software Suite SE (HKLM-x32\...\Packard Bell Software Suite SE) (Version: 2.01.3003 - Packard Bell)
Packard Bell Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Packard Bell)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.3.3.6 - Pando Networks Inc.)
Penguins! (x32 Version: 2.2.0.82 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.82 - WildTangent) Hidden
Polar Golfer (x32 Version: 2.2.0.82 - WildTangent) Hidden
Polar Pool (x32 Version: 2.2.0.82 - WildTangent) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5983 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version:  - )
Samsung New PC Studio (HKLM-x32\...\InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio (x32 Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
Samsung PC Studio 3 USB Driver Installer (HKLM-x32\...\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}) (Version: 3.2.0.70701 - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.3.650.0 - SAMSUNG Electronics Co., Ltd.)
Sprachtrainer Fonts (HKLM-x32\...\{FBCF2ED3-AFB5-475E-BF9A-30BEAD366FBC}) (Version: 1.00.01 - Ernst Klett Verlag GmbH)
StarMoney (x32 Version: 2.0 - StarFinanz) Hidden
StarMoney (x32 Version: 3.0.2.50 - StarFinanz) Hidden
StarMoney (x32 Version: 4.0.0.203 - StarFinanz) Hidden
StarMoney (x32 Version: 5.0 - StarFinanz) Hidden
StarMoney 5.0 S-Edition (HKLM-x32\...\{6FDCF790-49AF-4E3B-8EB2-C07E2DBA55EA}) (Version: 5.0 - StarFinanz GmbH)
StarMoney 7.0 S-Edition (HKLM-x32\...\{C5C78296-C06F-4800-BEF8-820980BB5889}) (Version: 7.0 - Star Finanz GmbH)
StarMoney 8.0 S-Edition (HKLM-x32\...\{92800318-9F3D-473E-B80D-7BF7EDFE0293}) (Version: 8.0 - Star Finanz GmbH)
StarMoney 9.0 S-Edition (HKLM-x32\...\{46231661-A15A-43FA-AB57-3714A33E500C}) (Version: 9.0 - Star Finanz GmbH)
TAPPS 1.28 DE (HKLM-x32\...\TAPPS DE_is1) (Version:  - )
TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)
UnderCoverXP 1.23 (HKLM-x32\...\UnderCoverXP_is1) (Version:  - Wicked & Wild Inc.)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Virtual Families (x32 Version: 2.2.0.82 - WildTangent) Hidden
Virtual Villagers - A New Home (x32 Version: 2.2.0.82 - WildTangent) Hidden
Vitodesk 100 CAD-Bibliothek (HKLM-x32\...\Vitodesk Browser) (Version: 1.00 - Viessmann)
Vitodesk 100 Tools (HKLM-x32\...\Vitodesk Programme 3) (Version: 3.00 - Viessmann)
Vitodesk 200 CAD-Programme 2011 (HKLM-x32\...\Vitodesk CAD 2011) (Version: 11.00 - Viessmann)
Vitodesk 200 Haustechnik 2011 (HKLM-x32\...\Vitodesk Haustechnik 2011) (Version: 11.00 - Viessmann)
Vitodesk 200 Leistungsverzeichnis (HKLM-x32\...\VitoLV 3) (Version: 3.00 - Viessmann)
Vitodesk Browser (x32 Version: 1.00 - Viessmann) Hidden
Vitodesk CAD 2011 (x32 Version: 11.00 - Viessmann) Hidden
Vitodesk Haustechnik 2011 (x32 Version: 11.00 - Viessmann) Hidden
Vitodesk Programme 3 (x32 Version: 3.00 - Viessmann) Hidden
Vitodesk Projektverwaltung (HKLM-x32\...\Vitodesk Projektverwaltung 3) (Version: 3.00 - Viessmann)
Vitodesk Projektverwaltung 3 (x32 Version: 3.00 - Viessmann) Hidden
VitoLV 3 (x32 Version: 3.00 - Viessmann) Hidden
War Rock (HKLM-x32\...\GamersFirst War Rock) (Version:  - GamersFirst)
Welcome Center (HKLM-x32\...\Packard Bell Welcome Center) (Version: 1.00.3013 - Packard Bell)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows-Treiberpaket - Sunplus (SPCP825K) Ports  (07/01/2010 1.0.9.0) (HKLM\...\20986CDBFBCA238AA12329A115B1CC9D88E9C06C) (Version: 07/01/2010 1.0.9.0 - Sunplus)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version:  - )
Yahtzee (x32 Version: 2.2.0.82 - WildTangent) Hidden
Zuma Deluxe (x32 Version: 2.2.0.82 - WildTangent) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Franzi\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\liNear GmbH\CAD-Modul 2011\CADMODficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\liNear GmbH\CAD-Modul 2011\CADMOD.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001_Classes\CLSID\{F9E1BD9A-84B5-4D12-9195-0B3E7D86FD35}\InprocServer32 -> C:\ProgramData\{CA2FACF7-9029-4A21-892B-E7F60B39FF1A}\kdcom.dll ()
CustomCLSID: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
CustomCLSID: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
CustomCLSID: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
CustomCLSID: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File

==================== Restore Points =========================


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {210DFDC0-D29D-4D1F-A389-5DA24C908FAF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {3B154562-3F66-48CE-91D1-D3F226DFEDCB} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe <==== ATTENTION
Task: {3C4C58C7-3504-4302-879A-1B18C2F5BCDF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-12] (Adobe Systems Incorporated)
Task: {43FEE7ED-F69B-4B9F-9B0C-488639003506} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {7722B1A7-1AAE-4FA5-8803-9152136EB5ED} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {79CB0E13-08B4-4A1A-B41A-CCC44A7FECB2} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004UA => C:\Users\Franzi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-15] (Facebook Inc.)
Task: {854FA511-20D2-4C46-B801-722E79B99F71} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {A19DB5B7-4B75-4F97-8B13-DC217836681B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {BB61B54C-E26E-4BEF-B53B-6D3E670D168A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004Core => C:\Users\Franzi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-15] (Facebook Inc.)
Task: {CCD0BA7F-9C5F-4648-B4DC-B7C96929851F} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Time-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {F8E95B31-8E0E-460E-8B44-29F0D6E261C6} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {F8EB001B-A72D-4B5B-8156-006A1E6587DC} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004Core.job => C:\Users\Franzi\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004UA.job => C:\Users\Franzi\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

cosinus 24.06.2015 22:31
FRST.txt ist nicht in CODE-Tags, Addition.txt unvollständig - aber egal, du hast ein Rootkit im System:

U5 2b5b93e885bc6a00; C:\Windows\System32\Drivers\2b5b93e885bc6a00.sys [88504 2015-06-19] () <===== ATTENTION Necurs Rootkit?

Lesestoff:
Rootkit-Warnung
Dein Computer wurde mit einem besonderen Schädling infiziert, der sich vor herkömmlichen Virenscannern und dem Betriebssystem selbst verstecken kann. Zusätzlich hat so ein Schädling meist auch Backdoor-Funktionalität, reißt also ganz bewußt Löcher durch alle Schutzmaßnahmen, damit er weiteren Schadcode nachladen oder die Daten, die er so sammelt, an die "bösen Jungs" weiterleiten kann. Was heißt das jetzt für dich?
  • Entscheide bitte ganz bewußt, ob du mit der Bereinigung fortfahren möchtest. Ein einmal derartig kompromittiertes System kann man niemals mit 100%iger Sicherheit wieder absichern. Auch wenn wir gute Chancen haben, deinen Computer zu bereinigen, kann es dennoch möglich sein, dass uns am Ende nur die Neuinstallation bleibt.

  • Wenn du mit diesem Computer beispielsweise Onlinebanking machst, dann solltest du zumindest dein Passwort von deiner Bank ändern lassen, wenn du ein ansonsten sicheres Verfahren wie beispielsweise "chip-TAN-comfort" nutzt. Hast du noch alte TAN-Bögen auf Papierbasis? Dann ist es höchste Zeit dich bei deiner Bank zu melden und notfalls das Konto temporär sperren zu lassen. Der Sperrnotruf 116 116 von www.sperr-notruf.de kann Tag und Nacht dafür benutzt werden.

  • Hast du ansonsten sensible Daten auf deinem Computer, dann solltest du auch darüber nachdenken, wie du damit umgehst, da sie sich praktisch "jeder" ansehen konnte.
Teile mir also mit, wie du dich entschieden hast.

Joahpi 24.06.2015 22:40
hmm, das hört sich beunruhigend an.

Ich würde schon gerne versuchen das System wieder flott zu bekommen. Beim Banking nutze ich von dem betroffenen Rechner zu 95% das Chip-tan Verfahren, Passwörter und TAN Nummern habe ich keine gespeichert.

cosinus 24.06.2015 22:51
Kein Problem, versuchen wir zu bereinigen

Dann bitte jetzt Combofix ausführen:

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Joahpi 24.06.2015 23:41
Danke, das geht los.

So, das wäre geschafft, Fehlermeldungen gab's keine:

Code:
ComboFix 15-06-24.02 - Ahrendt 25.06.2015  0:07.1.2 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.3071.1866 [GMT 2:00]
ausgeführt von:: c:\users\Ahrendt\Desktop\ComboFix.exe
AV: Avira Antivirus *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Antivirus *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Ahrendt\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\users\Ahrendt\War_Rock_20100921.exe
.
.
(((((((((((((((((((((((  Dateien erstellt von 2015-05-24 bis 2015-06-24  ))))))))))))))))))))))))))))))
.
.
2015-06-24 22:22 . 2015-06-24 22:22        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp
2015-06-24 22:22 . 2015-06-24 22:22        --------        d-----w-        c:\users\Kathi\AppData\Local\temp
2015-06-24 22:22 . 2015-06-24 22:22        --------        d-----w-        c:\users\Default\AppData\Local\temp
2015-06-24 22:22 . 2015-06-24 22:22        --------        d-----w-        c:\users\Franzi\AppData\Local\temp
2015-06-24 22:22 . 2015-06-24 22:22        --------        d-----w-        c:\users\Jonas\AppData\Local\temp
2015-06-24 20:34 . 2015-06-24 20:38        --------        d-----w-        C:\FRST
2015-06-24 19:27 . 2015-06-24 21:09        136408        ----a-w-        c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-06-24 19:27 . 2015-06-24 19:27        --------        d-----w-        c:\program files (x86)\Malwarebytes Anti-Malware
2015-06-24 19:27 . 2015-06-24 19:27        --------        d-----w-        c:\programdata\Malwarebytes
2015-06-24 19:27 . 2015-04-14 07:37        63704        ----a-w-        c:\windows\system32\drivers\mwac.sys
2015-06-24 19:27 . 2015-04-14 07:37        107736        ----a-w-        c:\windows\system32\drivers\mbamchameleon.sys
2015-06-24 19:27 . 2015-04-14 07:37        25816        ----a-w-        c:\windows\system32\drivers\mbam.sys
2015-06-24 03:59 . 2015-06-24 03:59        --------        d-----w-        c:\programdata\PMB Files
2015-06-19 15:58 . 2015-06-19 15:58        --------        d--h--w-        c:\programdata\{CA2FACF7-9029-4A21-892B-E7F60B39FF1A}
2015-06-18 09:14 . 2015-06-18 09:14        --------        d-----w-        c:\users\Jonas\AppData\Local\GWX
2015-06-10 13:42 . 2015-05-25 17:08        3206144        ----a-w-        c:\windows\system32\win32k.sys
2015-06-05 05:17 . 2015-06-05 05:18        --------        d-----w-        c:\users\Ahrendt\AppData\Local\Amazon Music
2015-06-05 05:00 . 2015-06-05 05:00        --------        d-----w-        c:\users\Ahrendt\AppData\Local\GWX
2015-06-02 16:06 . 2015-06-02 16:06        --------        d-----w-        c:\users\Kathi\AppData\Local\GWX
2015-06-01 13:02 . 2015-06-01 13:02        --------        d-----w-        c:\users\Franzi\AppData\Local\GWX
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-06-12 06:01 . 2013-01-22 13:18        778416        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2015-06-12 06:01 . 2013-01-22 13:18        142512        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-06-11 01:05 . 2010-11-14 14:32        140135120        ----a-w-        c:\windows\system32\MRT.exe
2015-06-10 13:17 . 2013-03-28 08:06        153256        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2015-06-10 13:17 . 2013-03-28 08:06        132656        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2015-05-25 18:01 . 2015-06-10 13:43        44032        ----a-w-        c:\windows\apppatch\acwow64.dll
2015-05-01 13:17 . 2015-05-14 01:04        124112        ----a-w-        c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-01 13:16 . 2015-05-14 01:04        102608        ----a-w-        c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-04-20 03:17 . 2015-05-13 14:57        1647104        ----a-w-        c:\windows\system32\DWrite.dll
2015-04-20 03:17 . 2015-05-13 14:57        1179136        ----a-w-        c:\windows\system32\FntCache.dll
2015-04-20 02:56 . 2015-05-13 14:57        1250816        ----a-w-        c:\windows\SysWow64\DWrite.dll
2015-04-18 03:10 . 2015-05-13 14:58        460800        ----a-w-        c:\windows\system32\certcli.dll
2015-04-18 02:56 . 2015-05-13 14:58        342016        ----a-w-        c:\windows\SysWow64\certcli.dll
2015-04-13 03:28 . 2015-05-13 14:58        328704        ----a-w-        c:\windows\system32\services.exe
2015-04-08 03:29 . 2015-05-13 14:57        275456        ----a-w-        c:\windows\system32\InkEd.dll
2015-04-08 03:29 . 2015-05-13 14:57        24576        ----a-w-        c:\windows\system32\jnwmon.dll
2015-04-08 03:14 . 2015-05-13 14:57        216064        ----a-w-        c:\windows\SysWow64\InkEd.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2010-11-21 2937528]
"AutoStartNPSAgent"="c:\program files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe" [2010-07-04 95576]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-03-15 39408]
"Amazon Music"="c:\users\Ahrendt\AppData\Local\Amazon Music\Amazon Music Helper.exe" [2015-05-07 5886784]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"OOTag"="c:\program files (x86)\Packard Bell\OOBEOffer\OOTag.exe" [2010-02-23 13856]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2013-05-08 41056]
"Hotkey Utility"="c:\program files (x86)\Packard Bell\Hotkey Utility\HotkeyUtility.exe" [2010-03-26 563744]
"NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-07-24 588648]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"LifeCam"="c:\program files (x86)\Microsoft LifeCam\LifeExp.exe" [2010-05-20 119152]
"CanonSolutionMenuEx"="c:\program files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" [2010-09-14 1213848]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2015-06-10 730416]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-12-12 152544]
"FreePDF Assistant"="c:\program files (x86)\FreePDF_XP\fpassist.exe" [2011-02-23 371200]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"Avira Systray"="c:\program files (x86)\Avira\Launcher\Avira.Systray.exe" [2015-05-21 130864]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
GamersFirst LIVE!.lnk - c:\program files (x86)\GamersFirst\LIVE!\Live.exe /silent [2010-10-8 2845552]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 AntiVirMailService;Avira Email-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe [x]
R2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
R3 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SPCP825K;Sunplus Serial port driver;c:\windows\system32\DRIVERS\SPCP825K.sys;c:\windows\SYSNATIVE\DRIVERS\SPCP825K.sys [x]
R3 sxuptp;SXUPTP Driver;c:\windows\system32\DRIVERS\sxuptp.sys;c:\windows\SYSNATIVE\DRIVERS\sxuptp.sys [x]
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys;c:\windows\SYSNATIVE\Drivers\TFsExDisk.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R4 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe [x]
R4 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 aksdf;aksdf;c:\windows\system32\drivers\aksdf.sys;c:\windows\SYSNATIVE\drivers\aksdf.sys [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 Avira.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe [x]
S2 avmike;AVM FRITZ!Fernzugang IKE Service;c:\program files\FRITZ!Fernzugang\avmike.exe;c:\program files\FRITZ!Fernzugang\avmike.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 certsrv;AVM FRITZ!Fernzugang Cert Service;c:\program files\FRITZ!Fernzugang\certsrv.exe;c:\program files\FRITZ!Fernzugang\certsrv.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 Greg_Service;GRegService;c:\program files (x86)\Packard Bell\Registration\GregHSRW.exe;c:\program files (x86)\Packard Bell\Registration\GregHSRW.exe [x]
S2 nwtsrv;AVM FRITZ!Fernzugang Client;c:\program files\FRITZ!Fernzugang\nwtsrv.exe;c:\program files\FRITZ!Fernzugang\nwtsrv.exe [x]
S2 StarMoney 7.0 OnlineUpdate;StarMoney 7.0 OnlineUpdate;c:\program files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe;c:\program files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [x]
S2 StarMoney 8.0 OnlineUpdate;StarMoney 8.0 OnlineUpdate;c:\program files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe;c:\program files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [x]
S2 StarMoney 9.0 OnlineUpdate;StarMoney 9.0 OnlineUpdate;c:\program files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe;c:\program files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 Updater Service;Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [x]
S3 NWIM;AVM VPN Miniport;c:\windows\system32\DRIVERS\avmnwim.sys;c:\windows\SYSNATIVE\DRIVERS\avmnwim.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
*Deregistered* - 2b5b93e885bc6a00
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-06-23 04:00        990024        ----a-w-        c:\program files (x86)\Google\Chrome\Application\43.0.2357.130\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-06-22 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-22 06:01]
.
2015-06-22 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004Core.job
- c:\users\Franzi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-15 11:18]
.
2015-06-22 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004UA.job
- c:\users\Franzi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-15 11:18]
.
2015-06-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-03 06:45]
.
2015-06-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-03 06:45]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-11-17 9608224]
"OOTag"="c:\program files (x86)\Packard Bell\OOBEOffer\ootag.exe" [2010-02-23 13856]
"VX3000"="c:\windows\vVX3000.exe" [2010-05-20 762736]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2010-07-25 2782096]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.as-holm.de/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
Trusted Zone: zillertalbahn.at\www
TCP: DhcpNameServer = 192.168.179.1
DPF: {73888E2B-FF04-416C-8847-984D7FC4507F} - hxxp://eggerstedt.dyndns.org:1030/RtspVaPgDecNew2.cab
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{00000000-6E41-4FD3-8538-502F5495E5FC} - c:\program files (x86)\Ask.com\GenericAskToolbar.dll
BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files (x86)\Ask.com\GenericAskToolbar.dll
Toolbar-Locked - (no file)
Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files (x86)\Ask.com\GenericAskToolbar.dll
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
Wow6432Node-HKLM-Run-NPSStartup - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKLM-Run-ApnUpdater - c:\program files (x86)\Ask.com\Updater\Updater.exe
c:\users\Franzi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk - c:\users\Ahrendt\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - c:\users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - c:\users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - c:\users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - c:\users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\2b5b93e885bc6a00]
"ImagePath"="\SystemRoot\System32\Drivers\2b5b93e885bc6a00.sys"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_188_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_188_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_188_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_188_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_188.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.17"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_188.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_188.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_188.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-06-25  00:37:45 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-06-24 22:37
.
Vor Suchlauf: 13 Verzeichnis(se), 374.247.710.720 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 377.757.687.808 Bytes frei
.
- - End Of File - - 3A95D33931DAFA367858EC4B75671FCB
A36C5E4F47E84449FF07ED3517B43A31

cosinus 24.06.2015 23:46
Adware/Junkware/Toolbars entfernen

1. Schritt: Malwarebytes

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!)

2. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).



3. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




4. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Joahpi 25.06.2015 00:22
So, auch das wäre erledigt, ich hoffe die Dateien verschaffen neue Erkenntnisse

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 25.06.2015
Suchlauf-Zeit: 00:50:55
Logdatei: mban.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.03.09.05
Rootkit Datenbank: v2015.02.25.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Ahrendt

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 556019
Verstrichene Zeit: 12 Min, 34 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 0
(Keine schädliche Elemente gefunden)

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 0
(Keine schädliche Elemente gefunden)

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)
Code:
# AdwCleaner v4.207 - Bericht erstellt 25/06/2015 um 01:07:20
# Aktualisiert 21/06/2015 von Xplode
# Datenbank : 2015-06-21.1 [Lokal]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Ahrendt - AHRENDT-PC
# Gestarted von : C:\Users\Ahrendt\Desktop\AdwCleaner_4.207.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Program Files (x86)\Ask.com
Ordner Gelöscht : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Ordner Gelöscht : C:\Users\Ahrendt\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Ahrendt\AppData\LocalLow\Softonic
Ordner Gelöscht : C:\Users\Franzi\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Jonas\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Kathi\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Kathi\AppData\LocalLow\Softonic
Ordner Gelöscht : C:\Users\Kathi\AppData\Roaming\Systweak
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Kathi\Desktop\Continue Zip Extractor Installation.lnk

***** [ Geplante Tasks ] *****

Task Gelöscht : Scheduled Update for Ask Toolbar

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B15F118E-AF21-45E8-A809-29FDD7362565}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A3E2F089-DDBB-4CBF-B06C-5D44DA316ED3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{087CDC12-0A11-4D1D-8DCF-44185D7C3496}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{088BF3A9-6AE8-47B9-A3FB-26262F236C79}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2AC7B9EB-3881-4EB9-8DEE-0A731A309FDE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{349C0469-ACDD-49DF-9B3E-0D82E7C7DC4D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{41226591-6F7A-4082-B63A-67FE4A0CF7A6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55D69CD1-6715-4C40-BF05-9519AC4DC6E6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66C8FD57-54C4-4D4F-BC95-DCCC763B410A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{717BAE33-7061-4279-8AE5-6C13BC8AF3F9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{84F06F7A-F811-48D7-8B34-3F4145183D8F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{88F6D55F-AA3F-4003-BE69-4AC1998D6492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A0F66203-1A86-4812-9603-A57E09A4D7A3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BC39D1B3-4471-41C1-AACA-E097FAF4B7AA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DEB85542-1311-4EC6-8A32-5372EB27FC94}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11D9E165-B8C1-4734-A56C-BC4FCACA966B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CF034EA-7B46-48D3-8895-8A14B32AE445}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{21FA44EF-376D-4D53-9B0F-8A89D3229068}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{087CDC12-0A11-4D1D-8DCF-44185D7C3496}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{088BF3A9-6AE8-47B9-A3FB-26262F236C79}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2AC7B9EB-3881-4EB9-8DEE-0A731A309FDE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{349C0469-ACDD-49DF-9B3E-0D82E7C7DC4D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{41226591-6F7A-4082-B63A-67FE4A0CF7A6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55D69CD1-6715-4C40-BF05-9519AC4DC6E6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66C8FD57-54C4-4D4F-BC95-DCCC763B410A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{717BAE33-7061-4279-8AE5-6C13BC8AF3F9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{84F06F7A-F811-48D7-8B34-3F4145183D8F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{88F6D55F-AA3F-4003-BE69-4AC1998D6492}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A0F66203-1A86-4812-9603-A57E09A4D7A3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{BC39D1B3-4471-41C1-AACA-E097FAF4B7AA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DEB85542-1311-4EC6-8A32-5372EB27FC94}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2ED9D2A9-CE4C-43CD-A8DC-CA6E7AE24351}
Schlüssel Gelöscht : HKCU\Software\APN
Schlüssel Gelöscht : HKCU\Software\Ask.com
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\AskToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\APN
Schlüssel Gelöscht : HKLM\SOFTWARE\AskToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Softonic
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\search.softonic.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\softonic.com

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17840

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

-\\ Google Chrome v43.0.2357.130

[C:\Users\Franzi\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Gelöscht [Extension] : elchiiiejkobdbblfejjkbphbddgmljf

*************************

AdwCleaner[R0].txt - [9802 Bytes] - [25/06/2015 01:05:54]
AdwCleaner[S0].txt - [9286 Bytes] - [25/06/2015 01:07:20]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9345  Bytes] ##########
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.1.3 (06.24.2015:3)
OS: Windows 7 Home Premium x64
Ran by Ahrendt on 25.06.2015 at  1:12:33,10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0077232B-C525-4654-ADB1-F5C71C23D1B0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{008D42E7-0719-438C-99E6-485FE8473ECB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{00A7577B-6714-4DF2-9DC6-93781C085DDC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{00D0B146-6369-4806-8805-29E6254DF043}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{00D89D15-78DB-496C-B20B-D0412AFBF542}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{010A102A-B7DC-4F2F-957D-A5875FA995A3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0144F9FA-F71E-49DA-AB4C-8C41EBEDD472}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{01FA0AF2-D922-4F5C-BD1E-4FEDF7B2480F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{02099C7D-1B78-4021-847F-DA6F9BFCFF44}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{02156205-B2E1-4729-AAA8-0221268EC3CF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{021E4759-889D-419C-A203-6144DA9951A6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{029BF4AD-EA89-4070-B980-759D3DBFC8FF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{02A32AA3-9AEA-420F-9207-3CD6F71BBF89}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{02C676A8-02E5-4EC4-AB46-3C03E81244D5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{02DE0465-73E8-4128-90E8-09F5ECDD0E6C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{02E24C09-A74F-4D19-B0D7-E677D19F0A8D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{02E36132-4F9E-49DA-997A-74FA623F769A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{02E49D77-04AB-4F18-A778-8A6D0F47D8D3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{032721C9-C34A-4413-B5B3-BEFE7FC55699}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{03286230-3386-4882-8E2F-4435DC1DF077}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{035D6646-04B5-4B5F-B342-BD3831766781}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0375B487-8E4D-4BA4-9CDD-10A1C7C2C334}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{037D4EA7-7321-476B-8585-B5AF2F130B52}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{03AAE10F-09D4-407C-84F7-C803AA908BF9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{03B84275-C6E5-420E-8C58-0135723BE0D3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{03B97BDE-8FDB-44AB-AFED-1ECC179E3378}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{03BC27C7-AD7A-473B-8A5E-EB501E016C3D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{03C346F5-7B43-41F5-B892-477D1543F63B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{03CCF0EA-30AD-444B-8C6A-2EB1BD917F48}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{041AB513-E3DB-413C-A799-FAC0A577812F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{041BECBA-A299-4D9B-864E-19A02F1FA827}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{041CEADE-D6E3-41DE-89BA-B999D4D01725}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{043C625B-554C-4226-A4E1-F3A7869B4358}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{043E9D3B-137C-4B26-BBF8-54F446F1ECDF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{04633B4B-4BEE-43C9-BE4A-DAD0EE24CAB8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{04BAD066-5A2F-48F3-B117-91250CE51C9D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{04C37FA4-D376-478F-8C71-0A199F6EA6CA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{04FCA00D-7D08-4522-800D-42C8EE0E1CE5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0509DEF4-1A90-48CD-B3AA-07BB0BCC0245}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0513D1E3-1398-4A5C-AC48-BCFCC8E9D735}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{05168FC4-3FD9-4DCE-AD51-E7C754B2346A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{051C7E7F-3590-408E-A37E-2CA609FE9B32}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{05224C52-E57E-48D3-9CE5-C13EBB9A1114}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{05477FBA-C288-4CFE-B986-342E1089C6C5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{054938D4-C6FC-4188-BB86-5DEB73B09B91}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{05585418-AB0E-49E1-9C45-D72C0E60BD71}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0594F4C9-3C4F-47C3-9AC3-F53BEDAA016E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{05B1ECF1-9250-4EE1-9E89-6C7802478CE8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{05C032AF-AD26-4191-9566-BAC041BCA61C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{05C6D285-620E-4A55-8FA4-CBBFD5B6C25C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{05D92315-A814-4A0C-A4CA-765453E6CC79}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{05FDF6AB-F155-489C-8D24-E1ECE7F17AB5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{06129A35-B55E-4823-BFD4-3DF724A9496D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0617601A-6468-4606-92A1-96078428A1E5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{069052D2-495C-4E01-A069-72BECB5E18E2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{06970257-667F-462D-A5D9-A44C5FECB7A2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{06AF524E-C899-4DE3-A019-FE994242BD41}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{06C19EE2-5147-47CB-BC5A-3FF105FF628E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0717EA14-8D07-427A-B036-CC1D4BF2D42C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{07241FED-0AD6-4252-BC5D-1DEA0F75017D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0725EA6F-D465-4B93-A256-3F6C46A023D0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{074CEDFC-7CEC-4F9D-8095-63AD8B9128DB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{076AC9F8-B473-4DC5-A6DF-5F82DEE14E0C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{077EEB78-D2AC-4C45-97DD-F23BC3E728F1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0786B8BF-6AF0-4CF2-B6A6-8090FEA5261D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{07B0AE72-B58E-4921-9676-A4DC1CBC0A97}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{07BB9A33-E0CD-490E-B817-240780235A70}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{07BD8A5C-4C1E-480E-A966-91E8E5A9ADBE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{07C66D4A-207F-45E0-A0AA-A4C72D9AB3F9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{07C9E858-9FB1-4EAF-9AD9-4D606EECBDDB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{07D2DD14-9003-4186-88FC-27F811FDAF04}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{082B4771-0A85-45BA-A7B3-82B0F7008C9C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0889229D-89DB-4528-9E2B-77229A8FF36F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{088B5C89-905B-4900-B54E-0017F7BD76B5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{08A302AD-98D6-4515-B940-0527CAF00BDE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{08A7D082-9A84-4FD6-9545-DE6141091946}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{08DABB9D-B663-4B20-ACF3-31A3ECD997BB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{08F36BDD-E413-4E9A-B271-D67640A2F5DB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0931EBE6-D29E-4E31-AF1E-0DDB7E698B68}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0934D21D-0366-433D-AD4E-0E740C813B14}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{09385DC1-413A-4B5D-BBF9-6B3CBF8E06DF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{093C1323-ADDC-49A4-B8CE-C2AF0427B6ED}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0961618D-8D34-4E4D-939D-3B2110BE4435}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{09971F5F-8EA4-4AA7-A7AB-ABC5C97D9103}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{09C37949-0097-4EE9-A76F-4DDEBA3C83FC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{09D19C59-13B6-42A3-BBE5-102D842AF005}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{09DE1119-BA2B-4373-B77B-E19DD223CC62}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{09E4D00D-C9A8-497F-83D4-EE0516292750}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{09EABD3E-25D3-47C4-AF8D-B8F413E7A604}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0A0E0490-3659-4448-9930-F94097671425}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0A1A3097-BB6B-4767-9F5B-46113D09F5C8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0A1BFD13-EB03-41DA-B062-1AEF76560960}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0A52AE0F-9929-4F20-A082-E9591587AABE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0A73D9DC-F901-4427-9741-4FCD234CF990}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0A970E11-F222-4099-9B9F-8A81A4C6501A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0AA1465D-528E-4103-BBE6-A7B61B576BA5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0AA52312-7EE5-4C38-BDB1-3E6EBC1A7B62}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0ABFD4B9-BC1C-49FC-BE7D-090344985185}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0AE98814-1E5C-4321-9E89-8E153388B639}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0AEBB207-4E95-4D8C-BFE6-680E4BFF61A4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0B0321AC-587F-4FD3-89F8-8C683F4A404F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0B0B21FA-C25F-4465-A58E-E382D84DF865}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0B117A99-EC74-415C-B3D9-9331A0E7BD9E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0B193D95-5CF1-4DB1-9909-844AD0116CC6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0B7F9EEC-B03C-4BE7-BBEA-F4AAE40C3531}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0B8458D8-A990-40D6-ABFA-79DEA0266D54}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0BA7E655-AF42-4577-B181-76E067DBF7D0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0BBAAFA4-E02A-4BF1-85E0-C955CBB1D388}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0BCBF2D1-56A5-434C-A08E-51F7D093B450}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0BE47C23-5486-4FA3-9A9F-9956AE6E2026}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0C088A59-2B28-4721-969B-A41EA19F1804}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0C1159FC-6257-49C5-A97B-81357A50DEF1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0C1F46F8-06DA-40A7-8519-78F110F27C9F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0C3960A6-CD2C-476F-99D1-96C54B3FD801}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0C614B2F-237D-4064-812E-4EC0FF82B6BF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0C650339-114E-4857-823C-C1216B53D816}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0C9D47D0-4373-4ED0-A945-43CFC7E19488}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0CBFC020-892A-4E3A-8E58-6AE8B6006BEB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0CE4D4AB-BE56-4A4D-9C34-001973029FA6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0D1166BF-E1C0-4ABD-A793-F71D2FCAB22A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0D15B51D-AD69-4AA6-A067-C3BABEE03F5A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0D5E3184-DB11-4BB3-B9FE-76299A57F720}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0D7D3E2A-06A0-477E-8467-839D2E49C139}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0D83B693-E275-40AD-B4CE-2336A142BC85}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0D850D1C-8009-4D99-B593-9512D8F97489}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0D926A22-CB83-4B69-9A77-AE7A3B3CBBA0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0D94AEAE-2830-41F3-BAAD-7B829E67E8EE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0DB2BAA5-784A-48DF-90FF-A8CA072F6E85}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0DD6628B-31D9-4134-B321-33ABD22538FE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0E1B5741-D2AF-4306-8535-C1A1397947BD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0E1B578C-5282-4B46-BC0C-3D21170FBE00}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0E40E632-796C-4EAC-9F98-FBE966DBA9C3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0E43DFA5-5E31-4312-B6B4-6E4236FBB39C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0E4D0C31-47B1-4227-81EF-7EB162BFF55F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0E55B97F-FABD-45E3-B685-E9678586AE14}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0EF23CC9-92C3-4821-9C16-716AD098A69A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0EF74EFF-06F5-4F5E-A60E-71A96E829B21}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0F7267A1-BE5D-46E4-98C9-2BA828ACA351}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0F7E631B-CAFB-40EA-94D5-34C457391E86}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0F9B757C-6FEB-440D-83A2-232F66E77BF0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0FC3C89F-D56B-46D7-9389-D8BDA1A37459}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0FC89A10-58F4-4CE9-A8DD-CD3C839E908A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0FE9CC18-3664-4F9C-8E7F-6B966A44F9DE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{0FFB8236-18D9-4B1D-B9CB-3CC98099EFB2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1008593D-3BB8-4437-B815-10082BE7A3BD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1027A7D0-A172-404D-B76F-B3090CF7736C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{104F933A-6334-49B3-8A48-D7D24260C99A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1076CE01-EA80-441D-AB83-683E551597D2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1079F2AE-CE75-40A1-A22C-11D564B0772F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1079F352-D3DA-40C0-9266-A27847B11C54}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{107CDDB7-7B4B-4047-9942-FBFFDE8B3C99}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1081B1A9-3FC1-48A8-9AD3-42F7407A3BD8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{109FE4A2-75CF-4A02-AC3D-3E00046037D2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{10AE3FA2-2DCD-41D8-A61D-E9C186C08C96}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{10AE4D35-87D1-4159-9848-19796B68A680}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{10BBA616-BCA6-41B6-A985-FC56BEBB6D33}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{10BEA8A7-B732-4CDB-A4AC-39620EA70BA9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{10C95260-0FDA-49D3-BB82-414D94ED6D30}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{10D94B76-6DA3-4F92-94BF-8ABCC3C48FC9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{10FC21E8-66AD-48CB-B3B1-D0E39B2CFD95}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1112B6E3-DC13-4396-8F63-7C02DD7F7985}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{11327AC2-E2D6-4594-9009-1343A4A615D1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{115616E7-FEBE-46CE-B0DA-DBCE3C5A67D2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{11A0DECC-F6B6-48E4-BD10-DEE437499835}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{11B803E8-E623-4C12-84B0-E073B7434996}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{11D95DD0-200B-40FB-AD9D-6512EF4C9E6C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{122985E0-106F-4BBC-B376-51F1DD3036B5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1237EA4F-69DA-4BB4-9AF7-1CCB1F66F261}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{125C13EA-AFDC-4A60-A1D5-256EAA52B4B1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{12707174-6071-4C17-A744-0122D2B2DABF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1273BA28-A360-4CFC-9F70-4BA194652647}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{12800BF8-3C14-404F-A393-2B1E10A98763}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1283FE33-7AF3-4176-A1E5-4DE285EA539D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{128751AE-3AFF-4AD6-89D2-40F2ABE3153C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{129ABDDE-DBD7-465F-A892-82231F7D6602}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{12A5E4DD-3C1C-4116-A5AF-805AF9978237}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{12A7F3EB-586A-47E4-8407-1199C259E92B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{12E4292A-9886-4A96-822D-5615F2F2FCD6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{12FA22F9-D7F1-4957-8F66-E78F11311F7F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{12FDCA39-6EE3-4378-93C9-DC313F02FDB9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{13059F24-32A6-46C2-9C2B-41B19C008BA5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{131AF21F-EEFC-43E6-8181-F60D00B06BAD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{13236BD9-2FED-4875-91CD-828A74BF4066}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1339F2F6-D4B0-49B4-9FCC-B3DD367BC7C5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{135747F9-ADB9-402F-812C-2B22747E6CAF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{136C8F7C-EAF7-4E94-A91E-34E240E7C4FA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1387DF6E-17A0-4597-AA50-434FD53AA8AC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{13912DE7-4CF8-4005-8864-7D2E96C11619}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{13AA54E1-6FBE-4EA1-8739-5AC97F9C043E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{13BA8C78-5A6C-4F09-B752-A74647B70343}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{13BE4EC5-F893-457F-8ACA-CEC228E30057}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{13BED7AC-C119-488A-A84D-8A9DA23F1398}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{14064639-F77E-4030-B290-7076C5A9E699}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{14097EE2-15C4-4543-89FA-260A8CCC9D7D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{148B702B-6D40-4C2D-9CFA-C661EEB43AFF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{14B35FE4-BF1D-4BC5-8F40-792622D41E3F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{14B3E58B-12D2-4179-AA03-5192618888DA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{14C4611F-D426-4046-B16C-F05146A4B3D7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{14E929E9-4A7B-4D6D-900A-FA4845538C06}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{14EF8CFE-527B-4DCB-BD6C-01ABD627BBCC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{14F6BDC9-7355-418C-B55C-A6689FAB5B22}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{15004B59-E7AB-41F0-B4F2-D5DCDB4A5891}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{153710FD-676A-429D-89AB-721D46A4C8E3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{155883C2-CB7E-4EC1-8293-F3E0EDAEEDD3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{155C95A5-B6A1-45FB-83B8-3B8CE7E85501}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1568D2DC-5CD2-4BED-AC7B-CEA85335FAD9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1594974F-EFA2-4C20-9309-C4AAB2422CC5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1597D6D4-5DB5-4A65-B78E-E6B170B12C90}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{159F2B94-8FD1-4267-9B67-86D75CEBA71F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{15A48E9E-E167-4548-A86C-441A208F01C0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{161632EE-9B4C-4518-A30B-777068DD40CE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1623674C-3699-479A-826D-551FA66C0310}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1632F6E6-5673-4FE5-A582-E21C045192D4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1651D2CE-BABD-4887-ABE4-AD7AE863A9F2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{166195E8-DF1C-48E5-84CF-44AE0FB62714}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{16736D35-ECD3-4B7A-860C-52CEBEDE410E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{16737D39-0EC2-4F09-96A7-692D8DAD759F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{167E59E6-B82E-4FAE-98D1-DD62FDD5742A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{16A9BF00-3FD4-434E-A20D-689FB27D7842}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{16B326C9-81B0-4FD4-ACB6-2D0C1F55447F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{16B98914-5F49-4494-AE0F-3975D44D50B6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{16BB795C-751A-4D6C-A3B4-21A1F07165C3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{16DBF7DD-D3F4-480E-AFEA-022A40C4A531}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{16FBF6F1-819A-4A49-9CFE-EA2A2FF0C775}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{17203D77-8CED-4F87-BE8E-820507F86814}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1720B60D-BD55-4786-8010-258385A4174C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1727026E-FC6A-41B9-9F34-03E7E0FEDDF2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1740F965-3795-4FBB-8F81-038EDC3862B1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{174A4821-B215-4A3B-8A37-E389EF9B60C5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{17716001-9A7D-47FF-8516-37E539A1DF64}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{178F7259-5055-4E53-9685-CB608FDD8859}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{17A659D3-4D97-4B9D-87F2-BDD6E3D6521A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{17BC83B6-23AB-4BF8-A238-FC7C976C50F9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{17CD29B4-43AE-48C8-92D0-F5B256E2D747}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{17D4BBA6-E635-4889-BEAD-F8060474DB12}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{17D8EBF6-53E0-4167-9710-323343D89D7B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{17DDB19B-4152-44F2-96B9-96653ACDC996}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1811F2D2-FCB4-495E-B562-35CBC3990EF0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{183C89C2-F901-4602-8DD3-F0BB2893B2E9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{18447E6A-A09C-404B-B94D-A853DEB6173C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1864834D-B826-40C2-9149-782E8F656C2A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1864DFF9-DB15-49BE-8826-6549A1F032C4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{18682523-8950-47D9-A264-BCBD1D630B94}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{188BEEAC-2CD0-43FE-AA48-B31792E7C22E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1898D7C8-62EC-4636-920C-F9A124CBB019}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{18A07900-ED16-47CB-9361-1388E05C1DC2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{18A65A66-AD3D-4BFB-8FE4-F6E519481C8A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{18A6A0BA-9F57-4BE6-853E-F2C4195C870D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{18AB1E1E-6B1A-4D74-8E09-BD8A8673E2BC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{18AB8DCF-32E6-4EA3-A178-09265E417350}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{18C496F4-0ADD-48DE-B7DB-EF7DFE33D20C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{18CB9013-622D-49D3-8AED-40ED37DCC8E6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{18D021CA-BD30-48B9-ADB8-5B0DF33D6ED1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{18DEAAD7-CD1F-4A4C-A939-774806424E78}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{18ED1A20-A8DD-402E-8EAD-ED7A737EF74E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{18ED577E-1FD1-4721-93BC-32EB99278FC0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1901E08D-E8FC-42AD-BA04-EFE4458846A6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1919BD0C-1E29-4896-AF2B-F66375D4F9F8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1961CA15-4256-47FE-8286-DE1406E5C916}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{19B66770-168D-4A56-A7CD-F8B3459CD509}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{19E9C0D8-A54D-402E-90A6-AF51D3F5E2F8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{19FA55F2-FA6B-43A3-B6CD-AE87DCFDA86D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1A053136-2ED5-41BD-A2FD-6DE1F271D776}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1A0C942B-BB15-4814-BE4A-1504A387D476}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1A0ED7A6-75B7-4E63-9876-98A632C835C3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1A18B841-1D55-4830-A4AE-97B3EEB64ABF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1A1CB9CB-9275-4BFB-BA1A-DF7840B1A382}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1A300FB9-E279-491E-AA51-DE5B10358199}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1A331421-4C8C-4CDE-8C0F-1A9586D9D351}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1A6562F2-CE79-4803-9474-0C7F11929DEA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1A8C75AF-2E0E-43BF-8C29-AC05CD01A01D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1A8D87DC-3F54-4E2D-9384-FC1F4D9007C9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1A9C2865-006A-4897-99A9-9428BA90403D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1AA4A8E8-D0DF-418B-A53E-664DD92A183A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1AA8D28C-FA44-4663-ABB0-DB4932D3EBFC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1AB8D390-BE04-4820-8C9C-046C6F106CEB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1AD38F11-7693-4830-84DE-7462F7A811A6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1AD76615-654E-4E38-9989-6E41E691B841}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1AF9C101-8F1C-46C1-A17F-8B5D46014F30}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1AFB79C4-45CA-4C47-B439-C8CE0CA12248}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1AFE5ED9-6B23-4EB1-9116-4FE412DF8053}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1B0B55FF-B28E-4F39-A24C-065C70B1BB86}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1B12F402-F6EB-418D-8503-47A2FE059A75}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1B2E1246-8770-47FA-AEDB-DAE7F950BF61}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1B304278-9BCC-499E-B994-E4A2B075A438}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1B37430C-0481-46E9-BFA5-4E60E99F8E45}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1B7EE67B-5602-4357-87A7-1F4B10996202}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1B8E73B5-AC56-4003-85A2-AE19A8F02590}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1B909738-3792-4DBB-ADF5-994C8D907AE5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1BA81420-A4D5-409C-851D-B6E70A0FB5C7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1BB38DAE-92C5-4539-A651-3747943EF677}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1BBABAED-6496-44A0-9DC0-7CE077F3BEE8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1BDEBCCC-B1BE-45E2-90C4-E69D7416A232}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1C2CA07D-C281-4DA6-A7A9-F0A5538121ED}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1C37758D-2001-4836-A75F-C993B8C15085}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1C47D07D-9210-4274-8804-D9CC7FCA8A6D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1C678BEF-3601-40A4-8E1A-D7F992D381C4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1C9D0833-5216-45F1-AFD9-FEB69EC63B99}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1CDDA625-E679-43FD-BD0F-AA151C702EFC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1CEE86B3-5ABE-46F1-AA66-FA27BBDD43C7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1CF6142A-CA13-45C2-B673-B5E4486ADA62}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1D04836E-8D8B-43A3-9CA5-67B698E49FD9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1D0E39A8-805C-4C11-AC98-3F4A55A206C0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1D3C969A-36A1-4B32-81EF-9DD98C0B13C0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1D4D7C3E-FF6D-4234-9680-ADC5D23A7AC3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1D5A1F7F-E0F9-44FD-930D-A490D8345B3E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1D9A1831-3B6F-414B-9095-CAAFD30B116B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1DE7BCB4-5F46-495B-AB1F-E1BC4C348E89}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1E167F51-A492-4608-9BA1-053900BBC814}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1E206548-E633-4381-AF98-BDEEE56EF683}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1E3D8307-E63F-4B51-ACBB-DA847D928583}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1E40DE94-6825-4518-8174-86BF3DA93B51}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1E8C7CCB-C3E6-4623-B65B-19B97A7C423E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1E93DCB4-D763-47F6-85B3-09B5BE29A1A9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1EA14A2A-FB6E-487C-B0AB-D48045CC95A3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1F2B32EA-3CA1-4BC0-BD69-08A2EBB8E519}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1F3687E4-0325-4B9C-AC26-E9C42191B993}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1F40B731-648B-47DF-A53A-96D2F8C4CDB8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1F64BCDB-AA5C-436B-96EB-C4A42199735F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1FA279FC-4D4E-4099-885F-9856947AD3E0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{1FC9D0E8-BBCC-414D-B1A6-9125EA396EFE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2008DFF5-D6B6-4E1A-872F-5ED30934AA90}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{201A7B6E-2A3F-4E94-9046-6C7C18E71B13}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{20744107-7ABE-4EA2-A2E5-CD9355A41F3C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{20898D39-37A8-4346-A5B2-45F41D7C1F1E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{20B58842-CC86-4DE3-AA6D-D8F458D3BACC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{20C0E6F7-0161-4D41-A95D-CDC61E9FE187}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{20D866FB-B617-4F2F-87F9-425D1F292493}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{20EEC0EE-0CFB-4057-86AC-ABB9E51F4E68}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{20EF200A-D4B8-473D-9635-57E9113D989A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{20FC4C58-034A-4968-B9D7-64DF56CB5426}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{20FF3765-97A0-49F1-BBA8-8BCF13570408}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{21055A98-20E8-41E8-AB9C-1F9E8CE80A60}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{212398CF-BEFB-42E7-A4C4-11EC61C1E9A6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2137FBEE-95B7-4CA6-B986-BAC2A8A292F4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{21434A78-D918-4A8A-82FF-E64DEA4FF44E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{217D9837-7800-4BD4-AD9F-1EE62B614C23}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2199A8ED-CA3C-461B-8BEF-2D7CE5A187EC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{21B5D02E-53D3-4A41-8DDB-4ED46F013BD9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{21E0537B-207C-4D35-8B4B-2AD3AF820FED}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{222B3A0D-1023-4867-B1EB-1CBC41EC7B22}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{222D0B47-4929-4E2E-96B9-F507E91E6668}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2232FA7B-D40E-4971-8FE8-BC5665B322EA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{225664B8-5402-421E-8B1C-48FDA40C4A25}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{226A65E1-B832-4293-86BD-98062147651A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{227630A7-C231-47ED-AE0F-B67B16C920E5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{229BFFA4-C41A-491D-8001-B0EC6D810161}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{22AD6473-DD3E-438F-9F97-1B2CBBA85874}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{23043E50-EDC9-4564-BCE7-21F2589EAB4F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2316609A-9E10-45FC-805B-5DCEFD8A10B9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{232C2FC8-CB53-4A3A-AEB1-252E08FF20BE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{23527B66-D948-45F7-A1D7-7374AB923718}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2356AAF6-EE22-45F7-B02A-E49102A543B0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{235BBADA-3B6F-49F1-8E12-8233E4B880F7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{23629EAB-7AB2-4888-A2B5-59C4ED23134D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{236BB4F1-C51E-4099-AA47-99B2769C40CA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2377CB0C-4AC7-4FBD-8E93-FAB03B4BEC71}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{23E42FF4-D984-4F27-BE9C-CD68BFA3AFD6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{23EC4D34-73E3-4DE8-8E0E-6FF654EF8EDA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{240FDD7F-645F-452D-9D36-EBEBFE8FA6A9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2427B7E3-19E3-416B-9F46-52C44702EF12}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2435ACE2-D173-41D4-8AB9-E99030F17ED1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{245ED8FC-F5A1-4343-9A09-E9619F374DAF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2465A772-9D0A-4122-878A-45D7EC4CBFC1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{247E9D7D-77AF-4537-8D80-12E89070FD5C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{249CEF90-F1B6-43BA-83FE-63023046E0BB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{24AF6E3C-6192-4BE5-803C-8EADDCBBEFF9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{24CAC361-AECD-44F0-B6CA-CFD0E16EFE5C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{24EAD02C-765D-46C3-88BC-0D2E78B2FC89}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{24FE92BB-54DE-4F5C-8A06-8C5670D73191}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{250DF522-051D-471C-B515-065B180AE271}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2511A3FB-5066-4E72-ABFA-373BBAD179DF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2518A18B-010F-4584-9FBA-3946D75F359F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{251EE4BA-7DE9-406E-A4E6-E40C4AADFB88}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{258A17D5-2FD3-4D6E-8DA9-C07B8F3D9E17}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{259C1896-168F-4716-AA04-A416F41D0DDE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{25B70310-05FF-41B0-8AEF-292BF3689180}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{25D663E4-7F49-4168-9DAB-D8C418195FE6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{25F57C07-282B-4F92-823C-B5A4AB0BA614}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{261A8359-255A-4083-8968-C7AC78CAFA5D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{263A8DB0-77BB-4C60-9A42-D351B215E803}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{265B1C01-B30F-436B-94A3-B0F0C10652E4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{268582C5-28FE-4EA5-AE78-33C63F0B223A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{26D7FC3F-C645-4ACB-8267-45FBC2F72E04}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{26DDFA27-E20E-4460-B9B3-05880CE6DB96}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{26E3F986-E249-484D-B422-024E22409000}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{26EA2233-1E23-45F5-A4A0-2FE32977F94C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{27051DB1-C91B-4D8D-AD9D-34F0D858CAA2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{27114C9B-CDBE-412B-8341-03029F8636ED}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{27338F8D-5502-4F20-8A87-33E2293D78E3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2735133C-7E0D-4AEE-8403-6595DA4302DC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{273C7561-9B74-4E85-ACE2-90EC039BAC86}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2746EDFE-7312-477B-9BD9-8E49D9B32F83}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2764360D-FF67-42EF-8360-4A197CC43230}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{27848E0C-2A00-4AA6-A53E-D9C77D99675D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{27A19865-1D33-46E2-AC0E-4BB4888D81D0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{27BB586C-0B96-4269-AFE6-C62D558A027E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{27C74F2E-F0FF-4070-AF7D-D79A3CEA75D4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{27CEE511-FE15-4D85-9B10-3C314CF76B82}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{27D1D1DC-0F68-46B9-A3BE-1726C847A1B6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{27F4FCBF-9243-4427-BDF4-865DFDC0227E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{27FE3F8D-C118-4ADF-B83B-7BD5D37EDF5A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{28142332-695C-47AA-B969-7CBE097FD345}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2831C3A4-1E45-4805-8208-CF1252A764B6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2844C751-B813-405B-A1B3-2EBDBCBC7749}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2882C8E0-50C8-40D3-855D-A0D504A97CC5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{28C2932E-B874-400D-8723-D4D4AA2EDDCD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{28E54D7D-B9AB-4138-871D-0B4B867EEC93}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{28ED0F01-61D8-47F3-B05D-4C57F0F662CD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2923E1F7-5C73-4C49-8191-22F89D9F6345}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2934164F-6864-4180-8374-C924F7FDAC9E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{296299C3-9FAB-41F4-A483-DE3AF3B26CDC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{298BA5FC-34FF-4138-AC50-D6168FCB54FB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{29AB1003-741C-48D0-921D-781F03AC51FB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{29AB26A6-5362-4E75-836E-00B149B8E9CB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{29B70B50-3E98-4B30-B2F5-19AF94E76467}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{29C92D27-7377-4D25-8D4A-3DCEFF9D46BB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{29D951F8-7EB1-449B-A85C-1C9EAFBEF556}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2A1032DF-AC18-4832-AF4E-FD63A7417C5C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2A269619-9C2B-4620-BF34-BF3EF3CD89FA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2A285858-7829-41FF-856B-8D73A0C3C959}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2A3BCF1E-20A0-4732-B82A-4FFF6AE89ABC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2A7BAE13-9EE9-43C6-BB54-709BA024ECB3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2A92215F-87F1-4B7E-9474-3CE1F5513FB5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2A952249-85CE-426F-973B-06B1FA5ADD69}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2AADF11B-354F-4363-9949-EA49EC0D350F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2ABB7481-E25C-4FEE-9B5C-026AA6676EB1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2ABFC3BF-5A68-47E2-AAEA-4806F6BB6CBE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2ACE49A0-C52F-40CC-89E7-3D6D7C23CCBE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2AD34E2B-592D-4A70-9990-5AB37CF25E00}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2AEDA986-56D4-48CB-BC5C-1A1BF511EC34}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2AF72815-878E-4B90-AE15-ED1F3339A098}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2AF7AFB4-981E-42BF-B857-484FF9F4E2F5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2B1EC664-B062-4B9F-9142-1DEAD6B32E2F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2B475D48-8F83-4BA1-A3E5-5C2D7D9D0E1E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2B50E61B-CAD8-4529-8962-DF996CAC8F54}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2B589BA9-80EE-46D4-AB38-DCC5569D839F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2BA413EB-3A9D-4CFA-829C-9C1E3284151B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2BB4031F-03AC-4B22-853A-960DF67BD9FA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2BCE4032-4493-4E32-9CA6-407C9B0CB551}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2BEA266F-60B8-443C-93BB-BDB99E145EA0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2BEB6141-B9E1-408A-A7F1-50701E3FD91E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2BF6171A-852F-4233-A6D7-0AAEBB8B00EE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2C0A0EE7-D07D-448E-ABC7-81418AEC0CBD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2C120274-C9BD-4152-9166-CDC2FD79677A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2C479E6C-63CF-4BFA-99D8-F5C2CD471A16}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2C4D6591-7C8C-4EB4-9E27-87B1397899E0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2C6BC1D8-6F1B-4F37-B3AB-487C92E1AFA6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2C84C323-C822-4791-9601-75BFB6CB2881}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2C8DB92B-4821-494F-A0A2-A17E62EDB255}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2CBA4E57-1966-46FE-9522-81CAD0D30FCA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2CDD6C5D-0E8F-4298-B875-1B2B1E79E879}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2CEF72EA-6C30-41BF-92F3-3F763D77CC8A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2D1940D0-1A06-447C-96CB-F992A17016FA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2D403C1C-9394-48FD-888C-859C6941C027}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2D5302F1-64DB-4EF7-B30A-BB8B70207B56}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2D5C2891-0148-4778-876D-5633E57FCF5D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2D5F0E21-3E7B-47D3-8E49-780EEBD7111E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2D81037C-E448-41A4-A67F-68CB5B4AD167}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2DAA7A2E-21A9-4285-87AC-C339EF0B28F7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2DD21331-B5E2-4EDA-89E3-FD07E7FD0347}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2DE6DF33-C72B-4285-8FA9-27E09770CB60}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2E2DEAA8-2578-4C86-B9EE-6B103B4CE060}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2E55DE56-9AD6-4150-BEEB-65C56A6E04DE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2E594079-9E73-4D8A-ADFA-1DCD3F385A74}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2E64E718-648E-4F25-8857-638B6070B7E5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2E6DDAB0-249C-4A8C-8939-6FBCDB183BC1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2E7F71AE-FCF9-48D8-B529-AF7F1B57789C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2E813A53-D5EE-4433-A233-C46EC2BFD55E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2EABB408-EB52-4DDE-B5A5-5003507129FE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2EAF61A2-829E-4372-8D61-D122BF7F4A9A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2EB6A4C0-CE82-4C37-8C6C-36CC09FAE891}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2EE77C67-7F55-4436-99AC-9EC984FC8F33}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2EF8ACD2-D5C2-4083-B2DB-66304391C9C5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2EF980F8-3B49-4C43-819F-E228265F8DFB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2F0BED39-3127-4C42-9680-E09B48AF38B8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2F1A2512-B24A-4732-8332-F70C5E91CE04}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2F351262-8E62-41C0-9E0D-4AE479ACF25D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2F56B0DB-CB3D-41D0-BF78-06C84C333F28}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2F79A5C5-D76F-4C94-886A-425903013F73}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2F8256C5-6F37-4B34-86DB-C2494BF1D2B1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2F883F13-C980-4BF2-8A5A-C22FCC933D40}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2F9E4221-D4B9-4675-AAFC-D1DFB1B56690}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2FCA0368-611B-4524-902D-4EBBEF4C89F5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{2FE03937-1486-4709-9705-6F9B8851FAEA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{300E5CEF-8DB3-4494-9DBC-FF52524B5277}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{301081D5-7EA0-445F-A763-D2ECDCB73D84}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{302D269D-1771-49DD-9DF3-81B7F307F9D7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3032552D-9D97-41F7-8842-84D2EC46D985}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{303D4C64-1033-4410-8D60-80881661E2A5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{30653348-5CA0-4EEB-8805-6BF3A10D1FE3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{306FEC17-4311-449D-A5B2-CAAD22AA6351}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{307F9776-5430-4E06-99FF-977D1E4C1038}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{309C1C33-B0A1-49F0-B914-FA967F896203}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{30C8EBDD-3C23-4BDA-87AA-4B18BC15CA38}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{30FB8583-F569-42E3-910B-8F6FEA82763B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{31150A3E-C306-42A3-BF81-AA63C7E2C462}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{311BA8BF-A637-4B5B-8854-801A13E2B8A1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{31289EFD-83F6-41AE-BC20-E07EC1B32937}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{31290E61-64AA-4F75-9CEB-6D37B6820057}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{31380F5E-8222-4EA4-8F7F-21EE262A0C41}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{31659431-BED8-4CC4-B9BD-9334D3832A83}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{31978F2C-B166-46E7-BA32-FAC8ABB2859E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{319A3EB2-8034-4F91-AB5F-404EE975A592}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{319BA05F-84AC-4157-A784-EF0573227198}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{31B969F7-8BE5-4486-89B6-190F29A5283F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{31E07469-F72A-4D65-A673-3745C523D097}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{31E18CF5-7D7D-4F0C-8493-D02DFE7635ED}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{31EDE7D6-E7E5-4267-8B13-5622BD5D7116}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{31F941AB-0C67-46B5-A239-38374B025FAD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3235E305-2A91-4468-B30F-5BE9BEF90906}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{323B6452-5317-4730-8835-F43974762887}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{326E6060-B217-4A9F-9500-4482EAE73471}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3271D6EF-8732-4C96-9E58-B3D03D9FCD15}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{327E49CD-258A-468F-AA8B-ED2B5DBA5020}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3289E16C-2F27-44C0-8E2A-DEACB72BA989}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3298631E-39A7-4A94-9038-89EDE6274520}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{32C513F7-684D-4AD1-9D57-5E4251B2A0CC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{32DC290E-FA1C-40C2-A4C4-F6F53298647C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{32DE4A90-4145-4258-BDA1-1E4964A36452}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3310D4F1-4BE2-46AB-A1A2-547218BC07A3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{33154362-32B7-4634-8621-77AF708866B6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{33154C01-FC7B-4433-ACC1-B3BADAB7C2C7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{331D7123-0893-4B79-B548-BEA2B134AD82}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{33222739-B596-464D-9733-90B54A2BFC63}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{332EE1C4-B64F-483F-864C-2152A2424B0F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{33516B86-6ADA-4528-B7B7-FCE531151976}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{33741224-288D-4714-B06C-5B4CE9409EED}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{33908CE0-C1D8-402E-ABF0-1F4196386B45}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{33A31245-CF3F-4FD4-98D2-5592C45995A6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{33CFBEDA-5425-420A-A100-22E21C81E515}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{33D3A8AE-2943-4C4E-A535-A8640D943973}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{33EF1AD1-E7AB-4785-AB67-293BF8B14F6B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{33F791DC-E7A3-4D93-A731-DB5A03007ECA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3413BD0F-1025-4FF9-AB18-8E60EBD8E944}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3472F32D-378B-4EA0-A1EF-398FFD18A6BA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3489C460-1571-477A-8184-8CEC099B12B8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{34B9A91C-3D69-4CCB-991D-4DE98E4F0BF7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{34BDCF25-8665-4E6B-9513-1142909DDF83}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{34E0D26D-9760-409A-8A79-55FC5693AEA9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{350F1EB3-61FF-4F03-9399-948D5C5C9F6A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{35352D71-6751-4276-BD37-2D670A7669A7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3544737D-ED86-4CA9-8E79-4EB76567E337}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{35AA970C-3DF2-4CE6-B5F7-E1B9EA16F248}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{35B44A5D-4E18-4B85-98E9-C0D205427124}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{35C1685B-AFDB-4E23-A6A9-B766D041DE4F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{35F062A2-F16F-40F4-AA7A-DCBB4F08460A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{360ECCBF-18BB-4A50-BDC0-36938CFCE332}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3636D832-0D11-49A3-92AE-E271F8499051}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3661AF6E-C5AA-4132-BE2A-6497B36B8C13}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{367C5055-E916-487D-A5D3-667B2570F6A7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{36DE3D62-E2C5-4D25-A085-7123D457D673}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3779CDC2-FFCD-471E-800C-02F813DE95A4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{37955A8F-49EC-43D3-8B19-60163FF5D115}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{37987F84-5A66-48A5-9879-0E917FC32276}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{37A9D175-7E68-47AA-BC74-3686ADED2951}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{381B04E2-CB9A-45D8-A682-5A446345AC4F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{383003F2-8704-4E04-BF88-09475FAC1829}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3830E1B1-C8BF-4E0D-A84E-B59EB98572CB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3835C0A5-6991-4F5F-9F57-725AB1666DA0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{383F1F9F-163B-4899-81A9-C2F63DE310FC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{38678CCE-0FB6-4606-8890-9852A5765112}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{386ECF44-86E3-4FFE-8591-2947EB5CD130}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3879A125-58C2-4994-8D44-98DBC05A977D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{388DF618-1B92-405B-B571-E1F99EA98BF7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{38AD3C61-A915-490F-9898-FFE5E2A41BA4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{38B3B53F-34C7-4D45-BFB5-7B806D80385F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{38F6A5F0-5743-424A-8358-710C71575C2F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{391B1E1B-A046-4425-B8BC-9399DED786ED}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{392EFD69-09D0-4344-9692-C2FD13F978BE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{39471E5C-D582-4DE4-90D6-E8C1BCE0CD33}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{39494794-C76B-4F3B-A6EC-1A7A878A897C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{394A7198-FFFD-4951-A2AD-68A6AFA603C4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{394D2AE8-FF41-41BA-93AE-5BCCC1F32E12}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{39526E96-D997-4262-8AA1-AB8EAEFFD6D6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{397298EF-3EAB-41FD-AC79-CD4FD5E6B3D3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{398D1F78-B698-4520-B959-32E1FA227339}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{39C7CB38-4262-4C65-8C66-3A8146199F12}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{39CB5E6C-0861-43E2-B66E-0EB7C3BFCB89}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{39CD985E-9785-42D3-9B38-CCE7D4063B8B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{39E8B50B-2431-4B25-B729-B751EDA7AF08}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A0BC1E1-1B29-4104-8483-4BF46E1F87D4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A10DEA5-39BF-42EC-98DA-F7EFF3DA3AF0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A17FFF4-A15D-46E8-A7DB-93909540C88F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A1EA9A7-5F74-4FBD-ACF2-3E7C197B28D5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A230F9D-0E8F-4981-888C-6E55574B05E3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A4E9DD1-FD96-48A8-AAA2-84630A5801C1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A4F6B9B-7254-4CA3-85D7-C02C095094E8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A58617E-556C-470D-A96C-E907F4C66E7F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A6643F0-5785-49E9-97E5-AFD5E079B964}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A7A766D-2342-4C36-8A49-371E12C8A95C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A84152E-6052-4A28-BE4B-AF16F2418F84}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A87F67D-513E-4219-9213-40E666F0AE5F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A8D6DA1-9B62-45D3-BD0C-153259C884DC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A9B34B1-A1B2-4C8A-9AF2-27411BAC1A22}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3A9FA6D3-50C7-4CF2-89F4-FEA6A9EDDEB4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3AEEC9E6-B6BD-4B8A-B03E-CB51318F665E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3AF8012C-23F3-43FE-BB97-AECD1E7D6027}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3B012E40-9A5B-4E9E-B8E9-6A908E7249F0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3B165243-EDE1-4F22-840D-6FBE049267DF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3B19FEDB-A8DD-4922-906D-21DBA708BF1D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3B2031A3-2C4F-48FC-A566-760302F5E3F7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3B6C8ED9-8535-4569-B36F-0B9C40C3FB2A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3B758EDC-CEE8-4EDF-A144-9480D1E0EAC4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3BEFF0E3-1A09-43DC-9E51-3B17540042CE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3BFF8F2B-24E1-4B89-A016-D529826CA5FD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3C0E3F6A-9228-47E0-B636-6856A4BB7CBE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3C27C962-D800-4B1D-818B-1700A26CDDB9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3C2BD6DB-820B-4F0B-A520-EA2813C06DEA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3C75EE53-3F79-4BB6-91DB-F7FB841B062D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3CBE476A-D3A6-424C-881E-C0E9D27CAE26}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3CFE7546-E2F7-465A-82A6-226076742924}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3D06D819-C908-4C5B-AD0F-D445E88ABE52}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3D1520BC-3F94-4BDB-80A9-53AEBA1690B4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3D15BA7C-6286-4543-A525-4EAD627C527E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3D27E3A9-EA8D-4AAC-9B2E-23EEEDD6BF61}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3D6D77F7-A9FF-479B-9E9B-1B9CF5A0E5F5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3D6EDD17-C2DC-4C40-929C-685125619D7D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3D7A2440-2EB2-4FB7-8460-605A06BFAA25}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3D947417-F847-4E6B-A4A6-CBACF571BA66}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3DC68AE7-5010-4A1F-9C4E-C537B7E91E89}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3DCCDFEB-A891-4D2B-8971-42CD79146EA5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3E0BD7A3-C2A1-4109-8142-4E01077BC5DE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3E10FEAC-3205-4A50-BA4D-ED04B38502E1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3E12DD21-2756-48C1-ADDD-0B894AF3D782}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3E2E3FBA-DCBA-41BD-BBFB-F8950B3E4915}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3E453235-56D1-47F3-A99A-52166F74A27A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3E54E65D-BDE0-4D08-BFA3-0C208EBEF18C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3E6F2C78-7BC0-402B-965E-CF6B27C607E9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3E771F27-A947-4620-97EA-2C79D5FDD935}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3E826A09-11EA-445E-9510-23EE7C9D1A6D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3EB6A146-AEBA-4938-ACBF-686B77E9DAFB}

Joahpi 25.06.2015 00:24
Hier folgt Teil 2

Code:
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3ED062DA-EE74-4856-8569-A994D8C02AE5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3ED22648-0C60-422C-89C9-5C1AAF613C91}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3ED31521-148F-4511-9882-6794163D95B8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3EDA4DA3-8864-4F84-AA66-7A9CEB6CDD3F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3F059D59-5572-44FB-A75B-CE1C67FAA2AC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3F8A6734-329C-4FB8-ACF0-9B00AF0B1C3F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3F94FF3F-9354-449E-B143-0B34489221DB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3F9A382A-3E16-4432-8594-E5BED7420B2E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3FB084C1-0D5A-4692-B619-21FF034D8C53}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3FD3EA7D-05A1-4558-850C-958380B28358}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3FEBAF5C-3EE7-4530-B8E6-85CF19F10BC6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{3FEFEA13-8212-418B-B10F-9B9F944E7939}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{403EC149-F534-4122-A565-EF010EE6E444}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4041E285-85F8-4D9F-97FB-58A5E8123D4F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{406B0EDB-F8AC-4389-944F-85EAD14A7CFE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{406B162E-1FBC-423C-B5AE-ED736BE1487D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4077D2DE-CA73-4CA8-8042-CF15FB8BE14B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{408890C8-D89D-4F56-BA05-EBD5652B19E0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{409D4676-165B-4509-8A4F-75FA3CF86B60}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{409D8C73-9765-47CD-A991-1E0D7FEA7408}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{40A6C415-FDCB-489E-A1A7-93EA6084A71E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{40C59A38-CC37-4681-B8A4-6DA6CD293F13}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{40C7DF23-B2CE-4D3A-912E-6E5E4C30E419}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{40C8C181-7C33-4222-84D7-DA1B4E409B13}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{40CB1189-86C1-4989-9461-AAA9BE40845E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{41001611-C5D2-4AEB-885C-1F8104C05E3F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{412E0438-2472-4C75-BD6F-E43785F74B54}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{414E8933-B285-4464-BF6D-DDDB837B4C0C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{41542EFD-59B0-4F27-BD0A-7AC00DC1ECEC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4160CE35-8879-4530-BBD7-E93C7CFCC431}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{418C23DE-DDC1-456C-9352-B858B91AB17C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4192A167-DA67-4278-A8EB-921E524EAFFD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{41E93903-18BF-4B31-8280-BDFF1C801A19}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{41F04021-ED42-4899-B742-66EEB7FECFE9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{41F4DF2E-ADFB-4457-BEF2-B41028BF2F56}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{421DC0ED-BA03-417E-AA94-7F6594FB8940}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{421F07D3-CF26-4823-88A3-F2913390A4CE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{422060AD-C994-40BC-BD89-F7F9253F5516}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4266A0BB-14DA-4BD8-AA18-642EC72B5244}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{428FE653-1379-485C-AA30-1513548CBE50}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{42A09520-0674-464A-B82F-C556D8585EBF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{42A69180-3E98-45FD-8F06-A38ED59B737C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{42A6AE88-D357-41E1-8AB1-2F5182F864E8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{42B9E351-003A-4261-8DCA-A448CA81FAC6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{43027913-47E7-4D13-B647-FB9098BE2484}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{430A1486-A534-4062-8552-331F152D1251}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{43168438-3008-4A8A-9F5C-75EAEBC72E85}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{43525CE3-1150-4CCA-B7F2-AE940D51D2F5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4354B440-90DE-4F64-BE3A-368EE1BD1BC2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{43571E66-CF64-4C67-9B71-F1BD590205EC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{43854BFC-BD01-4969-979E-B73F0EACC36B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{43AEB3E5-D3B7-4783-8782-FE23CFFDD989}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{43C0D8DE-AC64-4763-A6B3-76F01E932238}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{43EEED38-04E9-4900-B89C-AFB3EEC65160}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{441627E9-45D1-40C1-B36D-E4AEEF6768DC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{443E2D74-3CBB-46E0-85B9-02F54D9AEEBD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4440FC7D-C0F4-4601-9912-D7C6FF875FCC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4462498A-FC6A-476F-956E-6059E0C517CC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{447A7B38-A890-4C0F-A929-BEA4AD5A297F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{448FF894-4C38-4FCF-8E6E-2315BCD216D8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{44A683C2-BCCF-4359-B4B4-A70D979DF76F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{44BCAA7C-91E3-4E13-9B85-EFCFB301EBD5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{44C250F9-C2BC-47A2-930A-BEF46C0DA181}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{44DBD4EB-6709-453C-BC13-3AF972A243C2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{44F3AF33-796F-4CAE-B108-30F17EE29C1B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{451276FA-BE66-425D-90A5-24530E5BABE2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{45502385-777F-4FDD-AF45-68FBA9E0C526}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{45646789-F0D5-4074-A867-B0D6A41E5879}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{45774309-2B1B-44F2-8F27-C122562EE151}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{459DE999-28C7-4C9C-AF05-67F14D7E58FC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{45A668D7-FA2E-40BF-80E3-BF72FEE7DCCD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{45AAA31E-46AF-4B50-9930-77C1CC13B67B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{45AE70DC-5FC0-4A9B-A5C0-644148DDD2C0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{45B8AAFE-AD98-4BAC-9E58-C086357436D9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{45C1D793-3BD2-4FD8-B0C7-826FD5B7D895}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{45E21194-E1D2-46E3-A220-6D8C13BF46E7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4603359B-FF5A-4A3B-9252-52B9DA3419BE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{46595648-4DF6-48EE-9BF1-ECAE41F24686}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{467DE96B-EF15-4DEE-A238-3B3C79F9840F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{46AED889-9B6D-4701-A312-BFE94B5929E3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{46B1F510-9F5B-482E-B328-604DFB70F1FF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{46B84D8E-D7C4-4BE9-AC4F-FC5DE942D52D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{46E18C92-EEED-4EE5-BFD2-13E8D0044381}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{471295DF-EA62-436F-ADCF-C92E63BCADF8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4774F87B-33F6-472B-9FBD-291E4FB2A056}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{478DC992-9F2E-4F52-B379-09021FEF9E95}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4798CF58-48A6-4F70-8FC0-F78DAA2660E8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{47A1AB3A-69D7-40B0-BD6C-F821CEE4AB69}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{47A4EC70-0E8C-4336-B242-EBD2961A4C33}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{47E8D3C7-5DF1-4206-AC3E-C65E48E0E1C8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4882F45A-A471-494F-97A1-CC4E0862538A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{48B37A26-5656-4498-9FC2-72601500564E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{48D0F327-DC3E-436B-84FB-B59B05A78C00}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{48DFA921-5111-4B1E-BD22-2E36688E561C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{48F306A2-93DB-4BBE-AFA8-08C924A6941F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{48F9D6EE-9653-46EC-A9FA-B5DF99724B3A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4900F646-3E1C-418B-A6AF-E10A799892E3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{490554EB-9875-46EF-87C7-9E60B37A80C1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{49286348-7301-48DB-8A92-0E0CE4407D5C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{49346B61-173F-4405-A916-DBAEDCAA2F97}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{49548F50-06F2-4B67-8BEB-EC88DE38327C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{495F755E-3874-4A8E-A369-7EBBCE3267FC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{496EC54E-0DF4-4F3A-8A67-FB3AB8CA20C7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4984DBD2-2024-4AA1-9EE6-E84D8CF07A59}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4985C422-3C68-4182-AC28-4BC1ABB17E9F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{49D6260A-4327-4AC5-B2D0-DFF1BFE229AC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{49E9FAFB-67F1-409E-B81F-53741D46451F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{49F46B93-A848-45D1-B4DB-CB58C543EB1C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{49F89329-B0B5-48B1-9B63-9EFCC149ADF3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4A00AF32-118F-4F91-9E28-8149F11BC2F0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4A15A5F5-3C64-4CAB-9A2F-CE3FC2E46348}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4A21DCAB-16AA-4B1A-9C88-722FAEE12A88}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4A24C643-C103-4DDC-BCA8-07337BBCD892}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4A41F63E-3808-41EC-87E3-15DE4AEC92EC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4A5BEE36-2F85-4D4D-85AA-D2560560D6C6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4A775E0F-949D-491E-9D43-C8BC6108B26E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4A8BFC9A-62DE-4CB9-B1C6-842EEBE293B1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4A9165A6-4A7D-470A-9393-B678B846F2D4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4A9AADF0-CFE1-4A22-A8C3-0668A0CDAD88}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4A9DEC7C-05DA-4A21-A572-C8D16305F6BD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4A9E2583-B030-4A7F-A167-A98FC4BDD70F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4AB4FC08-C077-4629-A084-D0C8F244AD4C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4ACB9E5D-C0B9-479A-9CE9-C43590EED932}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4B017CC0-6953-45C9-9C80-A9A6A75E2158}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4B10AB2D-8168-4EC9-AAF0-30228327D093}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4B2DDBFD-3FB1-4FEB-9458-D79B9BD7B54B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4B664CBF-CBDF-4E9B-9C3D-D875AFF79388}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4B7EF672-7A5B-47D4-8722-3582EA1805BB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4BCC38B7-0B68-42D6-B3EF-B59458C82E5C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4BD99AC0-F7EC-4E67-A9E6-0CB8F7DADA0C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4BF64995-66E1-4DA2-8B0B-731FE11613C5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4C0931B0-1BB7-474F-9A73-307D837B22FD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4C3BD708-6318-43C6-BE47-AA5142254815}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4C545148-9697-44BB-AFD1-1CEBBFB4E941}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4C68C3FD-9CFF-4675-BB36-3624896DCA90}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4C86F06B-321F-4412-AFDD-91FFF12B11B9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4C87BF9C-61E4-4273-A49F-454B07F083DD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4CAF7A0B-5438-4581-B4AC-DF3B90A60F35}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4CD88A6C-6CDC-4680-A294-A94F8F857DC8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4CE6B559-E433-4744-8A92-5144F0D14B16}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4CEE1C03-59CE-41DC-9BA5-47E7DA62F7C1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4D014697-72C4-4BF1-90F4-F5724F237104}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4D10568F-2869-43A1-BAA8-B8172EA2D071}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4D31FA2A-E822-4AA0-B582-E0BE348C7D80}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4D329E49-3F8A-4624-A4C7-137E82609364}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4D5A8AED-D7D4-42B5-8676-7A4D2B9CDD95}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4D861909-913C-4FCF-B5A3-0F36B4226473}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4DAEF098-57DB-4BDD-8CC3-1CB7E5F5D091}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4E085AD1-5DC9-4613-B629-5CA878C04608}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4E3B8CD2-929A-4254-B770-78709B74CC94}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4E3E2FCD-F4A0-4922-81FE-31C19125F973}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4E5EDEB0-1255-4DC7-AB8F-5EB603CBAA48}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4E678A11-671F-4DB9-8B90-B4BA0101A92E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4E8AE33C-A328-4450-9EB9-3C4B661C111D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4E925E55-F2F6-4D10-A4B8-1D213244E26A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4EC70AE2-58D6-4801-A8EB-C883FC53F4DF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4ECFE9BE-996D-4FC0-A9A7-6E79AD830FA2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4EFBB560-03F5-4B31-AAAD-0CF09F5CBE28}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4F294E63-71A4-4935-BCD9-0556BA165718}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4F37E1E1-4131-449F-94E6-DDE4E1407222}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4FB152BC-F593-40F0-955A-1AD612CD3813}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4FCD9AA0-4416-4E06-B8BD-BD73F4FCB515}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{4FFE2FF1-C919-464B-BD53-E152D7A3D65F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{50005155-B2F1-4A36-9DD2-9A37A4285DAE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{500BADBA-50AF-44D2-9976-05575FB2F782}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5014D8C8-F78E-4726-A41C-DCE2246F73BC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{502FB7C5-4246-4C45-871A-6904032F5530}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{50325650-6963-4AFA-93C0-FE8250B38D58}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5043F429-C89B-4255-8909-3C3250A48451}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{50465630-F152-4BD6-97DE-CA1D07BD96D3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5053B42B-5D24-43D1-BAE8-605792677D87}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{505EC903-BCC1-415E-8152-D2E0287432A8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{506C21D1-0E3A-444D-9599-24435D326DD2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{512F44F6-460C-47ED-92F4-36D702D89918}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{51385EF2-10B7-4D19-A0D7-6BF2B1377EA9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5162101D-0C1B-47B3-8FAD-D0E7CF48DE6E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{51A1F78A-87AE-4FB4-AB6A-5949E0851754}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{51A88F55-0DD7-4704-BAAE-0E9EA268485C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5244F772-C76F-468C-B16F-8FF2379CD264}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{524C3213-468B-4F32-8EEE-B76A73EC5CC1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{525BE134-0091-4540-8A87-BC8E0DB20F1F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{52682C02-E1DC-42FB-9372-130291210A0C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{528F1F7B-7392-4324-98FE-7F5606A267FD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{52A074A2-1541-4EE0-ACBF-C9EDCA26B39D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{52C4C59D-4E97-4AD1-B1B1-B3507BB69348}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{52C7F7CC-B11E-4FF3-8866-473218F1D45F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{536B0DB8-EB90-4F9F-9A45-D3BBF97F7490}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{536CFC8C-E934-4DA7-8A5F-6243A0754981}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{53723C8A-699A-4D5C-8099-9D2FEAB5A0C8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{538A8502-E233-46E5-97E9-5993245477B2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{53A715E1-B9F9-47CB-85B0-9CCDCDF8C39B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{53B957DA-237F-4129-B12B-1FF77281092F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{53F4796B-4541-4090-B207-66E8D608AB6D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{540C3055-F8FC-48FB-919B-E0F22BB2DCE2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{541B5551-119B-47F1-BA62-B9503CAF3535}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{54374A4A-B403-49B9-B64D-AA6BE5F99183}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{543846B4-9C93-4D04-8A11-A510ECF40E2A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5444D360-2F99-4458-A0FA-869F27599E35}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5459D4C7-1F4E-45ED-8388-F4C43BA45C4C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{546B9EB5-648D-40E4-A719-424A8DE17418}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{547E7956-399A-4604-BB32-EDC0EB76B0FC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{54905985-E717-479B-A9B3-62503E4C37EB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5495861E-0611-476F-BB72-62878DD48936}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{549A884A-C92C-471A-9029-6FD4E1AF895D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{549B46A3-F998-4092-B005-95A864B7FEFF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{54B36E87-6D81-4B5E-81F8-E753AE8C7917}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{55621202-D32E-4B88-ABCB-A3EE28DEBB1B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{55888A2D-CE64-4115-A7B4-DFDFB051DE8D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{558E4405-0FF3-4CAF-8990-9369CF0D65E4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5595E4C9-7292-4519-9EC1-2B65F9D7B0A4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{55B21498-D6D9-483F-9FF1-1A964F65A2D4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{55B7B385-B303-42AC-B9FA-1D174385E7CC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{55FEAB07-79DB-4A1A-854A-DA5286B2705B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5609BA0B-77AD-44D9-AB04-FAEC44BB5093}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{560DDC94-F3CB-4BA8-A92C-21E2631C5418}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{56170507-235F-44F4-A4DC-1716FA683862}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{56221EDA-5E76-46D8-A5A7-B57AF0BF80EC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{566B920D-6105-4A38-9DE3-C92729357C54}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{56AF2290-D3F0-4537-AB61-01B6CBA87CAE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{56C46428-68E4-49DE-8EC2-836629E3610A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{56ED761A-788C-4524-B32E-52188AF6887D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{56F020AF-98EE-4814-A9FC-435B26DB010C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{56F11CE4-9FDC-44D2-A7C1-5369CD23EF6D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{57633EFB-350C-4050-9232-D7615BF28E8E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{576BC24D-8EE1-44F6-BFB3-B48816B1F8BC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{57ACC8CB-54CA-41CF-AD9B-FADEEE06C9F1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{57B5909B-F4EC-4D42-B644-7A3DCE60A3B3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{57C9A104-C78D-498D-917A-72FD6DAF64CA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{57F57EFC-71C9-4C30-9D98-EDD542B0C832}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{585CEB89-8CE7-4F81-B6DA-A7113A9880CD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{58BB2DCD-8067-4FDF-9CCB-F2F97B6A4881}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{58C142E9-808E-4B87-B907-F4EDDA9C11A4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{58C6B697-C603-460F-BBB6-0922D73DA28D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{58DD5944-4036-4A73-A227-21E10EA2D9E8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{58E1E1FB-C6BF-444B-9693-E01C7A99C3C8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{58FA17EC-E8BE-4E58-98B9-31D41787F0B7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{58FA5FEB-8775-42A5-A534-E526D0532DDD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5901E895-1A73-4559-9851-BA96D53D5668}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{59089ADA-F671-4922-BF08-A8F5F0A22BF8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5915EEF3-12C8-4F37-A022-F0AD5D38D879}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5930CBF5-7A59-4FBB-817D-53E958D20904}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{596068F1-F6F1-4767-A928-E5454C0B1C84}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5970AA03-EB81-4222-8458-C5F35DE95F15}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5977E4FC-430F-4ED3-A177-17A8025E8454}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5994EAC2-7045-4872-AABE-921EFCB24985}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{59ABDC33-B010-4653-891A-904FE0D13821}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{59B42546-8B8D-434D-8770-7E7D3D3CBFD5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{59D08B3B-E186-4E07-B6B5-C29EC9237CA6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{59D61924-A2B5-490B-97B3-AE821792457C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{59F88972-0EF1-4D76-9174-43B05EDA7072}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5A08D060-577E-4491-AB64-7DF6E86B7EF8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5A1664CB-69AC-437F-B888-01A0EEF2044D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5A436866-A78D-43D3-8A29-2E3AB70F0269}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5A476808-71FA-489E-BDE9-23970D2D369A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5A64BE74-229D-406C-96FB-4949C9B668C8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5A8B674B-3B0C-46D2-BB8E-89BF9D0C06D3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5A936CFC-657B-4120-A75F-FF76B6D5F78B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5AAFC1A7-EE98-4000-813B-CEBBCDAF4E03}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5AC398D3-64CF-4936-BBFD-84168885A64A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5AE03682-D48B-4ADF-9481-A3035624C0A1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5AF422E3-1C6E-4A7B-84CC-3270AF2F270E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5AF53B59-F222-4FDD-8BDA-0B01EB524130}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5AFE8121-66E6-48B8-8E50-66C1BCCAB3D1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5B188202-2042-45EA-9A98-A9CB12046BD6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5B605E08-8393-44AF-ADD4-8085B546F1B2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5B6D51F5-1866-4E2E-BD7F-B82E10958E82}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5B733A87-2D6E-4D0C-B0DD-CE47F0503DC4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5B8C0D87-53B1-4F52-BF9F-B4436939D05E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5B98F917-5265-45B3-B8A0-0327356819DC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5BAB4A53-0D03-4AAA-B35F-EAEC6B0C4700}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5BBA5DDB-1C62-44D1-9AB2-1BA36FCEE710}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5C45C558-B5A3-45F7-904D-93D27C0D6544}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5C4EA78F-ABB3-4A9B-A2CC-CEE02C3561A7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5C9F0E9B-6046-4811-A5C9-5860D0E7D26F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5CEA4C29-121E-4AFF-872E-63A11EFB2101}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5D169AD3-79D2-4930-9909-90FE30A45E46}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5D44A65E-7EBD-4914-8554-7492B27A4CEB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5D5E95BB-12FE-49DE-8DBE-E761C6B4C677}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5D660D28-7E2C-41A3-93B3-BC2463896239}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5D7DF00F-8A90-47B3-9071-3F20978CBB60}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5DC2C5B7-D7D3-4C3B-A046-3AB0EC2335DE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5DEE1AC0-6FD6-4D05-BAD5-47402C05E3C7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5E403B4B-1ADC-4389-813C-16055E8AE60C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5E420622-A0D7-4F1A-98EF-78624502F944}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5E4F071E-AFCD-4317-ADAB-324E18005F67}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5E56AD0C-2D2F-4935-A90E-8B01F4E5CB67}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5E6C4D02-8B56-4359-BF1A-B802731B7AB1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5E85CB98-9CE6-4843-AFFB-2BDDB19BC252}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5E924494-22EA-45C2-A0BA-DBF4B4D48201}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5EA7CB84-4977-4620-99A0-FF98E0B4DAF8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5EB54C13-56BD-4030-B18E-1FA94EBC7060}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5EE58437-F642-449F-A605-533C4376E771}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5F03F27F-F011-4700-A0E7-2BBB92F6A100}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5F0DE892-6D48-4AB0-AD9D-5CBED69DD59A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5F2D5415-29C4-4B9B-A07C-8518735207BB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5F2DE32C-A6AA-46A6-A8DC-24E569B95767}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5F308F92-7452-4109-A16B-7506D07FC999}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5F33F474-1D73-4A0A-AA58-87856EF4D78A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5F4E79B9-AE06-42FE-8792-BEE094E104B0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5F86BE68-BD23-41D0-8E35-C33D86FB4E89}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5FBFC213-45F1-4EC7-BAEB-BD25E8A4C646}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5FDAD24F-5B4C-4A77-8E04-5C15AAF0A8A9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5FFA73EA-1697-4696-B034-254978BAF91E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{5FFE84C0-2FE7-4C43-A039-4F3B6AC19EBC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{604CDB4E-5E41-4F17-9DE9-1632E9501079}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{604F3009-6EDC-4E45-8D28-E1296F836536}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6056C54B-F0F2-4CFF-8B51-DC340CB9B2C0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{60620573-3A58-43C0-8AAD-255E567AAA70}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6080EF55-2E11-4F40-BC3A-359585C416DA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6097A764-139E-4495-B63A-AF63E0DDC2AA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{60C3052A-A111-4170-AE08-0B98107D2CA7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{60F0058D-8456-443C-9C80-9DDBAD566B73}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{60F2E776-3819-4718-82E7-BF9A5AE7683D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{60F48D0F-2D97-4D06-B171-C07EA2BFB2D9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{611E833C-42BF-422E-B2F8-05C26E73D81D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{61272E40-4F7C-4C0C-8B63-D24723A0F1EC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{61568EEA-508B-46E7-9EEC-2750BA1EABF6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{617737DD-86B8-4B3E-86D9-D5693196D7D3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{618D3CE8-2ACC-4E88-AC13-64FC80EFDF87}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{61A98717-0909-4EC4-BBE2-14FF67D88B34}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{61D2AA45-341B-4D30-8C18-19434895B3B5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{61D30675-5B17-438E-B0C3-143BCDADFBB2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{61D628FA-271B-4ACF-8FE3-931E646EE931}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{621AAD66-5F38-425B-96CA-6C962456F8F9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6236B20F-4BD6-4C0A-953A-DF425C83A78D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{623BBA7A-8C70-4BA2-ABB6-5B6371E9BC0A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6244D3B9-56A3-4B41-9FA1-02BF4CA737CB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{62476534-96E6-4B8E-A01F-B464FF172485}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{625D861F-395B-4312-B596-58BC45977C76}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{62919A10-631C-41A0-BDA0-F330DB7A2354}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{62CA085D-3276-445C-A194-107B22A4A92E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{62D2E3D7-6250-4B42-8583-30AA1F9F8662}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{62E3AD1E-6029-4791-943D-6371F30B5559}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{63306A0D-BDA8-40CD-AE7F-FFAE8AAF46A7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{634314AB-403C-4CB2-A4BF-C94B686C93F8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{635D36FB-662B-4207-BC26-46D237F35414}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{63B4E256-EC5D-4668-B1EA-30757116B098}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{63C76A69-F24E-4008-B800-0DFF31D56AD9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{63DAEB27-340E-45B5-8C8C-3D7C93BF9311}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{63E03F41-93EB-413C-BE36-44C79C0FB3F3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6400F897-8594-49C9-A5BE-AD49644E5638}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6411DFA6-F6FB-427F-A9FE-6B54A5CFC863}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{64127AD9-AEA4-485E-AD30-EDDC04FC4C66}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6413A9D4-26EA-44A0-8A37-59D0F472BD5E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{644FAFA3-129C-4FEB-9976-678A7135F7E7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{64915DC3-C89C-494F-837C-E56DC104F64A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6491813C-3B81-4E9A-BFB1-7D345E0F586B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{64AFDD96-C53F-45CC-AB68-5B19E4F7056D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{64D238CB-B785-4CF4-AD16-728258818B33}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{64DF70F8-222A-48BE-B65A-7D5CAF486CF1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6522CE99-50A5-4359-B32D-9FA242D74241}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{652C49FD-E6A2-4745-AFBF-2B95C40015EA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6534074F-82C2-4EC6-98C5-81052E1CD1D0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{65867384-5F6A-45F9-99C9-E6B2820CB986}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6589F03D-35D0-4987-9BD8-04EC2F57B1A3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{658C5ACD-5640-408B-8E6C-629022BD283D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{659B6724-953E-4812-8C8C-A2E9A638B314}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{65A0F65B-B77C-4535-9B76-454FED18D265}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{65D69375-9427-413D-A9C4-6FCEA059B2D2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{65F88800-3C59-44C5-B8DB-6E4A5A84B082}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{66045D87-66EF-4791-8D24-4F0C06E34878}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6626B0F6-27DD-4253-92A2-60584AEE9CF8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{66340CA2-1117-44A7-90B3-9BB471365FAE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{663BD7E2-8DFF-44A9-A405-0815A9CF3055}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{66405587-9C6E-4CFA-B781-5F37CD38B487}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{666EDCBC-A033-42E0-BE95-3B465C52CD14}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{66864775-83E3-49CC-8A5B-8BF7FE95F747}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{66AC2FC9-33BF-4B03-BA6C-CD8034068660}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{66F0ADC4-99F0-4387-8FF7-8427B4E09388}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{672A247A-14ED-482F-8A99-314D5E46FC5C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{67358C03-082C-4716-90FE-B6A343AD4076}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6739D899-CE21-4A63-932B-8EB623C4CF55}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{678E798A-4C29-414C-904F-030ADBEF781C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{67E294C4-D553-4E22-869D-7BD2B1117032}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{67EDD1D8-324F-44A3-84DE-A78C04AD0CEB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{682F1199-A982-41A5-89B0-75D8D05FEAB7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{683CC7C1-312B-4E77-8C59-F8252CA33C3D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{68577BD1-EBB3-43C9-9B6B-70F4CA90E356}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{687D2A62-9A3C-4534-86F7-A2650E86C9FD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6897032F-1A1E-4924-98DD-D593529A37F1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{689FC6EB-610D-4103-B1AB-44D7B3A498BB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{68AE5A6F-737B-47C2-8D33-F9EA1CB101E1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{68BD1E60-D7AA-40F8-A56D-641D4F62F742}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{68C4AFA6-1D34-427D-8B43-5E9D9DB51B0C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{68D75A49-DAA7-4E1C-82DC-2B49D37F416C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6908209F-F90A-4AC1-A997-68A6FDF2A651}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6921C755-F38F-470E-A802-48EC477F9985}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{69587DC5-259C-41A9-AD67-E67FAFD03244}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{697A2045-B65D-4E24-9C5B-937C8A27E217}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{69ADBEB0-F203-4424-9983-0DD80773129F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{69D09A09-C56E-4BFF-844C-998C147ADF76}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{69E7533A-B7D6-48B1-8212-24786E21628D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{69E7EAFE-3534-4A0F-A219-30B6A62EB209}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{69FE0416-A5BB-432D-B63B-C45D88703F5C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6A0EB3AB-B14D-4C7E-AB9B-73C45DF4372D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6A139001-889C-4B13-AE28-E7102CF482DF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6A1C0FE7-F886-4E2B-98C4-766BCB62A9A6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6A3DE85B-DC2D-40A8-9D29-3FF4A6E3DE1D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6A4538D6-4CED-4F5F-8A61-B79329F49ADB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6A474AF5-98CC-47BA-BEE7-76BE04F99D6E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6A4E35EB-86B1-4885-9113-13020147EF0D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6A64A8EE-8C34-4E8E-A81C-0D437A83375C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6A6FF841-B7C5-4559-BAF6-BC4340B611F9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6A72B0F8-0496-420D-9F56-650EC065109C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6A78FF24-8C4B-42DF-9FE0-25512A969706}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6A882794-39C2-49A2-A75A-92A9C41BB231}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6A9EE71C-FA44-4BE9-B2C0-646E3914AE1E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6AAA56C6-C853-4BB6-A9CD-E4A8882F3D57}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6AE3B051-0BA0-45F7-978B-0C6D298D055A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6B05E5B2-0BA1-457B-9917-86879EA3AEBB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6B108FD7-52DB-471A-8388-5FC4D51142AA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6B215E0B-D86D-4836-9051-90C854186ACD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6B341B26-95C4-4CBD-AC8C-45DDEE01BF19}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6B632221-280C-4DF5-95A6-9996BB2F30A9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6B9A6383-518A-4CC0-8FC8-B04604578FD2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6BD1A89F-FDD0-40C4-9A60-93E73C8BBD2A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6C141AB5-A9EE-4070-9250-768BBBC0AA64}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6C199A2C-AB28-422C-869B-F713931404E9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6C5F0486-6396-4B30-B2FB-FFF5E4DA7B55}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6C6E385A-18A0-4910-A413-319488641F8E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6C947CBC-3736-432D-B358-346480DD634C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6CE6592D-B62F-41FC-8111-5883A522DD8A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6CEC86C5-D4ED-4C6C-9FFB-E885EDE50263}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6CF8480F-1791-4E34-89D0-A608FADCF2A8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6D2D6FA6-9A98-4E0D-AA7B-0B853336A653}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6D2D9DDA-D6D5-45AA-AE0A-E20A1EDA4907}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6D47A076-948C-437B-8961-AB394CAE62B6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6D509133-1CE6-4419-ACD9-EC6ADD966E19}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6D55C955-F5A4-47AA-8B5A-9BF554B55745}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6DABA826-8969-4493-8170-FEB86EA46A66}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6DE83443-767D-4B7C-9512-E955ED1A25FA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6DF3D37C-FB74-4EED-A5F4-493B81DF2CE1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6DF996C2-0608-4547-8DA6-1B6C0AF94C9D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6E0BE1DC-DDC6-4004-92F4-52C25241EE7C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6E1DFDC3-285D-45D8-8133-8F207B78B89C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6E29DC46-7EA0-4CA5-9083-54E0811F7BC4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6E30D460-8F6E-4946-9804-B2367249B632}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6E400F60-A181-4FE7-A8AC-F362511D19B7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6E492E5D-446E-4300-8BE6-FADEE16F6257}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6E9CF8EA-6C47-4CEE-A86B-F2506580E7DA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6EA58C9E-B402-41B2-8784-F71D73273E1C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6EBFF295-8571-4123-AC16-BD5AB5E4C71B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6EC5B3EA-8DCB-45E3-A021-DD61B00B717E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6EC88D2A-628D-46DF-87B5-AC35100A07C4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6ED3D111-5689-45E6-A1DE-BD32AFF85990}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6EE1A9E0-F6E0-4F86-9CCC-0E74ECE77FE6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6F0B5528-F924-4BAC-B146-7EB923499A85}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6F1C35D5-9014-4DB5-A0B7-92FBA3A61BCC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6F5682B2-574B-453E-B70C-B33B2440878A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6F616EE6-23C4-4F66-B8EB-ADEEF657501E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6F68A486-670A-4B29-B402-D1FD41765343}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6F816C4E-2E4E-4DFE-87E0-3122E34B3FA9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6FAC24EC-CB82-403A-AF88-BC127BA2617D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6FB11411-1D48-4BE0-AFC9-F593946DF0B0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6FB6A23F-353F-4E08-970E-81D20C8BE6E9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6FB783A2-FD7A-4669-8B8C-EB06AEAD7625}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6FE53DD1-C333-46F7-9FD8-FEDAF123E8C7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{6FF6F291-6826-46E6-B02C-C7CB8171E4C8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7025D632-0A05-4D71-97B6-FFE7CA952690}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{70588723-5942-4767-B538-E0974E5B3F1B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{70626848-6799-4412-9ADE-41AECE95443F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{709ABE5A-2238-4DC4-A1D1-2074AF3A1F69}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{710DFBD0-E7D1-4A29-8524-D4E1CF48DEB4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{711E5DE8-4632-4B73-B195-737694F5BCC7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{713BF196-24EA-41D1-B43A-4B39FB593514}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{713D8741-45C5-4F87-843F-8F47CEF8FD25}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{714DD04C-79D8-4BBF-B75B-431370EBFE68}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{717FA0E1-A733-4A25-933F-C32EB54AE378}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{719339F2-0528-4C92-B959-FB885FBB123F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7197D7F9-30C0-469C-B2D0-4063305AEFD1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{71A52AC3-6467-44CC-81BC-232ED1673CD7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{71D79EE2-1DCD-491F-9102-A391E0FFA320}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{71F77962-A311-47F5-AC61-BCE0ADD075B9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{72163BB5-BCA6-47A8-B98F-80CFBB5A13A7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{72183DC9-B349-4859-A092-F2DA86A265A1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{72208B46-C67C-44A3-8711-72B3AB2BD765}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{725670A7-1DCD-48A6-B7BA-CF328D7813D0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{726D3536-5DB7-4415-B99E-E97F0DBE705A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{726F1BD6-0AAF-4046-A150-505C10AB2722}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{727928D9-3ECA-420F-8BFC-C0143281A2F1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{72A69B52-23F9-456D-9939-7A27ABF24F31}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{72BB2828-7B50-4319-8564-095C6B41FE91}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{732568FE-38DF-4E0F-A6AF-07D9DC766B8A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{73515B6F-F62E-4A7B-8328-7BFFCF3D4D16}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{73517E7C-422B-4D38-982B-1D52BE84B63F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{73534DE8-B3B3-4844-B84B-E5C46A067856}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{73578E80-BBED-4996-9BFC-55F575F1E91F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7366B467-F0B2-47A4-B93D-7E20E7047FB2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7373A877-2E62-4984-8957-F99F1EC6969C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{73BEBA44-27BE-414D-A5DE-4D017BFC76CD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{73CE6A9B-A09A-4979-934B-99A4571D58A3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{73E406D2-8BA1-496F-91CA-3A140344D2CE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7477E164-E57B-4055-973E-38BDCBB9415F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{74AC6F8E-20AB-449B-8B0E-F4D01AA4CA95}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{74B50368-211E-4F44-8D41-66BB3772D049}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{74CE250E-4C9D-444E-8A0B-54262A6E96F2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{74D6A12D-63DC-4333-9124-997D094217A4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{74F0FB90-9641-4465-81B3-E00D6B3C6C2A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{751E9610-0637-458B-BA29-ABEC660E6C15}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{753D582F-8AF0-4AA2-B616-02D45E02A02F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{753F23BD-9D5B-4F77-961C-254D7F762244}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7545E787-4FE8-4E10-9413-F6E84935013B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{754EE258-F154-496C-AC7C-046AEEE5B99C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{757E6881-2270-4F05-BF32-2C6D77B7E619}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{75D2F2AA-00CA-45ED-94BC-E8A03558AECE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{76115D0A-7688-40A1-942F-BAEE238C88AA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7621A1A4-8BCC-43F8-8E79-572EDC9F3143}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{762DDE98-9FAD-4225-AB15-8612C82AE232}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{76385BD8-C709-4840-A960-4F3147834170}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7663EC67-A43E-421D-A807-BF003ABA1E75}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{766FF962-BE59-42AF-AB19-8C6E76721843}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{768F9C10-C2E6-4A7C-B549-779DA76588E3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{76BBCFC4-D5CF-4E09-BC8B-AC772AF212AC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{76DC56BB-1A42-4624-AE4E-B7730FE35507}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7710E7E7-5097-4090-BDA7-75ABFCED071B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{771B95C8-4FF2-4EDB-B0C6-84CDC0F9CA12}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{77297BFD-A127-434C-86B7-11624323A580}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{773AFEA9-D94F-44E8-897F-9FC7877503DF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{774366FF-A2A0-4FBD-A863-43782CF4AD53}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{774C9CCD-D1D1-4082-B0E1-A9F83C73F7A9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{775B7B13-D0C1-4FE0-8553-C633B4451929}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{775D838D-39FC-40B8-9B28-8DF6E0267CFF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{776DB341-126D-494D-8C4A-29B1113A3E37}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7772DF3C-0FBE-47CC-BBB8-8A0F1FB1ADDB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{77C3D829-33A3-499E-9B4E-93D353B9EBDA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{77DC56D2-9F45-4EF9-AAFB-45DFBB65D3CF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{77E7DE61-E0BF-4905-9384-BDF5840EEEF4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7806B60F-9809-446D-B82E-BE2A50072D46}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7811910B-9DC1-4489-924E-7F8C35AF3D1F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{78313742-3192-4674-8B4C-E1CA0BBB3DE9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{783EA25B-B38D-4E58-8B8D-D3A0E00206F8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{784CD58D-4000-4E3A-92F4-E6A48728351E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7885DCF6-BEC0-437F-B97D-50B04F126D3E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{78C1DE05-CB5A-4A6F-9D33-8DD370D49A14}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{78CA53A7-7933-4E4A-97F0-3B6052CCBD9B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{78F52438-6908-48BB-B16C-878EC150B42F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{78FAD0B3-B7A4-421C-8FB9-D625D39B9C89}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7900DFD3-CADB-49DC-9559-0E2E0B95F6E2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{79044D3D-42B5-4CC9-A221-BB0A83E2475F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{79153401-5BD2-4694-BA7C-C6EFD170F9AF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{791DEA13-50E6-49AF-826F-DC397E8A9F53}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{792B7499-D7AD-49BF-B371-D8726435CF2B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7935F6BD-BDA0-426F-94E5-93768AD1F2BD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{79544997-9BE7-404F-8911-886EE0112A79}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{79823855-6130-4DB8-A4AC-347C0628FF4F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{79B68F6F-7331-41FD-B29B-E66130E7C6BB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{79B8A076-8012-40AB-BC7E-8C9C1A60BD65}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{79C54481-41D5-41F9-B770-962B389BA443}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{79CCD260-625A-47CE-B749-71C133C55EE7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7A0C9A7B-D761-42E4-875F-55B6A7982BF9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7A7FC9A3-F09B-4796-9259-0A7241D93895}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7A80F7FE-D23A-4474-BF83-150D9C50451F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7A8FBDFE-4D7B-4949-B722-52CAAE47594A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7AC02FE4-DB29-489E-9FB5-421E0AAC83A3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7AC820B7-5641-49CA-98E8-5B636F095405}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7B17D862-6CD6-4370-B009-4B115E3E50AF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7B25805A-CCAA-4F29-8279-B68F8E91BAC6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7BC55EC6-F6E0-4A67-B3D1-231D84D8CB2C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7BCF61F3-2ED6-4786-86ED-AC14245AFA44}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7BF3F019-2CD7-4AE0-A75C-D76E5BE6C1FD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7C050F3B-712D-4BA4-9128-8BF0591E69EA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7C135A57-D691-4FE0-8DE1-739FB1E24C65}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7C245500-E6D1-4545-B116-9C3A8950D962}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7C68FCDD-1CBF-4BAD-BEF8-88E6E2D7AE86}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7C79C5FC-F5B9-4986-986F-FD79E5EF1384}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7C79D2D4-4CD3-41B0-B9A3-AF3C70FB2692}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7C8A3AF9-A3F6-4653-8B98-46CC91DFACDE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7C9DBCA3-1764-4F89-9861-E84530F82800}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7CAA84B0-49EC-429F-AC09-F6A881B9239E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7CBE1848-EBBF-4A91-9908-CA66103C9C87}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7CE8093C-FC79-488D-9529-C4DA40EBC75B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7CEAEA71-D543-40A4-A564-2C6008044B18}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7CFCBD11-4D95-40F4-8877-303B054D80BB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7D259041-2936-4693-BA7B-3FAD3375880F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7D33A21D-1C94-4E40-A6F5-A77989905BFE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7D656531-DF0F-4F57-AE82-0563A7640928}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7D6FC0AD-51D8-48E0-A2BF-8E3E4DDE0D54}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7D791F26-63D7-4C1D-9D8C-6CC3635532FF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7D83542A-050E-453B-A67F-C7087947F9D6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7D88C99F-83A0-4956-A6A9-0BAC0AE20BC7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7D950F27-271F-41B3-8DE8-8BE33A06564A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7DF19DEE-B898-44B8-9803-66D357D13A3A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7DF8349B-7133-45AD-9432-1BE591FE78C8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7E22408D-ACF6-4DDD-828D-AF2FE3222ED1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7E6AB92B-8521-443C-A736-2F1A807D44CC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7E6B0039-E939-48FC-8B79-BE833E873E5E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7E6E95A9-270A-4971-8344-335209BEDD1A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7E70A353-B60D-48A7-AD18-ADB7B7523A19}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7E8509CD-D079-49FF-846A-720B4DE9BD45}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7EC367FE-5AA3-4EFE-8B4D-284FDF805866}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7EC91CB2-73F8-495B-A570-C1E2C8104F51}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7EEC28EE-D678-4B60-8B53-84CBB7441F2E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7F004ED1-05D5-4311-B547-CDADBC7DC3A6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7F254BBF-767B-4BC4-B018-1BFCAF4B8CB2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7F3BBA7E-AB80-4933-8F4B-673CA9AAD76B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7F45AEB7-A2B1-4C0D-8783-A709D532F945}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7F7011B5-A6A1-4349-9A74-4D71F9F8A2ED}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7FA9E747-EEB2-4CC6-B18D-080A1C92DC3E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7FB184F4-6516-4FC1-87A5-C0084530386B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{7FE334F5-79A8-4120-A98F-3E63E4F6E93F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{802C3B92-E282-4F3E-9C75-449E24719141}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{805F9975-19E2-497C-ACA9-8F6085C88689}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{80627F21-B3B6-45F9-A554-CFA1FEAB32A0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{807615C0-E156-4802-9448-B3ECFB8AFFE3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8093E832-3919-4147-AC07-C11170E8323B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{80952091-3D94-45E1-B696-89CFCEEEE0EB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8101127C-7707-41D0-8C2A-A7AB12DEE4BC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{81136DE6-7AE7-45C6-A5C7-348392EDAEDE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{812D3F9C-C7DC-4A86-A40F-8716CEAF9618}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{813D26D2-F3E5-4BF5-865F-8021D1D48B62}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8141542C-1AC9-4040-ADBB-40280EFD6587}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{81513244-E48A-493F-912E-F392BB64BAE2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{815510D3-A7E0-435E-99DD-AA428A9EB645}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{81735F9C-3D39-4481-A0AB-CB9FB69B91C1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{817FF32B-4A56-4C89-B598-C2A4EC7CB926}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{81912917-226F-45B9-A179-B84B4139350B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{819ECC9E-041E-486F-9E44-DD537EF3E5DE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{81A130C6-0875-454F-AA76-94CD9A920D40}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{81AD2FC6-1F4B-4BBB-A035-288FB83C2890}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{81B9A77B-BA6D-48D9-AAC7-48FA85A0D97A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{81C28926-B850-4669-AFDE-5BC3B790341C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{81C6BEEB-8CBE-4896-82C3-FBD7B519D61D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8208FCA2-758E-4FE5-B7E7-3D0B157AC973}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8214447E-0A73-45A3-93C5-AEBA3C9FCFEE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8222B5EC-EF18-414E-A113-E0B9FCBFC039}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{823257EC-9962-473F-B7FC-4D1C069FE88E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8253AED9-B5A2-42BD-A23B-5844A5CFD7B7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{828C7937-D90C-4EAD-BC5D-3D2A9A910B10}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{82A4700A-5245-47DB-AA1F-64F89C483297}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{82B5710A-6162-4BB5-BFF7-38720D5BB639}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{82D26B85-8422-4861-B135-EC007D43DF69}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{82E050C5-E5EF-4A79-ABEF-E8545CB7BA85}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{82E68512-FCEB-4402-8154-2DFC394DF123}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{82E7DB9B-8691-4602-AA89-A0667B98C351}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{82EE4115-1C7D-422C-B112-8DE9A34A9FFD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8315A993-2B04-49F2-9327-71BA84175EA1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8322BE3D-8B86-46D7-824B-4EB12401B7F8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8323C0DD-5A88-4A39-A0BE-ACB6C3DCC2C1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8335B417-9359-44DA-A8A4-2BD45624622C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{836E7A27-3690-4983-A1F1-F302F791AA00}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8379FA96-90A3-489C-A6F2-731802A07F8A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{837EFC36-8515-4408-B03D-13F9B43A82B3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{838F8422-A532-433D-938B-A6892710226B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{83ABA2C1-A8E6-4D14-B904-C1FA07A198A3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{83ACEC25-0EBC-47FE-B47E-780E9E19D16F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{83C308A6-DF89-48CA-AF6D-56DD56B54F78}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{83E74CB1-F88C-440B-9EE7-5D4C816B3852}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{83FDA4EA-1EA1-492A-8C1D-C934D1E0500F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{84030648-5ECE-49B3-8C1C-6220CE46EEA6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{840AB41E-6B43-4A19-9FD7-6D6596ABC418}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{84239067-ED10-42DE-A897-06B520553452}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{842F257A-DC03-4858-A4BC-D975881B3805}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{844D79E5-972D-4981-B09D-4137D290CC1B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{84698826-4E01-465F-8179-D2A6960A4F92}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8473A002-23C5-4662-B9CE-59F81437D7B8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{849D4BFF-B113-4EE0-9503-BBE653835425}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{84B13168-F1BF-48A5-9D62-4C179A934BDA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{84C23D3E-89F0-4FE7-8858-4D03E1AB6426}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{84C413D7-B9CB-4CE8-B48A-91CC0EFDE3EC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{85520AFB-EE5D-44B5-85AD-7D7213856918}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{858EA2B4-92BF-4054-9BAD-61233397CAED}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8596443C-9D43-48A7-8F6E-705B07E06279}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{859C7AC4-17E8-4FBD-A31D-302377E6557E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{85A6ED73-FA56-4294-ADBC-0223B275B065}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{85A76AF6-59EB-4980-BF15-29B985B9F780}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{85CBF546-5427-4F6C-BD17-0DC227B029E4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{85EC240A-E82A-498C-A3F0-519EE1ACCFE9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8614B410-8538-46A9-81DF-F9AE75FF54E3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8625B2CA-B1D2-4E56-984B-1A2634640AEC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{865CFB74-8119-4C17-8664-0E4901EDDFE0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8679A9A8-A061-4379-9AEA-5C3C671DC46D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{86B33C4B-02DD-43AF-92DB-7D02DE7A65F8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{86BD3E75-293F-451B-A404-A517E78621E3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{86CBCB75-8965-4C9E-8D85-8D3334247661}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{86CD343B-3C75-4146-84FD-3C37E7BB1C78}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{86D5A11D-BBF4-40E8-8C4B-66CD752623F6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{86DDB662-B4F8-4B25-8B0E-7EFC389B12B0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{86E5E8CB-CAEA-48E0-A3A5-0523208108DC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{870B1FE5-3CCB-438E-ACA9-CBD5CEE86B11}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8712880E-1A38-427B-83C2-D7FE0640D2D9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{87152265-B7FA-4886-BF10-A247C4A1A9F7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{87392586-1646-477E-BF0A-B74ACED8EB02}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{877B01E0-1E59-4E90-BFE1-A0E71D60DC8B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{87A53B7D-F767-4FBE-8B02-AB115B2A01EA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{87A7B85B-716E-481A-BC34-E25E6E1C6AA1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{87D3C5B9-7BBE-44C4-B724-CC3578F740A2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8819CC2E-89E4-429E-917C-E3A58834D251}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{884D2727-D1D8-41C5-A36C-496B4C46F013}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{885C42A5-0C5B-416B-96E5-5BCC53A0A774}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{885FEF76-3EC3-4CA8-8FA8-5EF3511C605C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{88606D75-435D-4634-8BC4-FB6286F9959F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{88619335-C9FB-4178-8DED-1671C540547E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{887479E3-8D99-48B7-AF0A-BBE36254E4E7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{887AE981-C60F-42DE-82C4-F638E9297311}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8930AC3E-38A6-424B-B844-C4FB89DA1ECD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8931F0F2-C853-4E0C-B2B4-C8AEDBC253B0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{89608FFD-BD08-4F83-B10C-0803A287D091}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8973CC06-6618-46BD-A9AE-609C6A89200B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{898F618A-4B4D-4333-9408-780E60F47718}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{89A3E374-6E59-4730-8B87-30A568109C93}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{89AF7E0D-200E-4915-9625-70D96908549A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{89D505DB-1C19-41EC-B4AA-717DC5D33158}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{89D8C5D7-C9D9-4DD1-AF23-C24466C11842}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{89DB2D48-3B1D-405A-AE57-D054F455891D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{89F4ACDD-C14B-4381-8547-E019A43270FC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8A27652B-99B7-4C6E-87A0-81417FBAE914}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8A2F41BB-6BA6-450F-8FA5-C15D6646A3F1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8A37C071-6EBF-40EF-B06F-F31EBDDE8A42}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8A3AE0B3-4782-46AC-BB59-DB095893FE5E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8A92854B-E08A-4879-9683-2A05FCB6CA15}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8AACEE1A-A077-4C74-9B0E-ED71F63987D2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8AAD4D3E-0650-4814-B88A-A7C2B09DFFDA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8AC21820-D949-4ED7-9AFD-926812986629}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8AE08926-ECBF-420F-BF8E-BEDB212D2222}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8B18A78E-121E-4EA2-B510-C0D9C25CF678}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8B34F942-53A5-426A-9B4E-977225792FEB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8B385964-DD7F-49FD-BCCA-41A18F4F3DE0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8B49C350-ECCC-4DBE-9E52-268AE06A2319}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8B623D37-4622-4FB5-B4D8-B11FC8ECD289}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8B84780C-E564-4200-BD49-45D2F2B4CC74}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8BD036A4-6D01-4100-B46E-6534F785D962}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8BD91D50-AF5D-4ED0-A14F-18331B51EE92}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8BDB8D73-8B39-4626-AF26-301681A66B1B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8BDBF617-AB84-455D-8508-84D25FA130AC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8BE625BA-16A0-4DEC-96BB-A06D2C73FF50}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8C108F6F-9B13-4035-BEF3-C12363BB9D04}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8C1AC434-393E-4CB9-9189-E5EA49F92053}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8C44C04B-A3F8-4ADA-903E-68AE663DCE20}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8CF6FDC4-3B12-45B6-892C-6DA74B45C731}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8CF7F8EF-F980-4E37-A12F-3CE866E3EA59}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8CFCA68F-7245-4E9C-BE00-08150E05A419}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8D334DF3-D1C1-45BB-B00A-41F00B1324F5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8D3C9337-0EDB-41D4-BBE6-55893D60A981}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8D72D72F-C8A8-43DD-A1A9-E14613CF0AF0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8D7900CE-A086-4038-9235-F62B5654976D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8DA6F8A7-472C-461F-BA92-3C17F95D95B4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8DB6B137-345E-46E8-A09A-987D411D5730}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8DDE0800-63D5-40AA-9267-E036374F0D12}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8DF1DBA4-E5A5-42D5-83F3-B8AAF1E412F3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8E4EEEF9-FF19-4AFB-B7E8-FE1B0115B2AF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8EAB057B-7D7D-42BB-8490-313413D8DB5C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8ED7AAC2-D802-41D5-9B7B-3B81AB2B0A62}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8ED94380-57A2-4043-AF93-5275E9B8880D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8EE5C836-6948-4074-BDCE-C8B2CD42F581}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8F14738C-EBBD-4906-85A1-C5EB010B9465}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8F3DA884-E930-4780-BBD8-58320A086B71}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8F526D1B-9224-4092-96F3-847811AEA525}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8F5A328F-5463-4276-9AE8-8B5EBD8ADDB1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8F64CA4D-FCCB-4787-AA56-A6FCE5FB3740}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8F6E18BC-D1F7-4DD1-968F-B1AC18201932}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8F7EA779-B6BA-44CA-812D-91C323BBADE9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8FDB8F93-F3B8-4673-B6F6-1DD8C5591A83}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8FECECC9-DBDC-4196-B003-B8D095764719}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8FF0FF00-47D5-4C2F-8AA5-09E8BB8476AF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{8FF480C4-1800-4141-A9CE-CD9E19AE3D86}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{90356E63-3117-46D8-94E0-2EDCA73C9F47}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{904A7B2F-058A-4DA7-9440-2C2F7895ED81}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9067750E-ECE7-4DD5-B182-3570F85F6848}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{908D4183-B885-4D96-90C9-74BCA3AD4002}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{909FF4B1-1951-4385-8B11-AF349A94BFF6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{90A8D86C-2802-422D-8434-74550D9F5307}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{90AC8079-E431-49BE-9503-6B957A3E6733}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{90C5B97F-D2AC-4205-98EC-65AF9531C651}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{90CBAC48-6BED-4B58-8D8B-75B6253588B3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{90CF3D3D-B9C3-429A-B294-1A5CF49D95E1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{90D82ADD-65E0-4F54-A90B-70B4F40AC908}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{90FFE48E-D4ED-4D96-815E-0AA8B9360A42}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9107E7ED-6B4F-4B26-AB31-795353F7D1C0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{912B1E87-D949-4375-B7AC-62D82BA50613}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{916206AA-CC4A-495F-B2E2-9BF36F6836E0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{918C1068-B799-456B-8380-E19D4478814D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{919B5CB5-57C3-4DEE-ACD7-4FD6489745FF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{91BA2705-C714-45A2-8DC4-501CA9427719}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{91C57D99-6BA0-42E2-A45D-5A7F66D13210}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{92207C27-AFC5-4A2E-8EEB-D216A1B96819}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{92246A73-D50D-4963-9F5D-A76AECBC1696}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9227DA26-595C-4612-BE75-95E8AC5D1E98}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{927712C6-4D6B-45BB-8F42-1A062A382A7E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{92800808-A3D1-46B2-A4EF-640CA93F83DF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{929392A3-1CC5-4AC4-8EE4-EB4AD29A34D5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{92BD0E2C-37DF-451C-A8E0-A0DBF03B2BCB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{92F47AD3-DF0F-49D3-84F3-10F7D69D03FF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9301666D-86B6-49FC-8FCF-A09DAE4BFBA7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9354141F-17EF-4892-B6A1-9AA6EDCCF839}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{936D684E-848A-47C8-B1A5-5E621340A9EF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{937C9F25-6CBF-4B02-A672-D4290A1741FC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{937E0A6F-2A7E-4C54-A669-FB041BC82665}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{93C347F9-2964-4FBC-8A10-71D8D87C77B0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{93D51D93-963B-43F4-AF43-1724954F0FBA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{93E1BE1C-129E-4483-B509-5B67C2BC128B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{940043DB-EABE-48B3-BB55-B829EEFD3EC1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{94060E23-B8D5-4DB0-B43E-59CB903C8D8A}

Joahpi 25.06.2015 00:25
und noch Teil 3
Code:
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{94252087-A9D0-47D6-9411-424DE2099658}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9436CC99-FADF-435D-9E29-6CF866D51272}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{943A31A3-9774-4203-A891-6590A4FC939D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{943A71F9-DBBB-477E-8C21-900C7AD8171D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{945F632A-AB0F-4074-A0B5-519B8D172FE3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{946A3ECF-3FEB-4979-99E0-312D65785875}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{948B1083-5EF9-484F-839D-49319067DD9A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{951BBBC7-3419-4377-95E9-740EEDE66B85}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{95266899-4723-4782-9B8A-13498ABE6C34}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{953C28B8-D366-41E8-9B4C-8666F0B9D003}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{95565140-9F4C-45FF-A064-76EF0B6AC048}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{95631878-13B8-4814-9788-34209FC625BA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{956E4A56-71BE-4364-902C-A0D116002454}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9585AB3E-370D-4F8C-956E-3282618FECBE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{95882CE2-E344-4E50-B994-AB87BF4DAD50}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9596C2B3-B66E-4C79-859A-5581A306BE4E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9597834B-F6BC-4BEE-A7C7-8BD0DC06AE3D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{959E2FFB-7C13-4A20-B396-CCC0CDE367B5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{95C2C450-E69F-4C55-9594-1D466E16F2FF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{95D2753B-515F-4954-8D1E-8A348051D298}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{95F161EB-AA4B-4815-90DD-E52B7D1EC25A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9615B553-8A1E-48BA-A09D-D8FE5CDD9C40}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{961BB029-5DB3-4DFE-9707-079816C25762}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{96329857-9751-4F6F-A4A7-FC7E4279A1D4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9674A181-2CC5-4C8E-8E5D-D43F785CF0FB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{967F01F1-7383-45C0-B3EC-76B7368A0228}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{96855EE0-15EB-4DD3-9F36-F88D3FF7157A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{96957CF3-6F3E-4E22-A281-3812862EB786}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{96BFB4DB-0C25-4351-90E3-00C32C9FA7D7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{96E05257-F976-4ECD-8EC7-734200E2703E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9721656B-AC70-48D0-A135-7638769F4951}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9723C440-1267-4E7C-9C26-F5CBEE5B1EA6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{97289305-9338-45F0-831A-EA22AEDE43A1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{972A18B6-8744-4901-9161-ACBA888E039E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{972B4E02-0E15-4489-858C-74D8168FAFDC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{976290B8-5B73-4675-9650-8B24F118CA42}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{977AB348-0E84-4A24-A105-E104BC2D883D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{977EF9A9-12F7-4BA5-9A19-3ED431EC010C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{979ACDF5-C0A6-4C68-B120-A26CA75A9817}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{97AB2E83-F0CD-497B-ABCE-EDDF0F6D2DB6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{97EDFB97-C296-48D6-827C-FF91F04B36F9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{97F95AE5-1088-4DF5-8060-38CC3F5723C2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{97FFD546-5C0C-4D0D-899C-067AAF9DFD56}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{981EC36A-D119-46CA-A0F0-CC54EBC99166}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{982F0A06-1939-4E16-A14F-D56CFE6E37BE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{984A0464-C185-4961-A7C2-C984C6563A9B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{984A175F-2902-40ED-8581-C48E942A0158}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9860D8CA-A689-47C7-AC22-355E64C80601}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{987C6C55-DC21-494F-99C4-67BC6AFB702E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9880307A-6192-48B9-AED3-198868F6C659}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{989BEA6F-926F-4D86-9CCE-360D38C8449B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{98A1DB34-E79F-4C18-BEB1-8342F7A12372}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{98CE9FD6-C6C7-49D2-A7A6-E9CBB412F7FC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{98D01FB1-1392-42BF-A8DE-D8D60B95768B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{98E14796-714A-4BC8-9294-E9B7B32320B5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{98E731BB-38EA-4AF9-A070-EAE6214BCD58}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{98E9EDFF-E812-4E5C-8A79-22646CEDCFBE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{99413336-5D20-4552-B86C-4DF9DBAB82C5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{99A77CF2-79C8-4A62-94F0-36A82124A31A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9A1B1EB9-7B6B-47A2-A4B6-3C5BFFC8E883}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9A41EDC5-B39D-439F-926F-34B6AF732527}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9A852152-A634-41D9-9BC5-4020432B9E68}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9A8763EF-ABBA-49CF-AD24-E5A381972D93}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9AA352AA-6F31-428A-9F35-131894DF8456}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9ACF85D9-6921-4110-89CD-0538FC9DC102}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9AECFD45-B772-43B6-92E6-FF842A366C92}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9B0977EC-5835-4201-AFA4-E7917A490C77}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9B103A7A-2441-4FE6-BB32-EBAE6A2D6DA3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9B43147E-CF04-4868-9723-B33AEA247645}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9B89B28C-1987-430F-B4F7-41D97A1ED74C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9BB5CCAF-499B-4136-A441-B331973E21AC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9BB64448-69CA-4CF3-B52C-FC6506BD670F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9BD3C441-B923-443F-8218-B7F44AB4FE1E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9BEBB5E5-118C-41D5-AA3B-AE70FF55DE87}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9C03C344-9726-48D1-A837-095F6E6D6F45}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9C34F0A5-4141-435C-A25A-BB01BDE53AE8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9C356AF6-930E-489C-8E93-93D75F3F055A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9C522F3B-F029-4A0C-A996-FC993D17061E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9C5CEFAE-EDAE-4057-8A3A-335BB59491B2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9C888223-99BE-4A81-AEF1-AEFE0F33D950}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9C906F06-35F3-45F4-B3A9-87182ED199B6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9CD0EF78-0D21-4093-9899-F332B5F6BD31}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9CE4CB03-EE2D-4774-8782-7F82BBDAC70A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9CE66B62-1374-4654-B403-CB18CAF8BE9B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9CF4286E-D66C-422C-9DB2-0B3254939D9E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9D3FB823-519F-4407-BDDB-17F046BA1D25}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9D49E00E-EC84-49A4-BC41-05692312E172}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9D8386F8-DF14-4A79-B018-DE4B434DE5BC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9D84E083-F3A1-4771-ACD2-7D94AFACBD0D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9D97577C-9FB0-46C1-88F2-821C9BCFDD90}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9DB7604B-6076-4C8F-8F78-8FED72164E92}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9DC7BA3B-671C-4F9D-9E1A-DB7C756F1D6D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9DCDC3A3-D22B-4634-B85A-E36783B1CA5C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9DCE401A-1F01-48D2-BCAE-A695DAC3F186}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9E06F58A-5029-4A7C-AD29-D38A4DD03424}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9E09648F-915B-4331-9299-FE8E3F392503}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9E1D84B3-32FC-488A-A7D1-E6130F27D23A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9E3D21B7-AB12-4CD1-B21A-630692384778}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9E58B1EA-9109-4A07-BEF4-DBA6861A2A3C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9E6323B0-7609-4724-9E5B-DFE3152AA1A0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9E94EFB9-A307-4421-A3B6-F4E865A73C99}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9EB6E3B8-00B1-477E-BD1C-54AE41F74896}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9EDD2EE3-A9FD-4C81-9EED-3BD0F9AA6BF2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9EE2BA14-7147-4550-97E4-E1B6364A7F9E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9EF2ECC9-5F57-41EC-89FC-AD282CE86078}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9F0BCA41-2CF3-40A1-B533-0CCF4428A4EB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9F194981-E49C-4486-81AD-42D46A38F2C3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9F38CE76-7872-4468-BCCA-96B94ED1144F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9F410DF8-DB03-43D8-8148-0CBC50D4AE2B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9F63D41E-F158-4F08-9FC6-819791809AAA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9F7E49D8-CA1A-4CB8-AD4D-CE755C70DFFB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9F8E7C05-B8D8-4337-B37B-B5BA546E5D76}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9FA2956D-742D-4232-A92B-58BD2F12ADB5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9FA3D8F2-BE61-49D6-9729-B948A192E183}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9FA9F349-78BA-4DEE-98C3-71E7991679DB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9FBE5D63-CBDA-4C41-868A-F7F69F88A4AB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{9FD476C7-0149-4426-9196-138730F54EA2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A0017197-F0AA-4F32-BE95-DBE65A8EB207}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A02FDA15-0F54-4D3E-B39C-EA46D6487022}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A04EF89E-BC3A-4996-AA0E-753F5B56D3FB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A0614BC0-04E5-4C90-873E-DCBE91DB486F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A070D286-4351-4967-B17D-4501CF112283}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A095406C-6B55-499A-9724-8318C7AFACF8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A0A5976A-7241-4800-B02A-1EFA70405F3E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A0B70852-E79C-466A-A0ED-156044520B50}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A0C4E9EB-945E-4155-AB61-6E331E4C1D42}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A0D65BFF-4DA9-48B9-8AD8-1CDB2DAC59E8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A0DADF3A-189B-417C-9028-410B6E66B239}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A0E1D77C-EF27-42A6-BF75-C386ECB39AC4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A107A9DF-50DC-478F-B2B4-1C89E7A33AE5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A10B34FE-C5DB-4CB8-8E7E-42EEA8CEDE15}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A1342C4C-A58E-476D-9E49-3AE99BF4A67E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A13B126E-6060-44F1-AA06-09A516B43EA4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A15C5729-BF50-42D9-B46E-412756D039E3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A1628BA5-7A0A-4860-9192-193B2E7B1ED3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A17364F3-26D8-4C1A-9C4D-2B3BE4C41800}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A174B81A-E45E-4135-ABD1-52636395179B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A193644D-268B-43AF-9979-4AC6D2479960}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A1A619D7-510E-4FFA-8DE8-222887134B20}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A1B27821-9915-4928-B42B-5D59E8A7A1F9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A1B4A83C-6E8B-438E-9600-3D2FEF3937C7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A1EA1CB3-B42A-421B-B518-A71C37163816}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A1F46E09-8763-4606-AA24-138983226413}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A1FC6BC0-09BE-46ED-993E-44D000990AEB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A20871A9-80A4-46DF-BE12-1C4C4E4EAE30}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A23A9F2B-5748-4A9C-9C65-66453FE2F3B8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A248A949-B359-4E73-BDB2-00F72D4869E6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A286527B-42AC-489D-96CC-D3BE4BCAF460}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A2A757BF-7F3B-4BDB-B0AF-C9E5341E4F43}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A2D54AFC-643C-4C04-B172-28B4C21C15DB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A2D56E86-A6D2-45E5-A8C9-70ED3C282862}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A2E55548-A532-49F9-A794-DA72A9E0F270}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A33CFE84-67F1-4508-8AD4-32CB8E7B83B5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A3524032-52FC-482B-8A47-8E0C01B109DE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A365C7A3-4C23-4619-98E7-A6055057C764}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A36EDA21-68B0-4016-9D48-0C4335EDAF73}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A3710B06-CBE1-4D63-864E-793663FBA7AD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A38FCEA9-2012-4A1F-A02E-1FFA5EA9988A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A3A992ED-A961-404F-9261-6D03737673B7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A3B5379C-5F1F-4BDF-A665-B04C865E5241}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A3B9B76F-D36B-46D2-8ACD-05EC6BAB2D44}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A3C81071-010C-44A8-A866-B6C4B3391E1A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A3F5AB47-E4C6-4EF1-AE45-3B8C4E8C6841}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A417A848-F7A2-4549-A3BE-E1C04D98DF48}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A420FE16-4B7B-46B7-AB86-B2FC0A8EA9C7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A4217137-5675-44E4-92C9-6E24B1F5371F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A4735533-3E2F-45C1-A351-038F5998E4E0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A47484B9-8DF1-4550-976A-4CE4042C558D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A500D40B-D9B1-491D-8A3B-AFA2A95B2A8F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A5021229-4EC7-4B8F-9D78-986FC90BA627}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A5062D19-0C73-4996-8DE8-E85955CBCD52}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A5171771-101B-4A99-9824-A4AC899067B8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A533426B-4BE7-4FEE-B13A-AFCB8CBCADE7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A556DE6B-2F79-4346-B98D-4402174F86BA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A5715F0D-F38F-41C7-A794-4AAA15730B88}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A5A81A5A-B45F-4EBB-897B-F4C4B10BFE80}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A5CEB179-9E6A-41F6-B598-B96AAF10EA0F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A6012556-C42F-4776-99FD-E315F2AEFDC6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A611113F-0C5A-49EF-A508-1D4A37351987}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A6620B4F-A98F-414A-8741-11DB41ACD917}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A67CBF57-1AB8-482F-97B4-1494B6ED2F6B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A68DA260-095A-4B59-A393-FE66B0634FC9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A68F3C73-9FAA-4CB8-8139-B732CEB63E33}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A69B167C-5B23-4771-B853-D4979F942E57}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A6BAAC2D-3435-4E51-887D-CD5F98F37A2B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A6BDE364-40A3-43A7-AFB6-C012417DC649}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A6D664D8-A665-4069-96F9-0723AC4226E8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A7082998-57FE-48C8-8FD0-2248D8DDC82A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A70BADF4-F6D2-442D-82D9-66CD91F5839B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A710779D-18B6-4FF5-8711-FFB900E69C77}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A71B8F55-F29E-4CA7-BB40-28E7FDB836DF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A7236B5E-ABB7-4B59-A229-B75BED1561EF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A72BE03D-262A-498C-9A7A-ED16BB1A5871}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A7461B04-2FD8-43F6-B8C9-3AC0F4DBAAF6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A7530172-2791-4F14-AB96-53E5191F7F05}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A76F0EFA-B038-438D-9EC3-2780A8FB3C9F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A77E965A-CFD7-4F02-8F0F-574F288B930A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A7F6DF96-74F9-4DB4-B531-0E9F865D1B9C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A7FB9A16-2B75-4BAB-B02B-6431973205C3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A80769C0-A932-49DF-ABD9-C7CCCD20C2F1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A80C2382-865F-4F2D-80C2-FF6C7729CB45}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A80C29C3-90B2-4ECE-97F5-367B2CCDBC4A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A81A9960-BA8F-4421-B174-A8D0BCCF61BE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A8A21B36-28CE-437D-BBBA-AB5D2276D9CD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A8A9E512-934F-4000-BC12-0A980673A0B8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A8BFE1D5-C3F1-4D6A-87E9-EB762E6607A3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A8CDFF55-566B-4ED7-AFD2-902452DEA696}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A8D8135B-F773-43B1-80CD-207186ECC54D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A904DF9A-CE17-4D3D-B3F2-7DD17684E88A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A90C05B4-BF5E-4F23-9D6F-D08FFC4471BA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A92606C2-4D4E-4929-845A-A3C160446C30}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A933DD1F-72FA-435C-A67E-5606BCF52509}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A93E465A-48EF-414D-AA87-687928775526}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A960C97B-A0DC-447F-99B5-25144395B2CF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A9690747-2793-4F5C-8080-288FAB47371D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A97B88EA-8D13-4D8A-BE95-02EDE3F5B471}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A99FED8F-F540-4A12-9EDE-7073FDC94171}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A9C1473D-FDA6-41A8-BAEB-062976FD3F04}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A9CF7C0A-C9CB-41FE-BD29-340078642875}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A9DC8BA6-B8B7-4228-B05B-D32117501270}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A9DF9B65-BD16-40AA-AC18-83D79388BCDA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{A9E3AA6A-DA17-46EC-944C-6964C6E75ACE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AA097291-2502-4DDC-980C-3880868EB132}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AAACFCE2-9E35-4392-B747-70CBE66FB012}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AAB191CE-3F12-4D6D-AA39-B3FBE2162231}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AAD1B807-04A9-47DD-A728-83BAD19DCACE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AAF61E00-0314-49F0-BAF2-2EA52D82DAD7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AAFB6912-686F-48F2-8B4F-F7E75DE7B356}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AB068621-0404-4631-B0BD-BBEEE35375C7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AB2FA9D4-11AD-47B9-BAEE-47CE038D7A7F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AB50047B-B543-401B-BA0E-391B3A634E4A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AB63C7D5-53A8-4AD5-A8EB-90D97FE1F579}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ABCEB25C-7454-4B60-BC55-2C6AB1B73215}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ABE8077D-730A-4BE1-A825-BFA6793EB81C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AC010ED6-293C-4702-811C-869CB69583D1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AC14B2AF-5584-44D2-99F0-1A4D5FE66A9F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AC36B628-CDF9-4ED7-9025-E67236FAE481}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AC4A1DCB-19AF-4DDA-81DE-99DC399FFE17}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AC51CAA2-C398-4850-91AB-363A7913A2C9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AC86FEB7-5543-4A2E-BDFC-5D26EA8695C8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AC941322-1668-4691-B01D-550FEBCB4318}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ACC7A60B-63C6-495A-80D1-A8FD9FA8C02E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ACC95CCA-EBCB-4829-B971-B23D2BAD7EC1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ACE9A4B4-3FC9-4C69-9010-362F48D88183}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ACEA6031-440C-47C8-B526-10F1B14DF901}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AD0B9B18-AF16-4CBD-B6C2-DF10F88C5B84}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AD0BD2B1-640E-405C-9CCA-6CB3CC5D05CB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AD195C1A-7095-49B9-8803-5A7687D1776F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AD1D042B-D903-4491-96BA-E512F6EF7046}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AD21906A-0D99-4C47-8174-A7A9DCD9980D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AD65F4E5-6CAC-44BA-B6A1-EC87C92405A8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AD86CAC9-2689-46A2-A269-7594FE805826}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AD9CBCC1-EB7B-4D79-8C4C-4CF48C12E5C2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ADA4D718-982C-49FE-950B-BE652F3A8C72}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ADBE6415-B817-4C72-8791-8C4B2AABD439}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ADF94161-6082-410D-9F7F-B96E965B715E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AE0F3EEA-D752-4676-8447-D32DAD06349F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AE4A4090-6379-4036-9D74-172DB45C8C9E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AE862AAB-5481-4D9E-8C64-7D26EC2B760D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AE92817B-5EFC-40AF-9865-4D1605A3B199}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AE974B23-9F7F-4A79-9D3E-0715EE34D879}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AECEDCD7-AEB3-4E65-BADA-EA0E870B1741}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AF0E6FD4-9B8F-440D-B820-1E7BBEC72B0F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AF135B64-C6E4-4935-BC88-DDB7C7B799FD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AF150519-AC61-4626-AA50-9BE1B8FEA84D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AF2A2255-671A-49B2-9435-3AF83987850C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AF2E51A0-995A-4237-A154-CC2AC35CF4BD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AF4D7366-65A2-4D53-9E96-449BF4A4AB13}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AF647E5D-3D1F-4461-B818-C1A2F6B23495}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AF680D5F-1D8C-4D5E-9937-F72DA2DBC7D6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AF6AF0D9-2334-4626-B2A1-90C53F507896}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AF70A648-91FD-4C0B-A342-E759E8FAC60E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AFAD3D95-014F-41C1-8EAA-497831F73D68}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AFE81FA4-1011-4F51-BFED-27316BE31D99}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{AFF010E6-45E2-458D-8393-B80867001BE6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B057C11D-CF65-4C55-82A4-AC0A369D3F43}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B0A045E1-E333-46AB-A40E-CF1B6A917502}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B0CF06EB-BAC7-4B96-98F0-EDC0E0BE7BF0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B0DA1889-AEDE-4E5C-993E-4502358C29FA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B0DAACA0-DB68-4787-A965-6F75F35414D7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B0F36819-994E-48D7-AC0C-EE566DB940AD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B101D35C-1695-46E9-B4B6-38B108D74110}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B1079E9C-3044-4945-8972-A44852163C81}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B119AF0B-E1A4-451F-A59A-B63A8B6C6774}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B1457973-69B4-49FB-8F67-314538EBFC94}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B1457B25-706A-4A80-91C5-46C7D5DACE74}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B14BB369-0D96-42F4-8082-1B9F0BA87429}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B15F5B0B-753D-4686-A79A-467252F80ACC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B16AF163-101C-45F2-99D7-8D242FD1DBAE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B16BE072-2C47-4BB6-A404-61DB149A2214}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B17B749D-D89F-4758-B93B-14287E60AFF9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B1B19B2C-8EEE-4A11-BF08-FF5ECBEACBBD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B1BCCC0E-77BB-4A60-8DCD-1798232F8A25}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B1C0B9EE-0A97-42BD-8E5E-F8828A822AA5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B1F3884B-5E63-4ABA-9CD9-DE937ECB61FF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B1FCE39E-431F-4638-B497-C1883129B25C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B2583754-0279-4D3A-8A21-71F8B36E7994}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B25C1EF4-FBEB-448C-854C-F196FF9A1B4F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B2783193-AE54-4EB7-A963-E812C22A525C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B278FA34-AE58-4D8C-880D-B3E4A83539BC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B2881ADB-29CF-4840-B34A-62D6F280EA63}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B29CCFA6-ECAD-4AD7-8969-15E5F6D051E5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B29D3C9F-7FF8-4014-9A4A-71A051588893}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B2BAA5D8-FA11-42CE-847C-F8ED298F76F0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B2C6B0F0-4961-4309-8B21-0A2B34EDC867}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B2D9162C-F7A4-4064-8B85-428D1B492979}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B2DEF28B-CAFF-4AEF-B53D-D9C12DEC925D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B32643F3-33CE-4296-9FE1-1379A50B1449}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B3281AB4-337D-4C86-AF50-61A0C659BD0C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B3319755-8D25-4530-BFAC-3FE03666C758}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B36BD97D-8A79-49A4-85F5-C9EEE6B0C1FD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B3794D31-26EA-4C17-ACD4-3E64ED835ED6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B3824B17-192A-46D9-AD8A-997B7177C696}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B3825D24-0393-4116-A7CF-CFA92B161D03}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B3C6DD54-400A-4887-B5F1-9D0C2888874F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B3D04C2B-73DE-401E-9629-0EDBEE17D50D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B3DA3789-4B1B-461F-8008-49E1BFDF9F23}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B3F8D21F-C99D-4BBD-BFBD-892AEA30090C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B401E421-0247-4C21-AC54-85357FE4229F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B402E481-6715-4276-A24B-0DC1FB886FBF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B40CB448-1DDD-4A2B-A4C6-B7BE6E8EDA94}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B42AD6E4-B9A2-4B41-AB82-1F656B866A69}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B42FD718-8E83-412A-8632-772B87DE98DC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B43B5AAA-357E-438B-A805-D37AFBADC135}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B46D0D37-8B24-4ABD-A0C3-06554280EBFB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B46FDDBE-648F-4E36-9A33-418A7850E593}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B4716D16-E3D1-44BD-B457-95889EDE6937}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B474DDCD-DA32-400E-9D4D-65920E1CE382}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B495084E-4205-4E9F-9150-079C47328437}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B4A892B6-2368-42A2-BF01-E95613B11D5C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B4CAB3E2-1E08-42DD-A128-2F3F0EB91ACD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B4DFAAF2-E85F-49BA-8D9D-98FC7D09F067}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B4F3600E-10F3-4704-9636-20AB5B5C5FB6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B54CED18-A2BA-4268-B55A-B6946076E186}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B55FAC26-1C0F-4398-92DF-E84511A76D30}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B5619D47-E5DF-44E3-9866-1CCBBCC4A79F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B5651514-21D9-49E2-86C4-04D0610F4F4A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B57E9560-5FA9-4125-B9B2-B6289081800E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B582A18D-634E-4A1B-AC8C-634FE4AC7BE2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B5875721-2F7C-4CAC-98F6-C1705EA2E5FC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B5A23641-C25B-4685-A0EF-1DC71D2E2278}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B5A9F883-3538-469E-9223-15E4AB940E71}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B5B7EEDF-C8E0-48C1-94F3-BE384C6B4392}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B5CBC31D-CC44-41CC-8E47-4D3954BFB909}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B5E59EC1-4C93-4F48-A962-8BDA15A65656}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B606E8D2-4EE9-4303-B065-44BDDE3BDE8A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B6188C6E-E9E8-4607-B6F6-19427AF25502}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B62B7BB3-F28B-4564-B98C-7B63F878094C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B659C930-610A-4661-9996-4AD6F0AC3BB1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B6660DFD-12E6-4092-8B09-718A26D77EC4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B66A4AD1-8F05-4F86-9DB4-A6BA2D3A81EF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B6703C8E-0B18-4E1E-9C24-BCB3EB82FEA3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B69CB3CC-4EF0-4271-831E-505C0AA02939}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B6A57147-7DE0-469E-BF05-4325179960F5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B6C0AC3B-2D9C-4239-B70C-EC01699A2DEE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B6C64CA0-B3F2-45A9-8708-E166AB78BB57}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B6D1733C-7E72-416D-A226-EAFAB56F0372}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B6D2B3A3-9EDA-4F70-A2ED-4B2187AF3239}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B6F8B0F0-F3A5-43D6-91AD-DD64C68C35A5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B6FFB6B8-BB99-4764-9955-4FA4247796AD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B704DB46-A226-4E86-9027-A7EC2B05C7F2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B716DFFE-0C9E-4CA6-9B30-80500AB6B2B0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B725407A-F0AC-4324-B788-E9B5D1EFE2A2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B72E4B59-6C6C-4045-B0CC-942867C79B33}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B73745B8-0238-425C-8179-00E6448B8C59}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B7577CE6-FD24-404F-9C2F-425C3CA744CE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B7585E7B-91DA-4E73-A445-5EE3A911F180}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B75F4E2D-0284-4752-B42B-DFEB09F62B90}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B7657146-0E8D-49F2-BBD1-E15FBCBB935A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B79CE8E5-59DB-4CD3-8936-D864A1F031F2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B7BAAC50-A626-4D31-9797-4CD64893DDB4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B7E6692F-1423-45A8-9793-5353FFC175A7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B831FDC1-D06B-43D2-AC6A-E99663B1A8B4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B85BACF8-4E15-4F35-8256-AC662FDB39FF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B86CD684-F458-4045-ADFD-9DFAC7F74B1B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B88080B0-4B3D-4A2B-AAD7-4F14F58CE619}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B89EA1E6-0BCF-447E-8904-2BD1BE5BCB5B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B8AB0AFD-3CE9-4308-8772-E25C6D30BCE4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B8AD72DC-B06A-466B-9059-056DCA13CD14}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B8B43234-B94A-4C36-81F4-36254FCBCFCA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B8B8F634-71D4-4E48-AB27-2655C7F00D5E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B8CD4714-F716-47F0-8BE7-3B4C8F57BB3C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B8DB5D4D-C776-41D7-BED7-21152B956C2C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B9096E57-9F78-4E2B-8B85-44067A05DA0D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B94B111F-ED76-4828-B3D2-BC8964F714EF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B9588F13-8559-416B-9B40-12650351C9D3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B9A64E85-4F24-4B0C-8113-69A87E7F4C80}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B9AEFCD1-EAB5-461B-A170-7C0CF4854120}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B9D546DD-270F-42CE-931A-1271BFF60E08}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B9FABA35-BB3D-45AF-BC2E-1B892CFCD731}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{B9FB0CD0-32F7-4FD7-938F-BD67248568C9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BA0302D1-A9AB-4C1B-AB46-DCF2E19AED26}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BA0E9120-B244-4BF2-9698-80A77C7D0111}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BA1F782C-4FD3-43DB-9926-BB37514373EB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BA27ADC2-16CA-484E-9216-C2B3874CD646}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BA3CE0D4-1615-454A-83FC-50C469D9909D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BA4D3EA8-A09C-4C5E-AFA1-93965179503D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BA74A967-D3FF-469B-9729-77CCBDE2194E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BA75FAB2-3DE1-479A-ADF0-ACD09B43CC91}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BAAB4E1A-FC89-41C9-8BA9-F8749F5CAFEB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BAFEC892-D88C-4FC6-86C0-800B26505F57}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BB36578D-C182-44AC-B138-5D15BA475AFE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BB57D76D-DC8A-4A25-A8FF-A50D361BB9B0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BB5A8F99-F067-4FB5-A76B-1717C9CD692F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BB76DCAC-289D-47F5-AD34-9211276BF5AE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BBAC1977-D8B4-4D8E-871B-3F3FAEA1F758}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BBC29A5D-C6AD-4031-AE2B-10FDF045D07D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BC005EDB-F447-459E-9CD3-06605551A179}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BC05155A-6CC4-4A3E-953F-47752F70C7FA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BC0557DA-FC5B-4CA2-9676-E4517208A0A8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BC16A0B3-1F8D-448D-9B79-A97C0E16F107}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BC380237-1783-4F09-972B-DA8154B8923C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BC47E6D6-1253-4BA8-8446-621D61F863DB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BC62DA2F-9051-41BC-8830-D4C3FF12BA18}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BC63828B-3B00-46B0-AE58-9D5E36101E36}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BC6779A1-C5C1-4BBE-A156-D5F49CCD70B3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BCDDE6A0-1F1D-416D-8252-A0877517D408}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BD28171C-C20C-4F57-8EFE-C04FF7CF5358}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BD3C7F49-917B-4114-82FE-FA8168AB7BD2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BD567A41-E48C-40C1-9000-3FD233D4BF75}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BD6CD8D7-4F99-41A0-A134-8C103380CF02}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BDAF077C-0CA5-4D40-A302-40BE1FFF1A9A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BDB31BD0-FA24-49C4-AF6A-E26628AEFE4D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BDCECA7D-9EED-4740-A7BB-6478DC4C02E5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BDD09665-0137-4D62-8677-E6073C2FA353}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BE27B0B6-A331-4621-81E3-CDE79C3CC478}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BE6FB450-C8BF-4DC6-A8B1-E52B711DBF8B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BE71939B-6A9E-4625-966D-7AE9837594B4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BE732D9F-0DBB-4C83-818A-8C18F9BD94B7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BE8CF88A-F57B-4CE6-A00C-3049A655F876}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BE9FAD37-147F-42BA-B334-AD0A8C5E278F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BEA0B812-723A-4307-A1F4-7926A52C62DE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BEA12E8F-F2DC-4577-8562-7F10C75E96C0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BEA45F64-B549-4B20-909F-FEF3B22F3AD5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BECC2A7A-723F-4BB4-8227-21A4FAFA6A34}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BEE91224-A645-4E07-A5C0-140EA559B53F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BF46A611-B09C-43B6-969F-0909B8330694}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BF511BD3-FF66-47E5-8550-EE4CA29BA6D1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BF59F603-294C-409E-A7A2-832A1FE4182C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BF964E5C-E13D-4C05-8E9A-82B1F81FD072}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BFB107D2-D673-4CC7-843D-146EDC20CF8E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BFBC0509-BC0C-4BF6-969A-874C899C3ED5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BFCE0DD8-79DE-481A-BD16-46266378AC0F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{BFFB7E6A-C997-4A0E-A741-9700B80F8A03}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C0070520-8457-4583-92AC-1874A3153ACF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C009F7CC-B3AD-4F6D-974F-EE20AED8FDAC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C02636D6-C5E4-4593-BDBA-345E777951B3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C03F747E-2209-40E7-A483-58D1BE136CBA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C0667562-8436-41E9-B548-8A99A043AF18}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C08C5763-43C5-4A20-8031-F69D431DE272}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C09443E8-1391-485B-9A0A-D5FEA33D0024}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C09BCA95-C238-4F29-9FF3-E25CD6C8CE16}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C0A6F203-3DA9-4CCB-B9C7-166B595B9A79}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C0B446A4-4317-4128-B170-812A582AAFCD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C0B769AF-9040-4024-A238-A8622D52432E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C0F2545D-B4C4-46B5-B7B9-F94534B336CC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C1182097-257F-44DF-A1E1-5546DCC15334}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C133F22B-3B22-4DB7-ADC8-2F9798AE5D1F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C13E6127-C6BD-43D8-A20A-6664FA552B85}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C14384CB-4CFE-44C8-9BCD-BB1ED0761B35}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C149F947-4157-4E4E-BF63-B6630583F21C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C180CB74-76C1-44D0-AED6-E53C5A946B2A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C1A4840B-86CF-409E-B321-5AF1119872C3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C1AE1E3D-DA33-40F6-9815-6EBF8794919A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C1DBA333-BB70-4D88-8C62-1EA810C98761}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C1E35937-7858-47A0-9662-9C220C80FFE4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C1E46AB6-1E13-43E4-A269-905575EE46CF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C1EE4CA4-B04D-4592-B5D7-AFDF013FBA01}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C1EF55A8-7089-4473-9F81-420ECAF9246E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C205088A-1331-47C3-A8D3-2E1E0F4E8098}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C20A4137-DB3F-48CD-83CD-A8DCAFABB53C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C29098AE-52F5-4B4A-B79F-7C8578A207A1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C29A443F-2857-4256-9424-97BDC8AF8ABF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C2AAFFA0-CE51-4839-8DF0-3F53CA99851A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C2BC50BE-48D7-49F1-8E48-C290694465CB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C2DADE06-23BD-4D73-B7F1-406F9B6C9CA6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C2E669F2-F31E-4130-9CD6-200F9101C850}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C32703BC-E46E-46C8-A221-358B70434EA6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C33B6114-5D33-401D-84E8-C58CE82AD36A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C35E610E-B6A5-4B69-968D-DA65FD97598F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C366A4D4-15CC-4848-9C73-AEE19516BCFD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C381C5A9-E8F2-42D3-97B5-400E505AF2F6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C39112A0-F190-4F4A-A815-01F0D45DC342}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C3A24C24-DA1E-4C31-8389-DC47E8E70858}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C3CBCA19-7A88-4137-A25A-8C801B956FD2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C3EB49AE-2CA0-44B0-8151-9EAB9D8E9B02}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C4325A50-68B1-4993-92A6-E359697A16D0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C4577A10-414C-4301-A0CB-207B953A72D9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C465EF4A-3F09-4B7A-9BF2-896C15E92A4A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C470EF41-1F58-48E4-A6DE-BE3BADBDEF53}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C4910FE7-A348-42FC-BCCB-12057EED2B44}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C4D9772E-A127-454A-8C15-8DD3558C03B8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C4EFE477-AA2F-4C9D-A607-054AB0BBC273}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C5023A5A-449B-4322-9F57-8CBBD90F8D0E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C552CCF0-946A-433A-B05E-935EE6040113}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C5577204-1B2F-4FB7-A3A3-2A5439306F38}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C55A0132-020F-4419-BD5C-9BBFE8ADB02C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C59B8F0A-D6FB-4AA5-AEE5-0441C38FE940}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C5A7A924-0E4D-42C3-9256-FBF24F31493F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C5DF594E-6DF2-4A8F-9936-73B8ABCF503E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C5FEF503-9013-4376-AC0C-95209A8BF0CA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C60A18F7-3BB7-423E-9D9F-454A44BDC9BB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C624DBF2-8855-4897-B538-50D3E492C81C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C6641824-EAF5-401B-B75B-B0F1014B49C2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C691B9FB-0395-4BED-B3E4-9F0F4F9FF822}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C6A69B53-B6DB-4DD5-93EC-6728C53BA0C9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C6D3907D-A53F-4089-BD0F-2630E2F980E4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C6E982CC-BE48-461F-A228-BAFBE38566AE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C6F210EB-4762-4C31-BE75-F22A6F092C71}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C7056128-672A-4B69-95F9-52C6AC0CAE22}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C714645C-F94D-4AD5-93A8-C8856B35451A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C76C0925-CDBD-4100-8B22-EB629F8984C6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C7B30893-CE1D-48EB-9F8D-1DEB9C083376}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C7BDF123-B13F-4962-B496-8A2C43AAD808}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C7D51523-BB11-4DF6-B7AF-8488F7DE7BD2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C8101231-EB94-4C8F-9778-3E90217E3FE8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C8336A93-F686-461A-88FA-9462868F6510}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C85624EB-735C-4BF9-B51B-E111F6683D73}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C85D5684-2D00-4E73-8156-65BBBD586D4C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C8621891-9273-4BDD-BA2F-3BF7CE244D61}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C8629F62-31CD-4BB2-9F3B-D7501A497C55}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C87F091E-A65C-4655-BDA4-F6C24B99C334}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C8996FC4-F1F1-4643-BBB0-64B19D00EE31}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C8A67839-3D88-456D-A34E-649E733168F5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C8BE78B2-121C-480C-8ADE-DA52FF3AC202}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C8C4FBAA-9FB4-462D-BECB-95E9AFA86063}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C91DC0F7-5843-4DBF-8E58-0F26D45B246E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C996A3BB-2448-43DF-9A61-AAD8F78881F8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{C9A93683-EDC6-4E69-B46F-052697A08481}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CA26FCE4-A4BE-4979-9F01-1FC5FB5A0B0E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CA5E0F3D-BDDF-48D0-AF1D-E6258CB2CE40}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CA5FAD75-E018-4FAA-89DE-F3C79EF68EE2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CA7233F1-ADC0-4D7B-A358-C2D84FEE6BD3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CAA032D4-8A5B-4851-8228-21215A03B209}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CAA5B00D-AA44-4F07-80A1-C8AA97B95EBF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CACA8E5B-50B4-4C98-B2DF-66916E2DD3AA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CAEBF665-16B3-4415-9203-3FF1EDDF321E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CAF7F7F2-2FD5-4E8C-AA80-922B4D5CAF05}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CB029BFC-1BCF-4771-A498-5AFBF094BFA2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CB0BC1F8-15BF-4DCF-91E4-FBA6C3F02B48}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CB26D4FF-EACF-4DBB-A92A-8511803B7C18}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CB3640B9-33F5-4006-990F-03D84F0AB190}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CB9A4AF3-1A49-41AF-AE11-A0DC1219F0CE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CBAACB33-9B7B-412C-9B38-0AE0D6755B10}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CBCBF4A7-0665-4974-AF5C-FCF00F68FEFF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CBE1C7FB-D4FC-451F-A9D8-F32E4A834D7C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CBF7A684-B5AF-4389-BAD2-A36DD4D7D690}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CC2CD1EF-3440-4F7B-93FE-1B46B9CA2C8B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CC31A739-E16B-42C7-BFCC-C54013A5EEFA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CC3AA6FD-E8C6-4C2D-BBD9-2CAA4DCE3362}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CC7644E0-68DC-48A8-8E78-200E87848CE4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CC95869A-BECA-48F2-8968-E04515ECF514}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CCD0142F-9971-4B19-8292-D42F9C75095A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CCDEA368-946F-4619-B68E-D03EA827069F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CCEC9696-9F1C-4D41-AF89-F9780147E5DA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CCF50FF3-F878-475B-81BC-C9B83A343FAB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CCF86463-B751-4B2D-AD8C-7D7C3EF1553C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CCFEF05E-48E1-4617-8251-7EE56F5D54AF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CD1A3A81-833E-4B22-B6EC-147446855768}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CD25BC90-8AAF-40B8-BB5A-8265A8EDA752}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CD38B14F-5EEC-4270-B164-476B0A854448}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CD560E29-8427-4672-BE72-9E0807EB995F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CD68B271-B825-493A-8866-BC2C93BC11D5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CD8BF88D-CE0D-403F-8D99-B14FEDB55ECC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CDB39178-995C-4FCC-BC1C-DF207E44CC5D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CDC25614-48DE-4792-A4AB-8DD1B05492D8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CDDE43C1-0DCE-48A2-8659-8A0315D9225C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CDE8A11F-1019-4DB3-A129-8EC7E408DFC8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CE122C0F-0FFD-440F-8342-0A15F9FFB0C1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CE5222FB-5DB6-4BFA-9E9B-B03A0DFBD928}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CE738EC6-03BD-46C9-B4FB-01DD159DECAF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CE85C1E0-126A-4AF4-A352-6A555BF756A4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CE9951B6-3FF1-4154-A466-929EBB4521A3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CEB37182-FF40-4EF3-8D50-60CAC9045997}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CEB916C0-BD77-4D8A-BE3A-4474687AE2F6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CF176A53-A023-4296-BB01-1035ED1E915E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CF3659CB-9547-49F3-8048-6209D9B96602}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CF5C7485-3510-443B-91B5-765DC2AFDFE2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CF8C978A-094D-4D4C-B33C-AB8B68E87CE8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CF91950E-4F57-41A0-92E4-0CD4CB03D78E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CF948E61-5471-44B1-ADE2-D84401E908C5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CF9579F4-A2EB-40E5-BCCA-E06EFA47981F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CF99615C-38AB-45BC-AF3C-52974BA91252}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CFB3477D-1EB1-4939-B84D-323E193804D9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CFBE1E76-79D8-4634-889A-2E0B6AB36C6C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{CFF0C966-471D-46FD-B3EF-90534C39E656}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D00693FA-63B9-43D0-AE28-EA756853EB63}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D00D5A1A-7751-4376-9D3C-F5E234D0EEAE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D033DE8E-E61C-44DB-B38B-B568206D04D7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D0341B3A-7139-419F-B9F3-4BBED96A8FD2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D035DFFA-E046-4777-9592-212E0247BC5A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D04F98D3-4833-4269-AF96-E97B95A64D1F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D059170D-3B1B-40CC-B9D0-61CC8447A8B1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D0645D24-F03E-4357-BEEC-B2036B8E7908}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D0923AE2-FDBF-4D07-AC40-B87689163427}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D0C28853-EAE4-4256-850E-A2BE4B08FDCB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D0C5B7EB-298F-446B-A84C-84FA21F0003F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D0C7681F-64C0-43C0-9E79-7B643C007965}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D0F7DE96-EEB8-488A-84B1-FAE528712A56}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D10C5F19-496E-47CF-AE74-3D33C402276D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D114B8F3-9FEF-4BA1-8F9B-581700E5832D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D12E9FFA-3D17-4E6B-AECA-9E7F4CBDA270}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D14B43AB-B1D4-4774-AE52-6A44E4B46D24}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D14F7AAC-8BA9-418C-AC53-E9FCC7F721DA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D15BC0CD-061E-4C96-AD91-BEBB98E8E8C6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D1608CBC-3F0C-4353-9D71-A692F4CBB7D2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D176C90A-A5F3-4F43-A8D0-3A442192A59C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D1B1BBC7-BA20-493E-9E1A-40F944684AF3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D1B37B57-3263-40F9-9904-00B0D05E31B0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D22B8C91-E2D1-43C0-A188-ABEFCDBD85C8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D247BD6E-6186-4770-8B87-EC692575B1E5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D24F4479-299E-486B-B871-70CB9701D62F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D28228B5-4CF5-48C8-B82A-CD0251FFBAEC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D290081E-363A-4102-8291-14638E6F1A89}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D2A3E0FA-7646-4E2D-842B-9F60DB33AA96}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D2BA287A-27C8-45C2-9F0A-CB17BC8355AA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D2BE5BE4-D031-4EEE-B8F0-3D539FD8C660}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D2D89D61-A730-4137-A11F-46C107ED3D57}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D2E461A0-5592-4505-91B4-1427BEA575BE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D2E56AF4-9A75-4B3A-9B34-56F34FBE63EA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D2E77F12-BA99-4F37-AB0C-27D0F97E50F9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D31029F0-7E0B-4DD1-921D-714A42644E75}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D34445E3-D76A-4267-9FB6-775CC8406F95}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D35F8A8E-AE04-495F-A1E3-80E8620E9D04}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D389A406-3452-436E-8FCA-9622D7DBDBD8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D3BCB5B4-A2F2-45AF-849C-F4439AB2B3FC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D3C37630-276E-4CB0-8EB1-6D6EE523D792}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D3EF1E14-F1B8-45F4-A441-896644DB279C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D3F65819-6424-46C5-958F-792DEEC18461}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D41DED6D-46E2-49C1-8C0F-87ADA19E5F95}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D43F6188-A8BD-4883-93A0-E3BCF08DDAFA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D4581C33-39F2-483B-9B35-387D7D6B70F9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D467D950-6294-45E5-B7D9-CBA5857FF3C9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D49507F6-94F8-4B83-B68A-77B94E81458E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D4BE3725-5575-4C4C-AEDE-B240AF34735C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D4C4585D-C877-4C7F-82F9-FDE9573EA979}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D4CEDCAD-D256-48F2-B911-612EC9666B64}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D52153AC-AF03-433B-8E20-17F3D24C77ED}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D5464694-CD10-4670-9739-7E24942320FB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D5550F57-7F48-4A44-9C86-F6E1940F50E4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D569BDA5-DD72-4C25-BA26-D936567E0855}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D5B40B01-B139-4F1A-814D-0056B8ECDAFD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D5D93471-9B32-454E-A70E-F9C97A3A7E35}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D5F78E37-9358-49A9-B36F-792E18972522}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D5FB4410-B0B4-4C71-A075-74C1B0959B02}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D60C058D-38DB-4634-B6B5-9F5FFA9D0AAB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D60E6502-B46B-49BA-A605-140DEEEC9A46}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D61E2B80-312E-4810-906D-3A76CF483E1C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D63B97D8-85B1-4E73-8D2A-4D55C946F516}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D6482EBC-F61B-4521-A99B-EB56C9FD2E7E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D6865DC6-44A1-4A7A-A91A-4B4BC7FAF5AB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D6882DE9-1BFF-4F84-92B9-17E36698EE41}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D6B2ECB7-2A8F-4720-9496-7C84DB8AEFCA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D6B33F49-F046-4E18-8FD3-9DC6DE12E0B5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D6B44D90-A841-442E-BAD4-C497092834C0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D706DA92-7DF6-481A-9595-E9010DDA68B3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D7532A2F-4E38-427B-984B-B745987D922A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D770D7EC-AE69-4CDA-8955-DD9D931E646D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D7786529-D591-44A0-9D1C-58C971927389}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D7972ED3-91F2-498E-A29A-23009DFC4EAE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D7BB7BB2-911C-4E77-B859-A2D34C801A70}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D7C45760-D0F9-4C23-95AA-C9318D979324}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D7D8BDA6-9004-44CF-8755-267498AB954B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D8016C54-E24C-48D3-B2B8-F372207D3294}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D80DE9D6-0057-4FFD-A00E-9B54033E6D97}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D8274948-B085-4317-9CD0-D4F74AE13F9D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D8367EF9-7629-4B9C-BDA7-2AEE0EAF6104}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D84BB377-DC68-4765-B4D2-B8033966CF27}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D84C92EF-EC9A-44F2-B39C-C4CA35E3C09D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D88230C1-6290-4E51-AE95-F84F8EBF8CF8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D88B5131-1CF9-4F5F-B2AF-5345D1BF3A88}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D89AB2E2-F1B8-4FDC-930E-D5C5DA972C49}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D89E4192-CB8D-4765-B2DE-D5320D3701CA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D8A85089-3812-4320-A672-7564B1C1FF0D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D8CF0F40-19B3-4039-8052-B4AD52D8C20C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D922B823-DFBB-4861-B55E-26D9780E032C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D9341034-3603-4416-A308-319926830154}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D9541221-EDD5-41BD-A32C-52B16D0804CB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D9861913-E8BB-4E39-B322-5994B9F71502}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D995836C-8F9A-4F2B-B2E6-4825E7867021}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D9BBB14D-B1BE-4259-B251-CD5A3557E051}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D9E2869A-3185-4434-958A-CEC7345646E8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{D9F9B04F-283C-437F-A3EB-927CB3CBD557}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DA241504-9BE5-422F-BB55-D137630C5C0C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DA75C758-1A05-4A19-B1CB-A781C30CAD00}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DA7FF291-A712-4C0F-BCC2-39F7E9F9ADE4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DB04EE56-C348-4E47-A8FA-81FEDE47239D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DB25589F-0B0D-4741-AB7F-859B6647191E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DB45CA79-9624-4F36-9DB0-28A50F72D274}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DB61C4B9-2F9C-4206-896D-48325ABDE8F8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DB66A56D-ADFF-4C3E-A579-B8192986BAA5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DB863B16-AFE4-43FC-9D98-1F17A959A593}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DBC96C1F-03D3-4C3D-985F-AA9C79E0DDEA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DBD15F58-8882-40AE-AEDC-E3E651D33B03}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DBD162C3-9B08-4FF1-A8F6-5FACB6ECEEC7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DC03EC17-CAA7-42E1-AF84-42E535C20D13}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DC04DED1-90D5-4B2E-AFE4-90CD94EA4F16}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DC0FEC7F-37E3-4086-8EF7-1C12DA4784F1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DC302D2B-FEA4-462E-8C8B-27A162A54543}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DC513039-89E1-43DC-9902-245CC72D8D0B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DC5D1813-A0A1-419F-87A8-4B1DCC8A7186}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DC6ADE59-8CE3-44A5-B71F-28CE12B4E60F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DC8A7637-D8E2-4EA0-9124-994E5336D2E6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DC8B1302-22DB-4737-8CE9-B57C0AC3132E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DCBB367C-ADA7-456B-BD53-8221B07E33D7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DCBB8793-3230-4A74-9816-F1E35E3332AE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DCCDBD30-AAEE-4E6E-9409-F2687BD57598}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DCDEFB67-C00B-4597-A807-3CB2C4F07E70}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DCDF37D7-424D-4102-A6ED-326F92012A3F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DCEF72C9-8ABF-4822-BE2F-04280D31BEC2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DD18FA4D-681C-4043-A1D9-A93E70D4ED85}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DD405DF1-7B4D-4DFC-AB86-440F692F6E70}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DD4BD9C7-864E-4E5E-A538-8335B9416038}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DD5CC989-76A2-4358-8724-E8AAAFB1F3BA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DD8FA9A8-6BD1-4BE4-AD75-14F58B63B0B8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DDCE3489-17BA-4792-8D8E-651E0E9EBA72}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DDE2F150-49C1-4D3B-BDC3-505565CA45B3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DDFFFF94-C285-4736-B761-C2C46B0F19F8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DE09F64C-E2D8-4D2B-A10E-D7D1E6DEE115}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DE0FFC08-FC23-494F-9281-48CDC79934F8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DE386D8C-E6E0-4DFB-92CD-BE01DCE179C7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DE480F44-9B16-4183-9073-4CC658BB864A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DE637AC0-C23E-4133-9DEB-64A102583069}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DEB3E265-EEB2-4066-B9F3-AEFE263D5D45}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DEC8C44C-C600-492D-9850-9ACF2FFF896C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DEF9E93D-0A50-4A44-A956-DEC5BC2C16FB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DF0FF42A-3BCD-487B-8D45-7C5538C1075E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DF36A16D-A2F7-4A9A-9FCE-8FE94E74DC80}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DF3708B0-2AC7-4059-8CC6-A01E9E86BFBF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DF5B2085-7096-44E1-BCBF-7BE6F88CD5DD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DF7CAC09-EA8B-42BA-BFC3-CEA3383E2F4D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DF9A2962-3877-4ADC-B3B8-C0DE0AB59ABD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{DFD7A3D9-2BF9-45DC-AD3F-4E2E9B675549}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E00380C4-3916-4D0A-AA02-F46D4D81B03B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E0076EAB-B41F-43C6-AAA9-7C62C0C0D615}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E02369BF-D140-46E2-B33D-594C24E6E13D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E03FFCED-5BA3-452C-843D-04F4ECE00F84}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E05B8072-9CE4-4DD9-BE7B-F8B1EBB37AD4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E087DA53-A283-4F57-82C9-D7099AD7566B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E090771A-7B20-42BB-9F99-C0044669FBC7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E0B9E2AD-1ADF-4E32-A038-A5559DF60733}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E0E4E1A2-284A-4C0A-9BF2-831F52251A45}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E0F62900-F9E9-42AC-99FA-0545A3B099A5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E0FFDE89-A1F0-46FE-B7C2-65FA88ECBE73}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E11E0DDE-AD47-4380-BF0D-3923338F4981}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E12DB6DA-41AB-4E9D-89F5-5B77F9F6C6B6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E12EE02B-B9AC-49BB-ADD2-8DDA14CAA8C0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E13038EC-E5CC-4275-BAAB-F333E952F358}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E17B3FAD-E395-495F-86AD-11701DAD87C6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E18BC2D2-FFEB-45A6-8F38-D34324449D08}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E19A2A9D-318F-4979-AE40-36A9297625CB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E1AEF7EA-9CA9-4161-810E-EC4FC32A0868}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E1B82372-95D7-407C-BD03-BBA85F1480E8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E1C4A21F-84E6-41FD-8633-57829191D719}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E1C8BC5B-760F-48A3-87FA-497BE27C2B37}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E1D47A3B-EB9A-448A-BFCB-B35654D70A54}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E1EB3477-C4C7-4C30-825E-D08602F5FAE0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E1ED6203-1177-4950-9861-FEC4987F7DE6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E223A446-2C6E-46D5-9C63-8B5C0B6760AD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E260BBBD-7EAE-4679-835D-4C6CC199BE1D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E272C0A9-FCDE-4A23-B58C-F8B747081784}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E2D37EE9-F1A8-4A42-B009-615D61F4D778}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E2D9D9C3-DF1D-431B-B2C7-F1CC9BE65362}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E2E1D0EC-9B9E-43DA-80FD-9FD92636FDDE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E2F2E584-9183-4A59-8143-1B26BB9402E2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E307CCFC-A0F9-4B3E-97C7-C87D97F285CC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E31107A8-A3A2-4184-A1C7-C793DC4D2EB4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E320D2DB-6377-4AC8-BD9A-1B0C1D0DABEC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E32619C9-7AC8-41D7-8442-D917CFD7DDF5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E32BB10B-D35A-44FD-8988-A7BC865B4C35}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E354C1FA-C5AA-42C9-BB67-F11206EE8940}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E35A5061-6AA1-498F-98C8-A49A7A9FC875}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E38481A4-811A-44B3-A19A-15B2847834B1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E3875C05-A7A9-420F-95B8-BDD55E701230}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E3A64025-00B2-4049-96F6-7C638A86D89C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E3B8B757-C763-4BDE-A5C1-5A73F2B79E2A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E3BE058E-3534-49BB-8678-66C4323E56AD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E3BEC1B0-227F-4735-AB1B-081A077E585E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E3C456B8-5A4A-461C-ACAC-C06D484AD372}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E48B176B-3FD2-4055-BDEE-47D655FFB35D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E4D49FBC-0420-4BA0-8EF8-D08D8AE2912A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E5023511-754D-45DB-8BA5-308809833F3A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E52552EE-B87B-4E23-BC40-0DA7427FD47C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E53E2BF4-DEBA-445B-B450-84C922772AF0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E53EEE2B-DB1A-411A-8FB8-BE31E5821AA3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E5472050-AD94-4957-A2EE-66B5E4D2087F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E58C09CB-1ADB-4382-A37B-E39AE21E16EE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E5A9951D-E25D-4B90-A7A2-BDF47C6D454B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E5BF979E-4BAD-4B49-8768-490149962B5D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E5DC4A8C-1167-4949-A9B0-AD74213A80CA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E5E5FE1E-78A5-4D12-A449-CE0328FCDA7F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E5F2BA79-EE98-4819-A6B4-41F6ABCE38E0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E60D2F9E-AFFD-47F5-8D98-FA4062E92227}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E6102625-B1FE-4FC9-9725-D4F905686D0B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E62134AF-B305-42A3-8940-32F8F5C78DAE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E6A28737-7F0F-4154-92E7-7E2BCFF9FD9F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E6B9A9C5-2BF9-4A77-BCE7-C7F620113E4E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E6CA4E84-D146-424B-A9FB-9B5559698CE6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E6CAEA9B-8F8C-4247-8B86-46730B19937F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E6D98A49-53D4-465D-8456-B7F6114CD8A3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E6DDBFCB-AE1A-4E09-8CD9-53855316F231}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E6F60094-1ACA-4A0A-9D33-15D278125765}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E71D2A58-AD3F-43A1-BA0F-F63A91B85657}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E7287810-097C-4426-8C80-FE34181130E6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E7287827-B9D4-4330-9B78-82D6D3F6346B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E72916DF-F694-42A5-A5F8-79ECBFB2989C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E72E6EF4-9F2F-4195-9432-0A0D4EDD2690}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E74D2175-23D5-4EF7-9F11-8014B90802CB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E772BB97-6373-4B4B-AEB4-9244C8E09D53}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E779C01C-4BEE-4756-89A8-B371BEE1016A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E77D1AD0-8E9A-4974-82A5-B6D408834844}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E8641577-39F3-4F05-824A-7156C2785EAA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E877E4F2-EE26-491A-8CE1-F7D9C6F6D07F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E87F77AB-B12C-4816-8952-B8E243B3F473}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E8A494EC-11ED-4410-9DEA-3C92DC5D4B4B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E8BDA362-A36C-4BA6-9DFE-3A855544F837}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E8E5D007-4214-495F-9344-DA6AE403DB2C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E8E6D5E1-CBCF-42AD-9B8E-2144887D189F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E8E97903-120E-43CC-9776-8040E0A292AA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E8EBB41A-FB19-4A5F-9377-29B95E17ABA8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E90E6B81-A3FD-4766-AC81-1D8BEBC18280}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E920EECE-35C7-4CA2-BEB8-5A84E3108EF5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E922CBA8-FF4D-4DD7-A663-A9ED277C58EE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E924EAEB-5E25-4E9E-B552-08B0579E0342}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E9314E70-1EFA-4666-8E96-561C4F43648C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E9331D2A-E988-4DF6-A4E5-5134129B3179}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E938CE71-079B-4D90-8320-5CF3028429F2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E94512FE-F756-42AE-8DB9-D1D2EBB64FA2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E962C94D-52DE-4625-8696-338C49A49C24}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E97B5815-7627-4912-82A1-4DB862D06D7D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E99F8322-4DFA-4621-AE94-3030B3811223}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{E9E7E619-932B-454C-A882-C3442E4B7197}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EA34B0E3-2004-4E03-8CE2-B4FC1C728544}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EA409D01-605E-4892-ADD4-DD3FB98EAE88}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EA48F5DB-FFE6-42B3-9235-A55BB160175C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EA55292B-D9D1-4612-A08D-B8FEB302AF78}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EA7BD742-BEB2-4F80-962A-DAAA6A0314D5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EA85EFC1-A8E7-4CA4-83E0-EC523948DB58}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EA877330-7BFD-4538-BBBD-CB88CFFED2F1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EA88D692-D14D-4D7B-9360-66277A81A4D2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EA8F47E1-0D8F-4F2A-AC8E-76460E3AF939}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EA9CF87A-630E-45A3-803A-49FB43E7CF00}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EAA6C5DB-C2DD-417A-AB7C-9651A866F4A4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EAAF80F9-4428-442F-A8C2-D206168F6583}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EABC36B1-C386-41FA-94C4-9A351D1A81BD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EAC150CB-391C-4EAE-9B45-0DA61AB7A1F6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EAC37368-0F8A-47F2-9E52-1D363E48CAE9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EACA20D1-1FEF-4E0E-8865-117B3B10F97C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EAD32BA4-CC5B-4719-A278-241245D6CF1E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EB20F0BC-6CBD-4329-AA72-FEE87B18982B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EB289164-EE15-4774-9F0C-71AD35DC3628}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EB47FC43-95F4-488A-9223-98784C115AC4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EB5DBBC5-E666-4220-9B1D-079004872F26}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EBE18191-B498-4980-8CA6-979B3412AE41}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EBFC8CF4-75BA-40B5-804A-AA28196006BC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EBFDAEB1-EFFE-42A4-A6F4-8F3739585809}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EC0344C3-70F2-4733-8D42-97EFA02B773F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EC05C19E-684F-49F3-AF89-F685FC5C1FE7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EC08DAAC-16AA-46BE-BC87-0CAFE18DF1BD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EC2DA134-0AB8-44BC-84B6-F240477CD63F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EC31AEBB-9B9F-4196-A437-00AFF12C67E3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EC3ACE9C-51C2-48C9-AE69-E7494EA9C2C2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EC43AA00-F464-4BFA-8C2E-988A9F7F85BF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EC440A98-C933-482F-B2EC-3DAD48223C49}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EC648F8C-F2DE-440F-8A75-CBFEDDFAFA28}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EC6BE8D3-8371-4BA1-8E6C-89DA7F61DE63}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EC6D00AE-4689-47A7-9C1E-04DFB9254849}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ECC354E2-433F-4D71-9C18-BBD2651C4741}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ECE51938-9831-4DC1-B2FE-CCFA4A8A2783}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ECF6971A-4900-48EA-9E2B-660E9AFA368B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ED00D88D-39B6-4AFF-A31D-21704D53F7DA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ED0926E8-8A76-4450-B13B-0087294E2C78}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ED200DD8-5189-4C60-BEBC-1B7E8292BB10}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ED428599-4276-4F11-A89F-B45568519039}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ED604CEA-4B3E-4373-A0D0-980C92D0A187}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ED611083-72BC-4E86-B78B-CE36F1CE59A1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{ED88B9C0-D55F-4971-B84D-683BFE936A66}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EDB377A0-9324-4337-9F15-83F97CBE2F8A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EDD3DE6F-CB6A-4A2F-A693-51CF6C390D06}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EDE688D6-33DE-41B1-ADC4-6557D8A9247A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EE00A321-F23A-4C96-B852-C53657B035C1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EE0C21FB-89AD-451B-BE47-A3A785D42638}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EE6A73CD-A817-4C83-B616-84FF4C5CCBBE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EE9AE912-EAED-49E2-8788-5681852010F7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EEA7DAF2-ADD8-4B10-98AA-2DD5CBF0D783}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EEB0BB74-F88E-4AB4-8987-22F8AEB60B35}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EEB24ECD-77C1-4EAC-BEC1-81CF2296AC7E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EEC12D30-7CC5-4445-A279-6D3A16558838}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EEC77AEA-3BB5-4F89-AC54-E1C6BD684CF3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EED33B0E-E842-4B52-B4DF-B70C4FCC3EDB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EEEF785C-7A81-44E7-8D1A-A9A104F0AB99}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EF028D1F-2FB6-4957-884E-E973DF5B79EF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EF20F0BD-1F6A-455C-B161-F06C13F80B52}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EF26C4C6-C699-40FC-8A69-D342A317EB26}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EF344548-1372-4583-AEBB-EED30769D4B5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EF457D45-032D-4E2C-A716-FA094651DEF0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EF4E9735-E35A-4934-A98B-75C557C42590}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EF5C3082-5C79-4F37-8516-3EE242CE4F71}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EF5DE497-F1C5-45BC-A93A-948C0B16CD27}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EF60A414-908D-4B63-B012-7AB3DE5086F7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EF7F7FC6-384D-4809-BC39-6CD07732C24B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EF88EA81-4D2E-4181-9110-9B3135469D82}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EFB49799-3DF7-4459-9E73-BC0AC761D964}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EFB61024-0E57-4088-BB94-A4432B5D7C73}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{EFF276F0-583A-405D-9CA9-AF5D9C5F9733}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F02D4032-4C28-4E6B-B58E-63FFC384EB46}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F07DB768-A210-4A45-8857-BEA7CD0EB5A0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F07FFFC7-3EB6-4580-8B18-F5BDCE8ECD27}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F09A9275-380B-4E4D-98D9-B265802A745C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F09D74F8-807B-4FA3-A41F-9FF38605DEFB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F0A2F217-39A2-4857-A28B-58AA2DC8EC55}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F0C0AC13-03AE-4B5A-97ED-8B8ADC52206C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F0CC79AB-905B-488D-8E46-F803434505E5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F0E4A01C-F7FB-4630-9CA0-B75285E36743}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F11DDA0D-1A8F-4A5D-8B10-CF66AF5E8779}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F122D6FD-B4DB-4CB3-A06F-82CCE5C44AFA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F189A492-C0FB-4D86-A69C-FCD3B7A47EFB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F199F7E9-89D6-4C11-9E9C-B880A5A13C3E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F1C06A61-86F3-49FE-A5D5-FB2025931E92}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F1C0DA66-E9D0-4594-802B-64A9EF0AE3D3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F1CFF83F-C0C1-4097-90BF-AD5A08CEFBB8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F1EB2624-A66F-44C2-BAB0-848BA2321FC9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F2002C07-3816-4BFC-A708-F34FAFB50CB7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F20E84DC-755B-4E12-8C9D-67ED1EDA4059}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F21EB959-9E64-4A02-9AFE-A25B98D4C33E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F21F50CA-AE35-4FA1-9E80-9CEB97A04791}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F25F4AC3-7F01-4A42-9B1F-C9633DA97F7C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F274602E-5892-4DDA-BEE3-22264251B417}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F2797A33-32BF-4D86-B8FD-CEAB3F6B56A3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F2B9E4CE-B55F-4889-9E6F-639BD9D09508}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F2C0AEA5-8B22-455E-B3D4-CF823D29BA1E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F2C7AE2E-FEBA-454E-B767-95C9D28B64FE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F2D90F3F-9449-466A-82A3-90AF20EB413A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F3013344-6947-4158-9446-A81C37A9F35D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F3032270-EA6A-4BB8-9C19-2EFB305CA970}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F3048F17-CBA2-4718-96C9-CC39039D587F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F304979A-85D0-4162-B570-B67C59C5A98C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F32F6915-F2D4-4637-9237-A02717628264}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F338CDD9-D9B9-4B2B-94A3-C1166C154504}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F35FAEB9-4B59-4942-BE38-D8AD22048377}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F36604BF-E7BF-4476-8D82-D2C3CAB93FF5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F369C6CD-665F-415C-A484-7847E197977C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F387E8A5-5957-4690-9060-DE3B51B56EFF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F39053F4-229A-4F8E-A80B-D882996CEC22}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F3A38305-3F7D-4933-B88F-9E27235D564E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F3D6708D-CA7A-4F3D-96EA-4403A7F97456}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F3DB98AB-FA42-489A-A9B0-9B26664742C2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F3E37E50-29C2-4FDD-9152-05C8CB8326F2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F3EFD7C7-DB56-4975-ACCB-9083F87739A5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F3FE9F0C-A4F4-4D58-9BBD-CD06BE7B0CEC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F40AE3AC-8934-4E87-8CDA-9553B754BD37}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F4135581-EBB2-46AA-BCBF-CCA2BE56E0BA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F42C36C0-DBCA-469B-A1E3-C76AA95D22BD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F46A61A9-6AD7-4153-AC64-66A0C8188E8F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F46DA7C9-ED81-46ED-B0A8-4FCFE6954335}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F4793621-9375-4DEC-AFD8-09011221053D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F4842FFD-DEC6-4E80-80B0-9C8ECDE75C15}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F4A81516-6121-40D5-B64D-0E3C1F00FAAB}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F4AEC70E-A15E-46C6-887E-7DB1D5C9BF38}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F4C0233E-5C1C-4940-9C84-746A7C46C566}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F4CEAFE4-BAC2-44E4-89B6-73F575C74CC3}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F5017354-95D3-4F03-A7CC-6A48CD1A7DA2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F58B819C-CD8F-4708-8F8F-F661BD19B3AA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F5BA27A6-1E38-4DC3-A405-1B59DAAD65D9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F5C6257E-F2D8-41C3-A8BB-1114A4B6EFE2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F5D1FF50-363D-43A6-8E00-77D5EB247859}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F5DB5D83-B1F9-43FE-907D-C0294F9C63F5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F606B46F-9186-49DE-9AA8-8738A395DD1C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F6478D30-EF87-4880-8FB5-CB7C6090D453}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F65B430A-D759-458B-985F-DEE61431ECFD}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F67A8509-88B5-49E2-B889-CF362B2338A0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F6965525-7D74-4688-86A3-1C23DF1A324A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F699BBC6-F945-4FBA-866A-BB67BBFDFA14}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F6D3B1D7-95BC-4E4C-B9CD-76484D378F4A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F6F24015-6127-4D03-BA07-B5884823DB7D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F7239278-5E1A-4444-BBF6-4BA121290F9C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F73C0285-0FBD-4D6C-A02A-7E7661BB54D9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F744B0BC-EB5F-4BAC-8AB2-069890AB50DA}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F7A24F2A-48C3-4518-99ED-15E37C190A19}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F801B385-9BE8-45C4-9F54-2B09E5F3F9CF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F80F5E4E-08D5-4AEA-A4D1-8CB4BE261AE9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F8336FB3-BF77-4666-961D-FD9505B0F960}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F8456330-EBCD-4994-A055-E7428D49F605}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F8468E32-60DA-4A42-976F-9C35E088D1AE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F84C459E-6713-4CF2-B8D9-43F1DE17EA63}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F85A344D-A91E-4435-8F87-DCB1189E955A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F85CEE08-D4DC-4578-A53F-6A0FB4E2DA0C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F873AA04-0234-4A80-813D-530E1ED0144E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F895EF82-2107-43ED-9343-ACCE5522C7C8}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F8A8AFF0-7D26-4E9D-A163-7998379E04D4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F8CB9D3C-DC14-4B7A-879F-9AF850CA0AD5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F90641C8-70B6-478F-9565-E2BB65E5B845}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F90B2DD8-3B27-4F6E-BCAD-1DA9891F9D40}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F9148425-F87E-4C01-B618-3E26836FB00D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F9682B0A-33FA-44D4-8D05-47285EB7F255}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F97EB5B7-4C28-4633-AFF4-36B49511F54D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F99E4071-2175-4A93-A40D-A6725033179E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F9AFC64F-7056-4352-9F7F-AF7423B5206F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F9B4598A-21F7-4E61-AC36-923BF6382785}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F9C30141-4BBD-4F5B-A0AB-47B7A8252ACF}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F9CE8F4B-0DC5-4243-A040-E8F9CB6F7761}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F9D1628C-EA11-4F8E-89D6-1A39F032B3E6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{F9EAF23D-E8DD-4D4F-9E91-E15B261199FE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FA39DDB5-9A94-4883-98DD-3E75EA88230F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FA3C1F20-7A1B-42A7-89C0-440C644AE471}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FA3DB66D-5E40-4560-BBB5-CDF646EFB04F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FA78C5DB-AC3C-4FE7-A07C-8026CCA922E7}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FA91174A-5B16-42F1-83A6-3ABCABBB3654}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FAA5712C-022B-4DD1-BAB4-38AF6DD1158E}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FAE1AC78-049D-43C0-8CA7-543092AD16E0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FAE9F2C8-033F-42D6-B94D-7C3B3C4CACB1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FB5C1F27-D3B6-41C2-A59A-D389C7F541D0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FB5C6F2D-6BEC-4132-967C-A37C76CA2E0B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FB7C083C-4B55-4522-9C7A-8DD4AF2ABA3A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FBA50F20-6899-42A2-8A19-6CCBCBBFBD2A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FBCF18E7-5999-4677-BB66-DFB5D2C0943B}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FBE66E71-A732-40A4-B81C-F0674B8EE09A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FC135080-BDFC-44EC-BC85-9A99E6F53063}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FC319F31-97F7-4361-9498-12A2746749B0}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FC489FC5-DE4C-4261-92FE-12E3DAF3CBB9}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FCA203A9-5D52-4B6C-B838-0F636D343A1A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FD38C15D-5DB7-4B95-909A-B824CE780028}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FD5CF711-3859-4736-8ED5-40EA118B10CE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FD79DA52-BEE5-451E-B66D-086F1D0C0169}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FD9010E9-BD6A-4F9A-973B-340E65113809}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FD984E71-64E0-4079-931C-E0486FFEBB29}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FDA99DAA-8A31-4D05-A04F-C96C1FB13A1C}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FDAEC957-26D4-409D-BD37-5895BD254972}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FDB16D0E-8168-48C7-AB35-027A57744FA6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FDB242CF-688D-4AA4-BE12-13A704C9EC2A}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FDC72FD0-636E-4766-9CAD-98727505B6F6}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FDD34ABC-63CE-410F-8537-ED7E1AED9CBE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FDFB09BF-0253-4B11-B9F8-451D7865F2D4}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FE36FBC6-C75A-4790-B5E7-1D21412826F1}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FE5F692D-8CCB-4E18-B715-1427F99A17CE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FE6B6050-02DE-4B93-A15B-39D5B6E08135}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FE828769-184A-4D91-A54A-BFFD2E199A6F}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FEB73B10-7C10-4257-93FA-B0EF0CAEF853}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FEBFDAA1-7664-4A27-B112-1109B753F598}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FEE16106-6971-44E5-8F34-6684041290DC}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FF0D9145-01B5-4D37-82EF-E937E12070B5}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FF1B399A-A548-422D-958F-3A457C1A0079}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FF3C05F5-D61C-4B99-A833-2010EB875C80}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FF55A1A4-85B8-42FC-BBA1-E56C27A39605}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FF79A7F1-046F-4FEA-9DC9-387A3D39FC1D}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FF7AEB65-4EDC-438A-9DC1-065FB571A0CE}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FFB3F75A-E5CE-4F7F-BCBD-6F204985A730}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FFE73812-059D-4F8F-9A9D-C1FE53CE60F2}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FFEBD3D4-8D53-4B61-82E1-FD0648E5B466}
Successfully deleted: [Empty Folder] C:\Users\Ahrendt\appdata\local\{FFF35E42-A129-4E17-8B7C-34A0AF5FD7DC}



~~~ Chrome


[C:\Users\Ahrendt\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Ahrendt\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Ahrendt\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Ahrendt\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 25.06.2015 at  1:16:07,98
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Joahpi 25.06.2015 00:26

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:24-06-2015
Ran by Ahrendt (administrator) on AHRENDT-PC on 25-06-2015 01:16:54
Running from C:\Users\Ahrendt\Desktop
Loaded Profiles: Ahrendt (Available Profiles: Ahrendt & Jonas & Franzi & Kathi & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9608224 2009-11-17] (Realtek Semiconductor)
HKLM\...\Run: [OOTag] => C:\Program Files (x86)\Packard Bell\OOBEOffer\ootag.exe [13856 2010-02-23] (Microsoft)
HKLM\...\Run: [VX3000] => C:\Windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-25] (CANON INC.)
HKLM-x32\...\Run: [OOTag] => C:\Program Files (x86)\Packard Bell\OOBEOffer\OOTag.exe [13856 2010-02-23] (Microsoft)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Hotkey Utility] => C:\Program Files (x86)\Packard Bell\Hotkey Utility\HotkeyUtility.exe [563744 2010-03-26] ()
HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [588648 2009-07-25] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LifeCam] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1213848 2010-09-14] (CANON INC.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [730416 2015-06-10] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152544 2012-12-12] (Apple Inc.)
HKLM-x32\...\Run: [FreePDF Assistant] => C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [130864 2015-05-21] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2937528 2010-11-21] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [AutoStartNPSAgent] => C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [95576 2010-07-04] (Samsung Electronics Co., Ltd.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [Amazon Music] => C:\Users\Ahrendt\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886784 2015-05-07] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk [2010-11-21]
ShortcutTarget: GamersFirst LIVE!.lnk -> C:\Program Files (x86)\GamersFirst\LIVE!\Live.exe (GamersFirst)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
ShellIconOverlayIdentifiers: [Symbol-Overlay-Steuerprogramm für AutoCAD Digitale Signaturen] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2010-02-10] (Autodesk, Inc.)
GroupPolicyUsers\S-1-5-21-3928908445-2049478909-3784465887-1004\User: Group Policy Restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-3928908445-2049478909-3784465887-1003\User: Group Policy Restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland ? mit Hotmail Nachfolger Outlook und Messenger Skype
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\Software\Microsoft\Internet Explorer\Main,Start Page = Kaminöfen - Heizsysteme - Schornsteine - Ausstellung - Holm - Wedel - Hamburg - Wärmequelle AS
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)
BHO-x32: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2010-11-08] (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-03] (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18] (Oracle Corporation)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2010-11-08] (CANON INC.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
DPF: HKLM-x32 {73888E2B-FF04-416C-8847-984D7FC4507F} hxxp://eggerstedt.dyndns.org:1030/RtspVaPgDecNew2.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Tcpip\Parameters: [DhcpNameServer] 192.168.179.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2012-10-31] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-14] (CANON INC.)
FF Plugin-x32: @gamersfirst.com/LiveLauncher -> C:\Program Files (x86)\GamersFirst\LIVE!\nplivelauncher.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-12-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-12-18] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-01-22]
CHR Extension: (Google Search) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-01-22]
CHR Extension: (Avira Browser Safety) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]
CHR Extension: (Google Wallet) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28]
CHR Extension: (Gmail) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-01-22]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Locked "2b5b93e885bc6a00" service could not be unlocked. <===== ATTENTION

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [827184 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [450808 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [450808 2015-06-10] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1188360 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [208632 2015-05-21] (Avira Operations GmbH & Co. KG)
S2 avmike; C:\Program Files\FRITZ!Fernzugang\avmike.exe [336248 2012-02-02] (AVM Berlin)
S2 certsrv; C:\Program Files\FRITZ!Fernzugang\certsrv.exe [143736 2011-10-31] (AVM Berlin)
S3 GameConsoleService; C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe [238328 2009-10-10] (WildTangent, Inc.)
S2 Greg_Service; C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S2 nwtsrv; C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe [189304 2011-10-31] (AVM Berlin)
S2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
S2 StarMoney 8.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
S2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
S2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
U2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

U5 2b5b93e885bc6a00; C:\Windows\System32\Drivers\2b5b93e885bc6a00.sys [88504 2015-06-19] () <===== ATTENTION Necurs Rootkit?
S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [21120 2011-08-09] (SafeNet Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 AsyncMac; C:\Windows\System32\DRIVERS\asyncmac.sys [23040 2009-07-14] () [File not signed]
R0 atapi; C:\Windows\System32\drivers\atapi.sys [24128 2009-07-14] () [File not signed]
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [153256 2015-06-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132656 2015-06-10] () [File not signed]
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] () [File not signed]
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-05] () [File not signed]
S3 b06bdrv; C:\Windows\system32\DRIVERS\bxvbda.sys [468480 2009-06-10] () [File not signed]
R3 b57nd60a; C:\Windows\System32\DRIVERS\b57nd60a.sys [321064 2007-11-15] () [File not signed]
U5 BattC; C:\Windows\System32\Drivers\BattC.sys [28240 2009-07-14] () [File not signed]
R1 Beep; C:\Windows\System32\Drivers\Beep.sys [6656 2009-07-14] ()
R1 blbdrive; C:\Windows\system32\DRIVERS\blbdrive.sys [45056 2009-07-14] () [File not signed]
R3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [90624 2011-02-23] () [File not signed]
S3 BrFiltLo; C:\Windows\system32\DRIVERS\BrFiltLo.sys [18432 2009-06-10] () [File not signed]
S3 BrFiltUp; C:\Windows\system32\DRIVERS\BrFiltUp.sys [8704 2009-06-10] () [File not signed]
S3 BridgeMP; C:\Windows\System32\DRIVERS\bridge.sys [95232 2009-07-14] () [File not signed]
S3 Brserid; C:\Windows\System32\Drivers\Brserid.sys [286720 2009-07-14] () [File not signed]
S3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [47104 2009-06-10] () [File not signed]
S3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [14976 2009-06-10] () [File not signed]
S3 BrUsbSer; C:\Windows\System32\Drivers\BrUsbSer.sys [14720 2009-06-10] () [File not signed]
S3 BTHMODEM; C:\Windows\system32\DRIVERS\bthmodem.sys [72192 2009-07-14] () [File not signed]
S4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [92160 2009-07-14] () [File not signed]
R1 cdrom; C:\Windows\System32\DRIVERS\cdrom.sys [147456 2010-11-20] () [File not signed]
S3 circlass; C:\Windows\system32\DRIVERS\circlass.sys [45568 2009-07-14] () [File not signed]
R0 CLFS; C:\Windows\System32\CLFS.sys [367552 2015-03-04] () [File not signed]
S3 CmBatt; C:\Windows\system32\DRIVERS\CmBatt.sys [17664 2009-07-14] () [File not signed]
S3 cmdide; C:\Windows\system32\drivers\cmdide.sys [17488 2009-07-14] () [File not signed]
R0 CNG; C:\Windows\System32\Drivers\cng.sys [459336 2015-01-31] () [File not signed]
S3 Compbatt; C:\Windows\system32\DRIVERS\compbatt.sys [21584 2009-07-14] () [File not signed]
R3 CompositeBus; C:\Windows\system32\drivers\CompositeBus.sys [38912 2010-11-20] () [File not signed]
S4 crcdisk; C:\Windows\system32\DRIVERS\crcdisk.sys [24144 2009-07-14] () [File not signed]
R1 DfsC; C:\Windows\System32\Drivers\dfsc.sys [102400 2010-11-20] () [File not signed]
R1 discache; C:\Windows\System32\drivers\discache.sys [40448 2009-07-14] () [File not signed]
R0 Disk; C:\Windows\System32\DRIVERS\disk.sys [73280 2009-07-14] () [File not signed]
S3 drmkaud; C:\Windows\system32\drivers\drmkaud.sys [5632 2009-07-14] () [File not signed]
R3 DXGKrnl; C:\Windows\System32\drivers\dxgkrnl.sys [985536 2014-06-16] () [File not signed]
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] () [File not signed]
S3 elxstor; C:\Windows\system32\DRIVERS\elxstor.sys [530496 2009-07-14] () [File not signed]
S3 ErrDev; C:\Windows\system32\drivers\errdev.sys [9728 2009-07-14] () [File not signed]
S3 exfat; C:\Windows\System32\Drivers\exfat.sys [195072 2009-07-14] () [File not signed]
R3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [204800 2009-07-14] () [File not signed]
S3 fdc; C:\Windows\system32\DRIVERS\fdc.sys [29696 2009-07-14] () [File not signed]
R0 FileInfo; C:\Windows\System32\drivers\fileinfo.sys [70224 2009-07-14] () [File not signed]
S3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [34304 2009-07-14] () [File not signed]
S3 flpydisk; C:\Windows\system32\DRIVERS\flpydisk.sys [24576 2009-07-14] () [File not signed]
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [289664 2010-11-20] () [File not signed]
S3 FsDepends; C:\Windows\System32\drivers\FsDepends.sys [55376 2009-07-14] () [File not signed]
S3 fssfltr; C:\Windows\System32\DRIVERS\fssfltr.sys [48488 2012-03-08] () [File not signed]
U0 Fs_Rec; C:\Windows\System32\Drivers\Fs_Rec.sys [23408 2012-03-01] () [File not signed]
R0 fvevol; C:\Windows\System32\DRIVERS\fvevol.sys [223752 2013-01-24] () [File not signed]
S3 gagp30kx; C:\Windows\system32\DRIVERS\gagp30kx.sys [65088 2009-07-14] () [File not signed]
R3 GEARAspiWDM; C:\Windows\System32\DRIVERS\GEARAspiWDM.sys [33240 2012-08-21] () [File not signed]
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [321536 2011-10-07] () [File not signed]
S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232 2009-06-10] () [File not signed]
S3 HdAudAddService; C:\Windows\system32\drivers\HdAudio.sys [350208 2010-11-20] () [File not signed]
R3 HDAudBus; C:\Windows\system32\drivers\HDAudBus.sys [122368 2010-11-20] () [File not signed]
S3 HidBatt; C:\Windows\system32\DRIVERS\HidBatt.sys [26624 2009-07-14] () [File not signed]
S3 HidBth; C:\Windows\system32\DRIVERS\hidbth.sys [100864 2009-07-14] () [File not signed]
S3 HidIr; C:\Windows\system32\DRIVERS\hidir.sys [46592 2009-07-14] () [File not signed]
R3 HidUsb; C:\Windows\System32\DRIVERS\hidusb.sys [30208 2010-11-20] () [File not signed]
S3 HpSAMD; C:\Windows\system32\drivers\HpSAMD.sys [78720 2010-11-20] () [File not signed]
R3 HTTP; C:\Windows\System32\drivers\HTTP.sys [754688 2015-02-25] () [File not signed]
R0 hwpolicy; C:\Windows\System32\drivers\hwpolicy.sys [14720 2010-11-20] () [File not signed]
S3 i8042prt; C:\Windows\system32\drivers\i8042prt.sys [105472 2009-07-14] () [File not signed]
S3 iaStorV; C:\Windows\system32\drivers\iaStorV.sys [410496 2011-03-11] () [File not signed]
S3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [6108416 2009-06-10] () [File not signed]
S3 iirsp; C:\Windows\system32\DRIVERS\iirsp.sys [44112 2009-07-14] () [File not signed]
R3 IntcAzAudAddService; C:\Windows\System32\drivers\RTKVHD64.sys [2037408 2009-11-17] () [File not signed]
R0 intelide; C:\Windows\System32\drivers\intelide.sys [16960 2009-07-14] () [File not signed]
R3 intelppm; C:\Windows\System32\DRIVERS\intelppm.sys [62464 2009-07-14] () [File not signed]
S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [82944 2010-11-20] () [File not signed]
S3 IPMIDRV; C:\Windows\system32\drivers\IPMIDrv.sys [78848 2010-11-20] () [File not signed]
S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [116224 2009-07-14] () [File not signed]
S3 IRENUM; C:\Windows\System32\drivers\irenum.sys [17920 2009-07-14] () [File not signed]
S3 isapnp; C:\Windows\system32\drivers\isapnp.sys [20544 2009-07-14] () [File not signed]
S3 iScsiPrt; C:\Windows\system32\drivers\msiscsi.sys [274880 2014-02-04] () [File not signed]
R3 kbdclass; C:\Windows\System32\DRIVERS\kbdclass.sys [50768 2009-07-14] () [File not signed]
R3 kbdhid; C:\Windows\System32\DRIVERS\kbdhid.sys [33280 2010-11-20] () [File not signed]
R0 KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [95680 2015-05-25] () [File not signed]
R0 KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [155584 2015-05-25] () [File not signed]
R3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [20992 2009-07-14] () [File not signed]
R2 lltdio; C:\Windows\System32\DRIVERS\lltdio.sys [60928 2009-07-14] () [File not signed]
S3 LSI_FC; C:\Windows\system32\DRIVERS\lsi_fc.sys [114752 2009-07-14] () [File not signed]
S3 LSI_SAS; C:\Windows\system32\DRIVERS\lsi_sas.sys [106560 2009-07-14] () [File not signed]
S3 LSI_SAS2; C:\Windows\system32\DRIVERS\lsi_sas2.sys [65600 2009-07-14] () [File not signed]
S3 LSI_SCSI; C:\Windows\system32\DRIVERS\lsi_scsi.sys [115776 2009-07-14] () [File not signed]
R2 luafv; C:\Windows\system32\drivers\luafv.sys [113152 2009-07-14] () [File not signed]
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
S3 megasas; C:\Windows\system32\DRIVERS\megasas.sys [35392 2009-07-14] () [File not signed]
S3 MegaSR; C:\Windows\system32\DRIVERS\MegaSR.sys [284736 2009-07-14] () [File not signed]
S3 Modem; C:\Windows\System32\drivers\modem.sys [40448 2009-07-14] () [File not signed]
R3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-14] () [File not signed]
R3 mouclass; C:\Windows\System32\DRIVERS\mouclass.sys [49216 2009-07-14] () [File not signed]
R3 mouhid; C:\Windows\System32\DRIVERS\mouhid.sys [31232 2009-07-14] () [File not signed]
R0 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [94656 2015-02-03] () [File not signed]
S3 mpio; C:\Windows\system32\drivers\mpio.sys [155008 2010-11-20] () [File not signed]
R3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [77312 2009-07-14] () [File not signed]
S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [141312 2014-12-19] () [File not signed]
R3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [158208 2011-04-27] () [File not signed]
R3 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [288768 2011-07-09] () [File not signed]
R3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [128000 2011-04-27] () [File not signed]
S3 msahci; C:\Windows\system32\drivers\msahci.sys [31104 2010-11-20] () [File not signed]
S3 msdsm; C:\Windows\system32\drivers\msdsm.sys [140672 2010-11-20] () [File not signed]
R1 Msfs; C:\Windows\System32\Drivers\Msfs.sys [26112 2009-07-14] ()
S3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [8192 2009-07-14] () [File not signed]
R0 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [15424 2009-07-14] () [File not signed]
S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [11136 2009-07-14] () [File not signed]
S3 MSPCLOCK; C:\Windows\System32\drivers\MSPCLOCK.sys [7168 2009-07-14] () [File not signed]
S3 MSPQM; C:\Windows\System32\drivers\MSPQM.sys [6784 2009-07-14] () [File not signed]
S3 MsRPC; C:\Windows\System32\Drivers\MsRPC.sys [366976 2010-11-20] ()
R1 mssmbios; C:\Windows\system32\drivers\mssmbios.sys [32320 2009-07-14] () [File not signed]
S3 MSTEE; C:\Windows\System32\drivers\MSTEE.sys [8064 2009-07-14] () [File not signed]
S3 MTConfig; C:\Windows\system32\DRIVERS\MTConfig.sys [15360 2009-07-14] () [File not signed]
R0 Mup; C:\Windows\System32\Drivers\mup.sys [60496 2009-07-14] () [File not signed]
R3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [318976 2009-07-14] () [File not signed]
R0 NDIS; C:\Windows\System32\drivers\ndis.sys [950128 2012-08-22] () [File not signed]
S3 NdisCap; C:\Windows\System32\DRIVERS\ndiscap.sys [35328 2009-07-14] () [File not signed]
R3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [24064 2009-07-14] () [File not signed]
R3 Ndisuio; C:\Windows\System32\DRIVERS\ndisuio.sys [56832 2010-11-20] () [File not signed]
R3 NdisWan; C:\Windows\System32\DRIVERS\ndiswan.sys [164352 2010-11-20] () [File not signed]
R3 NDProxy; C:\Windows\System32\Drivers\NDProxy.sys [57856 2010-11-20] ()
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [22528 2012-03-26] () [File not signed]
R1 NetBIOS; C:\Windows\System32\DRIVERS\netbios.sys [44544 2009-07-14] () [File not signed]
R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [261632 2010-11-20] () [File not signed]
S3 nfrd960; C:\Windows\system32\DRIVERS\nfrd960.sys [51264 2009-07-14] () [File not signed]
R1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [44032 2009-07-14] ()
R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [24576 2009-07-14] () [File not signed]
R3 Ntfs; C:\Windows\System32\Drivers\Ntfs.sys [1684928 2014-01-24] ()
R1 Null; C:\Windows\System32\Drivers\Null.sys [6144 2009-07-14] () [File not signed]
R3 NVHDA; C:\Windows\System32\drivers\nvhda64v.sys [84512 2009-08-21] () [File not signed]
R3 nvlddmkm; C:\Windows\System32\DRIVERS\nvlddmkm.sys [11036448 2013-02-26] () [File not signed]
S3 nvraid; C:\Windows\system32\drivers\nvraid.sys [148352 2011-03-11] () [File not signed]
S3 nvstor; C:\Windows\system32\drivers\nvstor.sys [166272 2011-03-11] () [File not signed]
S3 nv_agp; C:\Windows\system32\drivers\nv_agp.sys [122960 2009-07-14] () [File not signed]
R3 NWIM; C:\Windows\System32\DRIVERS\avmnwim.sys [412024 2011-07-05] () [File not signed]
S3 ohci1394; C:\Windows\system32\drivers\ohci1394.sys [72832 2009-07-14] () [File not signed]
R3 Parport; C:\Windows\System32\DRIVERS\parport.sys [97280 2009-07-14] () [File not signed]
R0 partmgr; C:\Windows\System32\drivers\partmgr.sys [75120 2012-03-17] () [File not signed]
R0 pci; C:\Windows\System32\drivers\pci.sys [184704 2010-11-20] () [File not signed]
S3 pciide; C:\Windows\system32\drivers\pciide.sys [12352 2009-07-14] () [File not signed]
S3 pcmcia; C:\Windows\system32\DRIVERS\pcmcia.sys [220752 2009-07-14] () [File not signed]
R0 pcw; C:\Windows\System32\drivers\pcw.sys [50768 2009-07-14] () [File not signed]
R2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [663552 2015-02-03] () [File not signed]
R3 PptpMiniport; C:\Windows\System32\DRIVERS\raspptp.sys [111104 2010-11-20] () [File not signed]
S3 Processor; C:\Windows\system32\DRIVERS\processr.sys [60416 2009-07-14] () [File not signed]
R1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-20] () [File not signed]
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [55024 2008-06-16] () [File not signed]
S3 ql2300; C:\Windows\system32\DRIVERS\ql2300.sys [1524816 2009-07-14] () [File not signed]
S3 ql40xx; C:\Windows\system32\DRIVERS\ql40xx.sys [128592 2009-07-14] () [File not signed]
S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [46592 2009-07-14] () [File not signed]
S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [14848 2009-07-14] () [File not signed]
R3 RasAgileVpn; C:\Windows\System32\DRIVERS\AgileVpn.sys [60416 2009-07-14] () [File not signed]
R3 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-20] () [File not signed]
R3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [92672 2009-07-14] () [File not signed]
R3 RasSstp; C:\Windows\System32\DRIVERS\rassstp.sys [83968 2009-07-14] () [File not signed]
R1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [309248 2010-11-20] () [File not signed]
S3 rdpbus; C:\Windows\system32\DRIVERS\rdpbus.sys [24064 2009-07-14] () [File not signed]
R1 RDPCDD; C:\Windows\System32\DRIVERS\RDPCDD.sys [7680 2009-07-14] () [File not signed]
R1 RDPENCDD; C:\Windows\System32\drivers\rdpencdd.sys [7680 2009-07-14] () [File not signed]
R1 RDPREFMP; C:\Windows\System32\drivers\rdprefmp.sys [8192 2009-07-14] () [File not signed]
S3 RdpVideoMiniport; C:\Windows\System32\drivers\rdpvideominiport.sys [19456 2012-08-23] () [File not signed]
S3 RDPWD; C:\Windows\System32\Drivers\RDPWD.sys [212480 2014-07-17] ()
R0 rdyboost; C:\Windows\System32\drivers\rdyboost.sys [213888 2010-11-20] () [File not signed]
R2 rspndr; C:\Windows\System32\DRIVERS\rspndr.sys [76800 2009-07-14] () [File not signed]
S3 sbp2port; C:\Windows\system32\drivers\sbp2port.sys [103808 2010-11-20] () [File not signed]
S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [29696 2010-11-20] () [File not signed]
R2 secdrv; C:\Windows\System32\Drivers\secdrv.sys [23040 2009-06-10] ()
R3 Serenum; C:\Windows\System32\DRIVERS\serenum.sys [23552 2009-07-14] () [File not signed]
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] () [File not signed]
S3 sermouse; C:\Windows\system32\DRIVERS\sermouse.sys [26624 2009-07-14] () [File not signed]
S3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [14336 2009-07-14] () [File not signed]
S3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [13824 2009-07-14] () [File not signed]
S3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [14336 2010-11-20] () [File not signed]
S3 sfloppy; C:\Windows\system32\DRIVERS\sfloppy.sys [16896 2009-07-14] () [File not signed]
S3 SiSRaid2; C:\Windows\system32\DRIVERS\SiSRaid2.sys [43584 2009-07-14] () [File not signed]
S3 SiSRaid4; C:\Windows\system32\DRIVERS\sisraid4.sys [80464 2009-07-14] () [File not signed]
S3 Smb; C:\Windows\System32\DRIVERS\smb.sys [93184 2009-07-14] () [File not signed]
S3 SPCP825K; C:\Windows\System32\DRIVERS\SPCP825K.sys [42056 2010-07-19] () [File not signed]
R0 spldr; C:\Windows\System32\Drivers\spldr.sys [19008 2009-07-14] ()
R3 srv; C:\Windows\System32\DRIVERS\srv.sys [467456 2011-04-29] () [File not signed]
R3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [410112 2011-04-29] () [File not signed]
R3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [168448 2011-04-29] () [File not signed]
S3 ssm_bus; C:\Windows\System32\DRIVERS\ssm_bus.sys [136192 2010-04-27] () [File not signed]
S3 ssm_mdfl; C:\Windows\System32\DRIVERS\ssm_mdfl.sys [18944 2010-04-27] () [File not signed]
S3 ssm_mdm; C:\Windows\System32\DRIVERS\ssm_mdm.sys [172032 2010-04-27] () [File not signed]
S3 stexstor; C:\Windows\system32\DRIVERS\stexstor.sys [24656 2009-07-14] () [File not signed]
R3 swenum; C:\Windows\system32\drivers\swenum.sys [12496 2009-07-14] () [File not signed]
R0 Tcpip; C:\Windows\System32\drivers\tcpip.sys [1903552 2014-04-05] () [File not signed]
S3 TCPIP6; C:\Windows\System32\DRIVERS\tcpip.sys [1903552 2014-04-05] () [File not signed]
R2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [45568 2012-10-03] () [File not signed]
S3 TDPIPE; C:\Windows\System32\drivers\tdpipe.sys [15872 2009-07-14] () [File not signed]
S3 TDTCP; C:\Windows\System32\drivers\tdtcp.sys [23552 2012-02-17] () [File not signed]
R1 tdx; C:\Windows\System32\DRIVERS\tdx.sys [119296 2014-11-11] () [File not signed]
R1 TermDD; C:\Windows\system32\drivers\termdd.sys [63360 2010-11-20] () [File not signed]
S3 TFsExDisk; C:\Windows\System32\Drivers\TFsExDisk.sys [16448 2010-06-14] () [File not signed]
S3 tssecsrv; C:\Windows\System32\DRIVERS\tssecsrv.sys [39936 2014-07-17] () [File not signed]
S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [57856 2012-08-23] () [File not signed]
R3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-20] () [File not signed]
S3 uagp35; C:\Windows\system32\DRIVERS\uagp35.sys [64080 2009-07-14] () [File not signed]
S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [328192 2010-11-20] () [File not signed]
S3 uliagpkx; C:\Windows\system32\drivers\uliagpkx.sys [64592 2009-07-14] () [File not signed]
R3 umbus; C:\Windows\system32\drivers\umbus.sys [48640 2010-11-20] () [File not signed]
S3 UmPass; C:\Windows\system32\DRIVERS\umpass.sys [9728 2009-07-14] () [File not signed]
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [53760 2012-09-28] () [File not signed]
S3 usbaudio; C:\Windows\system32\drivers\usbaudio.sys [109824 2013-07-12] () [File not signed]
R3 usbccgp; C:\Windows\System32\DRIVERS\usbccgp.sys [99840 2013-11-27] () [File not signed]
S3 usbcir; C:\Windows\system32\drivers\usbcir.sys [100864 2013-07-12] () [File not signed]
R3 usbehci; C:\Windows\system32\drivers\usbehci.sys [53248 2013-11-27] () [File not signed]
R3 usbhub; C:\Windows\System32\DRIVERS\usbhub.sys [343040 2013-11-27] () [File not signed]
S3 usbohci; C:\Windows\system32\drivers\usbohci.sys [25600 2013-11-27] () [File not signed]
R3 usbprint; C:\Windows\System32\DRIVERS\usbprint.sys [25088 2009-07-14] () [File not signed]
R3 usbscan; C:\Windows\system32\drivers\usbscan.sys [42496 2013-07-03] () [File not signed]
R3 USBSTOR; C:\Windows\System32\DRIVERS\USBSTOR.SYS [91648 2011-03-11] () [File not signed]
R3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2013-11-27] () [File not signed]
R0 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [36432 2009-07-14] () [File not signed]
S3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [29184 2009-07-14] () [File not signed]
R1 VgaSave; C:\Windows\System32\drivers\vga.sys [29184 2009-07-14] () [File not signed]
S3 vhdmp; C:\Windows\system32\drivers\vhdmp.sys [215936 2010-11-20] () [File not signed]
S3 viaide; C:\Windows\system32\drivers\viaide.sys [17488 2009-07-14] () [File not signed]
R0 volmgr; C:\Windows\System32\drivers\volmgr.sys [71552 2010-11-20] () [File not signed]
R0 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [363392 2010-11-20] () [File not signed]
R0 volsnap; C:\Windows\System32\drivers\volsnap.sys [295808 2010-11-20] () [File not signed]
S3 vsmraid; C:\Windows\system32\DRIVERS\vsmraid.sys [161872 2009-07-14] () [File not signed]
S3 vwifibus; C:\Windows\System32\drivers\vwifibus.sys [24576 2009-07-14] () [File not signed]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] () [File not signed]
S3 VX3000; C:\Windows\System32\DRIVERS\VX3000.sys [2060144 2010-05-20] () [File not signed]
S3 WacomPen; C:\Windows\system32\DRIVERS\wacompen.sys [27776 2009-07-14] () [File not signed]
S3 WANARP; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] () [File not signed]
R1 Wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] () [File not signed]
S3 Wd; C:\Windows\system32\DRIVERS\wd.sys [21056 2009-07-14] () [File not signed]
R0 Wdf01000; C:\Windows\System32\drivers\Wdf01000.sys [785624 2013-06-26] () [File not signed]
R1 WfpLwf; C:\Windows\System32\DRIVERS\wfplwf.sys [12800 2009-07-14] () [File not signed]
S3 WIMMount; C:\Windows\System32\drivers\wimmount.sys [22096 2009-07-14] () [File not signed]
S3 WinUsb; C:\Windows\System32\DRIVERS\WinUsb.sys [41984 2010-11-20] () [File not signed]
R3 WmiAcpi; C:\Windows\system32\drivers\wmiacpi.sys [14336 2009-07-14] () [File not signed]
R1 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [21504 2009-07-14] () [File not signed]
R3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [87040 2012-07-26] () [File not signed]
R3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [198656 2012-07-26] () [File not signed]
U5 2b5b93e885bc6a00;  <===== ATTENTION Locked Service
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 sxuptp; system32\DRIVERS\sxuptp.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-25 01:16 - 2015-06-25 01:16 - 00268558 _____ C:\Users\Ahrendt\Desktop\JRT.txt
2015-06-25 01:12 - 2015-06-25 01:12 - 00000207 _____ C:\Windows\tweaking.com-regbackup-AHRENDT-PC-Windows-7-Home-Premium-(64-bit).dat
2015-06-25 01:12 - 2015-06-25 01:12 - 00000000 ____D C:\RegBackup
2015-06-25 01:05 - 2015-06-25 01:07 - 00000000 ____D C:\AdwCleaner
2015-06-25 00:57 - 2015-06-25 00:53 - 02870984 _____ (ESET) C:\Users\Ahrendt\Desktop\esetsmartinstaller_deu.exe
2015-06-25 00:57 - 2015-06-25 00:53 - 00852662 _____ C:\Users\Ahrendt\Desktop\SecurityCheck.exe
2015-06-25 00:57 - 2015-06-25 00:50 - 02951730 _____ (Malwarebytes Corporation) C:\Users\Ahrendt\Desktop\JRT.exe
2015-06-25 00:57 - 2015-06-25 00:50 - 02244096 _____ C:\Users\Ahrendt\Desktop\AdwCleaner_4.207.exe
2015-06-25 00:37 - 2015-06-25 00:37 - 00021755 _____ C:\ComboFix.txt
2015-06-25 00:02 - 2015-06-25 00:37 - 00000000 ____D C:\Qoobox
2015-06-25 00:02 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-06-25 00:02 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-06-25 00:02 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-06-25 00:01 - 2015-06-25 00:35 - 00000000 ____D C:\Windows\erdnt
2015-06-25 00:01 - 2015-06-24 23:54 - 05630239 ____R (Swearware) C:\Users\Ahrendt\Desktop\ComboFix.exe
2015-06-24 23:56 - 2015-06-24 23:56 - 00290384 _____ C:\Windows\Minidump\062415-31137-01.dmp
2015-06-24 22:35 - 2015-06-24 22:38 - 00043903 _____ C:\Users\Ahrendt\Desktop\Addition.txt
2015-06-24 22:34 - 2015-06-25 01:16 - 00040397 _____ C:\Users\Ahrendt\Desktop\FRST.txt
2015-06-24 22:34 - 2015-06-25 01:16 - 00000000 ____D C:\FRST
2015-06-24 22:33 - 2015-06-24 22:32 - 02112512 _____ (Farbar) C:\Users\Ahrendt\Desktop\FRST64.exe
2015-06-24 22:31 - 2015-06-24 22:43 - 00000476 _____ C:\Users\Ahrendt\Desktop\defogger_disable.log
2015-06-24 22:31 - 2015-06-24 22:31 - 00000000 _____ C:\Users\Ahrendt\defogger_reenable
2015-06-24 22:25 - 2015-06-24 22:20 - 00380416 _____ C:\Users\Ahrendt\Desktop\Gmer-19357.exe
2015-06-24 22:25 - 2015-06-24 22:19 - 00050477 _____ C:\Users\Ahrendt\Desktop\Defogger.exe
2015-06-24 22:08 - 2015-06-24 22:19 - 01636352 _____ (Farbar) C:\Users\Ahrendt\Desktop\FRST.exe
2015-06-24 21:42 - 2015-06-24 21:42 - 00001218 _____ C:\Users\Ahrendt\Desktop\malware 1.txt
2015-06-24 21:27 - 2015-06-25 00:48 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-24 21:27 - 2015-06-24 21:27 - 00001118 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-06-24 21:27 - 2015-06-24 21:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-06-24 21:27 - 2015-06-24 21:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-24 21:27 - 2015-06-24 21:27 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-24 21:27 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-06-24 21:27 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-06-24 21:27 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-06-24 20:54 - 2015-06-24 20:54 - 00000703 _____ C:\Users\Ahrendt\Desktop\mbam-setup-2.1.6.1022 - Verknüpfung.lnk
2015-06-24 05:59 - 2015-06-24 05:59 - 00000000 ____D C:\ProgramData\PMB Files
2015-06-21 13:50 - 2015-06-21 13:50 - 02931056 _____ C:\Users\Ahrendt\Downloads\SecurityTaskManager_Setup.exe
2015-06-19 18:27 - 2015-06-24 21:53 - 00007655 _____ C:\Users\Ahrendt\AppData\Local\Resmon.ResmonCfg
2015-06-19 18:01 - 2015-06-19 18:01 - 00088504 _____ C:\Windows\system32\Drivers\2b5b93e885bc6a00.sys
2015-06-19 17:58 - 2015-06-19 17:58 - 00000000 ___HD C:\ProgramData\{CA2FACF7-9029-4A21-892B-E7F60B39FF1A}
2015-06-18 11:14 - 2015-06-19 13:53 - 00000000 ____D C:\Users\Jonas\AppData\Local\{EA7E46CE-AB76-46C4-A65B-48BC06911FE2}
2015-06-18 11:14 - 2015-06-18 11:14 - 00000000 ____D C:\Users\Jonas\AppData\Local\GWX
2015-06-17 20:34 - 2015-06-17 20:34 - 00000000 ____D C:\Users\Jonas\AppData\Local\{90D4594C-86ED-4EF8-A507-A4116B7DDFA8}
2015-06-16 19:49 - 2015-06-16 19:49 - 00000000 ____D C:\Users\Kathi\AppData\Local\{E55BD9A8-B2A1-49CB-AC8D-1909E2785747}
2015-06-13 12:07 - 2015-06-13 12:07 - 00002168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-06-13 11:55 - 2015-06-13 11:55 - 00001132 _____ C:\Users\Public\Desktop\Avira.lnk
2015-06-13 11:49 - 2015-06-13 11:49 - 00862016 _____ C:\Windows\Minidump\061315-23930-01.dmp
2015-06-10 15:43 - 2015-05-25 20:24 - 05569984 _____ C:\Windows\system32\ntoskrnl.exe
2015-06-10 15:43 - 2015-05-25 20:23 - 00155584 _____ C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-10 15:43 - 2015-05-25 20:23 - 00095680 _____ C:\Windows\system32\Drivers\ksecdd.sys
2015-06-10 15:43 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00043520 _____ C:\Windows\system32\csrsrv.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-10 15:43 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-10 15:43 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-10 15:43 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-10 15:43 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-10 15:43 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-10 15:43 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-10 15:43 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-10 15:43 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-10 15:43 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-10 15:43 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-10 15:43 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-10 15:43 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-10 15:43 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-10 15:43 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-10 15:43 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-10 15:43 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-10 15:43 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-10 15:43 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-10 15:43 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-10 15:43 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-10 15:43 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 15:43 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-10 15:43 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-10 15:43 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-10 15:43 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-10 15:43 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-10 15:42 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-10 15:42 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-10 15:42 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 15:42 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-10 15:42 - 2015-05-25 19:08 - 03206144 _____ C:\Windows\system32\win32k.sys
2015-06-10 15:42 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-10 15:42 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-10 15:42 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-10 15:42 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-10 15:42 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-10 15:42 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-10 15:42 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-10 15:42 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-10 15:42 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-10 15:42 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-10 15:42 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-10 15:42 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-10 15:42 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-10 15:42 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-10 15:42 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-10 15:42 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-10 15:42 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-10 15:42 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-10 15:42 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-10 15:42 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-10 15:42 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-10 15:42 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-10 15:42 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-10 15:42 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-10 15:42 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-10 15:42 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-10 15:42 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 15:42 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-10 15:42 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-10 15:42 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 15:42 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 15:42 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 15:42 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-10 15:42 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-10 15:42 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 15:42 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 15:42 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-10 15:42 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 15:42 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 15:42 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-10 15:42 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 15:42 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-10 15:42 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-10 15:42 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 15:42 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-10 15:42 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-10 15:42 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 15:42 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 15:42 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-10 15:42 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 15:42 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 15:42 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-10 15:42 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 15:42 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-10 15:42 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 15:42 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-10 15:42 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-10 15:42 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-10 15:42 - 2015-04-11 05:19 - 00069888 _____ C:\Windows\system32\Drivers\stream.sys
2015-06-10 15:05 - 2015-06-10 15:05 - 00821856 _____ C:\Windows\Minidump\061015-20654-01.dmp
2015-06-09 16:33 - 2015-06-09 16:34 - 00000000 ____D C:\Users\Franzi\AppData\Local\{2476C28F-AB07-482B-BD1E-0CB87CA663A3}
2015-06-05 08:08 - 2015-06-05 08:08 - 00833032 _____ C:\Windows\Minidump\060515-18392-01.dmp
2015-06-05 07:17 - 2015-06-05 07:17 - 00001152 _____ C:\Users\Ahrendt\Desktop\Amazon Music.lnk
2015-06-05 07:16 - 2015-06-05 07:17 - 41033208 _____ (Amazon) C:\Users\Ahrendt\Downloads\AmazonMusicInstaller.exe
2015-06-05 07:00 - 2015-06-05 07:00 - 00000000 ____D C:\Users\Ahrendt\AppData\Local\GWX
2015-06-05 06:58 - 2015-06-05 06:58 - 00873320 _____ C:\Windows\Minidump\060515-19905-01.dmp
2015-06-04 20:48 - 2015-06-04 20:48 - 00000000 ____D C:\Users\Franzi\AppData\Local\{497D942B-BD8D-4273-9C76-A94891439FCF}
2015-06-02 18:06 - 2015-06-02 18:06 - 00000000 ____D C:\Users\Kathi\AppData\Local\GWX
2015-06-02 17:51 - 2015-06-02 17:51 - 00814696 _____ C:\Windows\Minidump\060215-19063-01.dmp
2015-06-01 15:03 - 2015-06-01 15:03 - 00000000 ____D C:\Users\Franzi\AppData\Local\{9FB7F37B-F715-416A-B3F8-D981C8F0D1B2}
2015-06-01 15:02 - 2015-06-01 15:02 - 00000000 ____D C:\Users\Franzi\AppData\Local\GWX
2015-06-01 07:17 - 2015-06-01 07:17 - 00819792 _____ C:\Windows\Minidump\060115-19671-01.dmp
2015-05-31 18:01 - 2015-05-31 18:01 - 00000000 ____D C:\Users\Franzi\AppData\Local\{BA95F12D-F725-450A-A5AB-7E79B153ED99}
2015-05-28 19:35 - 2015-05-28 19:35 - 00814984 _____ C:\Windows\Minidump\052815-18766-01.dmp
2015-05-28 13:13 - 2015-05-28 13:13 - 00000000 ____D C:\Users\Franzi\AppData\Local\{429AD207-1D86-4532-82BB-15B6077F19CE}
2015-05-27 18:11 - 2015-05-27 18:11 - 00000000 ____D C:\Users\Franzi\AppData\Local\{A1B29565-6E07-4382-8E39-38E562DB4189}
2015-05-27 08:11 - 2015-05-27 08:11 - 00000000 ____D C:\Users\Kathi\AppData\Local\{5DF776B8-67BC-4B61-BB47-C8FCE42B55AB}
2015-05-26 19:04 - 2015-05-26 19:05 - 00000000 ____D C:\Users\Kathi\AppData\Local\{BD89496F-B649-427A-B63F-B0CF937A616F}
2015-05-26 17:54 - 2015-05-26 17:54 - 00001972 _____ C:\Users\Ahrendt\Desktop\3476-123 col - Verknüpfung.lnk

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-25 01:13 - 2010-11-21 14:57 - 00000000 ____D C:\Users\Ahrendt\AppData\Local\PMB Files
2015-06-25 01:13 - 2009-07-14 06:45 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-25 01:13 - 2009-07-14 06:45 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-25 01:08 - 2011-07-31 16:48 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2015-06-25 01:08 - 2010-05-10 13:17 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-25 01:08 - 2009-07-14 06:51 - 00124938 _____ C:\Windows\setupact.log
2015-06-25 00:37 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-06-25 00:28 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-06-25 00:27 - 2010-03-15 15:09 - 00746286 _____ C:\Windows\PFRO.log
2015-06-25 00:21 - 2010-10-03 12:25 - 00000000 ____D C:\Users\Ahrendt
2015-06-24 23:56 - 2011-09-30 07:40 - 220234158 _____ C:\Windows\MEMORY.DMP
2015-06-24 23:56 - 2011-09-30 07:40 - 00000000 ____D C:\Windows\Minidump
2015-06-24 21:47 - 2014-01-05 16:13 - 00000000 ____D C:\Program Files (x86)\StarMoney 9.0 S-Edition
2015-06-24 21:23 - 2013-08-17 17:50 - 00000000 ____D C:\Users\Ahrendt\AppData\Roaming\Skype
2015-06-24 21:23 - 2013-08-13 15:13 - 00000000 ____D C:\ProgramData\Skype
2015-06-24 05:41 - 2010-05-08 05:19 - 00699432 _____ C:\Windows\system32\perfh007.dat
2015-06-24 05:41 - 2010-05-08 05:19 - 00149572 _____ C:\Windows\system32\perfc007.dat
2015-06-24 05:41 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-23 06:42 - 2013-01-22 15:18 - 00002187 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-22 21:56 - 2010-10-03 12:42 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-22 21:56 - 2010-10-03 12:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-22 21:44 - 2013-01-22 15:18 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-22 21:23 - 2012-12-15 13:18 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004UA.job
2015-06-22 21:09 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-22 20:43 - 2015-04-06 11:29 - 00000000 ___SD C:\Windows\system32\GWX
2015-06-22 20:43 - 2013-01-22 15:18 - 00000000 ____D C:\Windows\system32\Macromed
2015-06-22 20:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2015-06-22 20:33 - 2010-05-10 13:09 - 01748571 _____ C:\Windows\WindowsUpdate.log
2015-06-22 20:26 - 2015-04-06 11:29 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-06-22 14:42 - 2012-12-15 13:18 - 00000910 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004Core.job
2015-06-21 14:33 - 2013-01-05 22:07 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-06-20 09:28 - 2011-05-13 20:53 - 00000000 ____D C:\Users\Ahrendt\AppData\Local\CrashDumps
2015-06-19 18:01 - 2012-12-25 16:28 - 00000000 ____D C:\ProgramData\Avira
2015-06-19 14:21 - 2011-02-22 13:46 - 00000000 ____D C:\Users\Kathi\AppData\Local\CrashDumps
2015-06-18 11:15 - 2015-03-13 10:00 - 00000000 __SHD C:\Users\Jonas\AppData\Local\EmieBrowserModeList
2015-06-18 11:15 - 2014-04-30 19:35 - 00000000 __SHD C:\Users\Jonas\AppData\Local\EmieUserList
2015-06-18 11:15 - 2014-04-30 19:35 - 00000000 __SHD C:\Users\Jonas\AppData\Local\EmieSiteList
2015-06-18 11:14 - 2010-10-03 19:51 - 00000000 ____D C:\Users\Jonas\Tracing
2015-06-17 11:38 - 2014-11-18 17:05 - 00000000 __SHD C:\Users\Kathi\AppData\Local\EmieBrowserModeList
2015-06-17 11:38 - 2014-05-02 16:01 - 00000000 __SHD C:\Users\Kathi\AppData\Local\EmieUserList
2015-06-17 11:38 - 2014-05-02 16:01 - 00000000 __SHD C:\Users\Kathi\AppData\Local\EmieSiteList
2015-06-16 16:45 - 2012-12-25 15:50 - 00002198 ____H C:\Users\Ahrendt\Documents\Default.rdp
2015-06-13 12:09 - 2014-11-13 17:47 - 00000000 __SHD C:\Users\Ahrendt\AppData\Local\EmieBrowserModeList
2015-06-13 12:09 - 2014-04-23 11:45 - 00000000 __SHD C:\Users\Ahrendt\AppData\Local\EmieUserList
2015-06-13 12:09 - 2014-04-23 11:45 - 00000000 __SHD C:\Users\Ahrendt\AppData\Local\EmieSiteList
2015-06-13 12:06 - 2010-03-15 15:02 - 00000000 ____D C:\Program Files (x86)\Google
2015-06-13 11:55 - 2014-08-06 08:55 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-13 11:54 - 2012-12-25 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-06-13 11:54 - 2012-12-25 16:28 - 00000000 ____D C:\Program Files (x86)\Avira
2015-06-12 08:02 - 2013-01-22 15:18 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-12 08:01 - 2013-01-22 15:18 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-12 08:01 - 2013-01-22 15:18 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-11 10:18 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-11 03:39 - 2009-07-14 06:45 - 00414912 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-11 03:36 - 2014-12-12 04:31 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-11 03:36 - 2014-05-07 03:01 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-11 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-11 03:18 - 2010-03-15 14:52 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-11 03:16 - 2013-08-16 03:02 - 00000000 ____D C:\Windows\system32\MRT
2015-06-11 03:05 - 2010-11-14 16:32 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-10 15:17 - 2013-03-28 10:06 - 00153256 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-06-10 15:17 - 2013-03-28 10:06 - 00132656 _____ C:\Windows\system32\Drivers\avipbb.sys
2015-06-09 16:34 - 2014-03-06 20:56 - 00000000 ___RD C:\Users\Franzi\Dropbox
2015-06-09 16:34 - 2014-03-06 20:51 - 00000000 ____D C:\Users\Franzi\AppData\Roaming\Dropbox
2015-06-09 16:33 - 2010-10-03 19:14 - 00000000 ____D C:\Users\Franzi\Tracing
2015-06-07 20:51 - 2013-12-25 19:02 - 00000000 ____D C:\Users\Ahrendt\AppData\Local\iCopy
2015-05-26 19:16 - 2014-04-04 15:06 - 00000000 ____D C:\Users\Kathi\AppData\Local\Windows Live

==================== Files in the root of some directories =======

2011-05-02 14:33 - 2011-08-03 11:56 - 0005120 _____ () C:\Users\Ahrendt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-06-19 18:27 - 2015-06-24 21:53 - 0007655 _____ () C:\Users\Ahrendt\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\Ahrendt\AppData\Local\Temp\avgnt.exe
C:\Users\Ahrendt\AppData\Local\Temp\Quarantine.exe
C:\Users\Ahrendt\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys
[2011-05-25 18:06] - [2010-11-20 15:34] - 0295808 ____A () D41D8CD98F00B204E9800998ECF8427E

C:\Windows\System32\Drivers\volsnap.sys No Company Name <===== ATTENTION!



testsigning: ==> testsigning is on. Check for possible unsigned rootkit driver <===== ATTENTION!


LastRegBack: 2015-02-15 18:16

==================== End of log ============================
--- --- ---

Joahpi 25.06.2015 00:36
FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:24-06-2015
Ran by Ahrendt (administrator) on AHRENDT-PC on 25-06-2015 01:16:54
Running from C:\Users\Ahrendt\Desktop
Loaded Profiles: Ahrendt (Available Profiles: Ahrendt & Jonas & Franzi & Kathi & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9608224 2009-11-17] (Realtek Semiconductor)
HKLM\...\Run: [OOTag] => C:\Program Files (x86)\Packard Bell\OOBEOffer\ootag.exe [13856 2010-02-23] (Microsoft)
HKLM\...\Run: [VX3000] => C:\Windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-25] (CANON INC.)
HKLM-x32\...\Run: [OOTag] => C:\Program Files (x86)\Packard Bell\OOBEOffer\OOTag.exe [13856 2010-02-23] (Microsoft)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Hotkey Utility] => C:\Program Files (x86)\Packard Bell\Hotkey Utility\HotkeyUtility.exe [563744 2010-03-26] ()
HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [588648 2009-07-25] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LifeCam] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1213848 2010-09-14] (CANON INC.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [730416 2015-06-10] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152544 2012-12-12] (Apple Inc.)
HKLM-x32\...\Run: [FreePDF Assistant] => C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [130864 2015-05-21] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2937528 2010-11-21] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [AutoStartNPSAgent] => C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [95576 2010-07-04] (Samsung Electronics Co., Ltd.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [Amazon Music] => C:\Users\Ahrendt\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886784 2015-05-07] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk [2010-11-21]
ShortcutTarget: GamersFirst LIVE!.lnk -> C:\Program Files (x86)\GamersFirst\LIVE!\Live.exe (GamersFirst)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
ShellIconOverlayIdentifiers: [Symbol-Overlay-Steuerprogramm für AutoCAD Digitale Signaturen] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2010-02-10] (Autodesk, Inc.)
GroupPolicyUsers\S-1-5-21-3928908445-2049478909-3784465887-1004\User: Group Policy Restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-3928908445-2049478909-3784465887-1003\User: Group Policy Restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland ? mit Hotmail Nachfolger Outlook und Messenger Skype
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\Software\Microsoft\Internet Explorer\Main,Start Page = Kaminöfen - Heizsysteme - Schornsteine - Ausstellung - Holm - Wedel - Hamburg - Wärmequelle AS
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)
BHO-x32: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2010-11-08] (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-03] (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18] (Oracle Corporation)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2010-11-08] (CANON INC.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
DPF: HKLM-x32 {73888E2B-FF04-416C-8847-984D7FC4507F} hxxp://eggerstedt.dyndns.org:1030/RtspVaPgDecNew2.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Tcpip\Parameters: [DhcpNameServer] 192.168.179.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2012-10-31] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-14] (CANON INC.)
FF Plugin-x32: @gamersfirst.com/LiveLauncher -> C:\Program Files (x86)\GamersFirst\LIVE!\nplivelauncher.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-12-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-12-18] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-01-22]
CHR Extension: (Google Search) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-01-22]
CHR Extension: (Avira Browser Safety) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]
CHR Extension: (Google Wallet) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28]
CHR Extension: (Gmail) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-01-22]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Locked "2b5b93e885bc6a00" service could not be unlocked. <===== ATTENTION

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [827184 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [450808 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [450808 2015-06-10] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1188360 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [208632 2015-05-21] (Avira Operations GmbH & Co. KG)
S2 avmike; C:\Program Files\FRITZ!Fernzugang\avmike.exe [336248 2012-02-02] (AVM Berlin)
S2 certsrv; C:\Program Files\FRITZ!Fernzugang\certsrv.exe [143736 2011-10-31] (AVM Berlin)
S3 GameConsoleService; C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe [238328 2009-10-10] (WildTangent, Inc.)
S2 Greg_Service; C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S2 nwtsrv; C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe [189304 2011-10-31] (AVM Berlin)
S2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
S2 StarMoney 8.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
S2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
S2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
U2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

U5 2b5b93e885bc6a00; C:\Windows\System32\Drivers\2b5b93e885bc6a00.sys [88504 2015-06-19] () <===== ATTENTION Necurs Rootkit?
S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [21120 2011-08-09] (SafeNet Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 AsyncMac; C:\Windows\System32\DRIVERS\asyncmac.sys [23040 2009-07-14] () [File not signed]
R0 atapi; C:\Windows\System32\drivers\atapi.sys [24128 2009-07-14] () [File not signed]
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [153256 2015-06-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132656 2015-06-10] () [File not signed]
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] () [File not signed]
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-05] () [File not signed]
S3 b06bdrv; C:\Windows\system32\DRIVERS\bxvbda.sys [468480 2009-06-10] () [File not signed]
R3 b57nd60a; C:\Windows\System32\DRIVERS\b57nd60a.sys [321064 2007-11-15] () [File not signed]
U5 BattC; C:\Windows\System32\Drivers\BattC.sys [28240 2009-07-14] () [File not signed]
R1 Beep; C:\Windows\System32\Drivers\Beep.sys [6656 2009-07-14] ()
R1 blbdrive; C:\Windows\system32\DRIVERS\blbdrive.sys [45056 2009-07-14] () [File not signed]
R3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [90624 2011-02-23] () [File not signed]
S3 BrFiltLo; C:\Windows\system32\DRIVERS\BrFiltLo.sys [18432 2009-06-10] () [File not signed]
S3 BrFiltUp; C:\Windows\system32\DRIVERS\BrFiltUp.sys [8704 2009-06-10] () [File not signed]
S3 BridgeMP; C:\Windows\System32\DRIVERS\bridge.sys [95232 2009-07-14] () [File not signed]
S3 Brserid; C:\Windows\System32\Drivers\Brserid.sys [286720 2009-07-14] () [File not signed]
S3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [47104 2009-06-10] () [File not signed]
S3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [14976 2009-06-10] () [File not signed]
S3 BrUsbSer; C:\Windows\System32\Drivers\BrUsbSer.sys [14720 2009-06-10] () [File not signed]
S3 BTHMODEM; C:\Windows\system32\DRIVERS\bthmodem.sys [72192 2009-07-14] () [File not signed]
S4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [92160 2009-07-14] () [File not signed]
R1 cdrom; C:\Windows\System32\DRIVERS\cdrom.sys [147456 2010-11-20] () [File not signed]
S3 circlass; C:\Windows\system32\DRIVERS\circlass.sys [45568 2009-07-14] () [File not signed]
R0 CLFS; C:\Windows\System32\CLFS.sys [367552 2015-03-04] () [File not signed]
S3 CmBatt; C:\Windows\system32\DRIVERS\CmBatt.sys [17664 2009-07-14] () [File not signed]
S3 cmdide; C:\Windows\system32\drivers\cmdide.sys [17488 2009-07-14] () [File not signed]
R0 CNG; C:\Windows\System32\Drivers\cng.sys [459336 2015-01-31] () [File not signed]
S3 Compbatt; C:\Windows\system32\DRIVERS\compbatt.sys [21584 2009-07-14] () [File not signed]
R3 CompositeBus; C:\Windows\system32\drivers\CompositeBus.sys [38912 2010-11-20] () [File not signed]
S4 crcdisk; C:\Windows\system32\DRIVERS\crcdisk.sys [24144 2009-07-14] () [File not signed]
R1 DfsC; C:\Windows\System32\Drivers\dfsc.sys [102400 2010-11-20] () [File not signed]
R1 discache; C:\Windows\System32\drivers\discache.sys [40448 2009-07-14] () [File not signed]
R0 Disk; C:\Windows\System32\DRIVERS\disk.sys [73280 2009-07-14] () [File not signed]
S3 drmkaud; C:\Windows\system32\drivers\drmkaud.sys [5632 2009-07-14] () [File not signed]
R3 DXGKrnl; C:\Windows\System32\drivers\dxgkrnl.sys [985536 2014-06-16] () [File not signed]
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] () [File not signed]
S3 elxstor; C:\Windows\system32\DRIVERS\elxstor.sys [530496 2009-07-14] () [File not signed]
S3 ErrDev; C:\Windows\system32\drivers\errdev.sys [9728 2009-07-14] () [File not signed]
S3 exfat; C:\Windows\System32\Drivers\exfat.sys [195072 2009-07-14] () [File not signed]
R3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [204800 2009-07-14] () [File not signed]
S3 fdc; C:\Windows\system32\DRIVERS\fdc.sys [29696 2009-07-14] () [File not signed]
R0 FileInfo; C:\Windows\System32\drivers\fileinfo.sys [70224 2009-07-14] () [File not signed]
S3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [34304 2009-07-14] () [File not signed]
S3 flpydisk; C:\Windows\system32\DRIVERS\flpydisk.sys [24576 2009-07-14] () [File not signed]
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [289664 2010-11-20] () [File not signed]
S3 FsDepends; C:\Windows\System32\drivers\FsDepends.sys [55376 2009-07-14] () [File not signed]
S3 fssfltr; C:\Windows\System32\DRIVERS\fssfltr.sys [48488 2012-03-08] () [File not signed]
U0 Fs_Rec; C:\Windows\System32\Drivers\Fs_Rec.sys [23408 2012-03-01] () [File not signed]
R0 fvevol; C:\Windows\System32\DRIVERS\fvevol.sys [223752 2013-01-24] () [File not signed]
S3 gagp30kx; C:\Windows\system32\DRIVERS\gagp30kx.sys [65088 2009-07-14] () [File not signed]
R3 GEARAspiWDM; C:\Windows\System32\DRIVERS\GEARAspiWDM.sys [33240 2012-08-21] () [File not signed]
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [321536 2011-10-07] () [File not signed]
S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232 2009-06-10] () [File not signed]
S3 HdAudAddService; C:\Windows\system32\drivers\HdAudio.sys [350208 2010-11-20] () [File not signed]
R3 HDAudBus; C:\Windows\system32\drivers\HDAudBus.sys [122368 2010-11-20] () [File not signed]
S3 HidBatt; C:\Windows\system32\DRIVERS\HidBatt.sys [26624 2009-07-14] () [File not signed]
S3 HidBth; C:\Windows\system32\DRIVERS\hidbth.sys [100864 2009-07-14] () [File not signed]
S3 HidIr; C:\Windows\system32\DRIVERS\hidir.sys [46592 2009-07-14] () [File not signed]
R3 HidUsb; C:\Windows\System32\DRIVERS\hidusb.sys [30208 2010-11-20] () [File not signed]
S3 HpSAMD; C:\Windows\system32\drivers\HpSAMD.sys [78720 2010-11-20] () [File not signed]
R3 HTTP; C:\Windows\System32\drivers\HTTP.sys [754688 2015-02-25] () [File not signed]
R0 hwpolicy; C:\Windows\System32\drivers\hwpolicy.sys [14720 2010-11-20] () [File not signed]
S3 i8042prt; C:\Windows\system32\drivers\i8042prt.sys [105472 2009-07-14] () [File not signed]
S3 iaStorV; C:\Windows\system32\drivers\iaStorV.sys [410496 2011-03-11] () [File not signed]
S3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [6108416 2009-06-10] () [File not signed]
S3 iirsp; C:\Windows\system32\DRIVERS\iirsp.sys [44112 2009-07-14] () [File not signed]
R3 IntcAzAudAddService; C:\Windows\System32\drivers\RTKVHD64.sys [2037408 2009-11-17] () [File not signed]
R0 intelide; C:\Windows\System32\drivers\intelide.sys [16960 2009-07-14] () [File not signed]
R3 intelppm; C:\Windows\System32\DRIVERS\intelppm.sys [62464 2009-07-14] () [File not signed]
S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [82944 2010-11-20] () [File not signed]
S3 IPMIDRV; C:\Windows\system32\drivers\IPMIDrv.sys [78848 2010-11-20] () [File not signed]
S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [116224 2009-07-14] () [File not signed]
S3 IRENUM; C:\Windows\System32\drivers\irenum.sys [17920 2009-07-14] () [File not signed]
S3 isapnp; C:\Windows\system32\drivers\isapnp.sys [20544 2009-07-14] () [File not signed]
S3 iScsiPrt; C:\Windows\system32\drivers\msiscsi.sys [274880 2014-02-04] () [File not signed]
R3 kbdclass; C:\Windows\System32\DRIVERS\kbdclass.sys [50768 2009-07-14] () [File not signed]
R3 kbdhid; C:\Windows\System32\DRIVERS\kbdhid.sys [33280 2010-11-20] () [File not signed]
R0 KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [95680 2015-05-25] () [File not signed]
R0 KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [155584 2015-05-25] () [File not signed]
R3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [20992 2009-07-14] () [File not signed]
R2 lltdio; C:\Windows\System32\DRIVERS\lltdio.sys [60928 2009-07-14] () [File not signed]
S3 LSI_FC; C:\Windows\system32\DRIVERS\lsi_fc.sys [114752 2009-07-14] () [File not signed]
S3 LSI_SAS; C:\Windows\system32\DRIVERS\lsi_sas.sys [106560 2009-07-14] () [File not signed]
S3 LSI_SAS2; C:\Windows\system32\DRIVERS\lsi_sas2.sys [65600 2009-07-14] () [File not signed]
S3 LSI_SCSI; C:\Windows\system32\DRIVERS\lsi_scsi.sys [115776 2009-07-14] () [File not signed]
R2 luafv; C:\Windows\system32\drivers\luafv.sys [113152 2009-07-14] () [File not signed]
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
S3 megasas; C:\Windows\system32\DRIVERS\megasas.sys [35392 2009-07-14] () [File not signed]
S3 MegaSR; C:\Windows\system32\DRIVERS\MegaSR.sys [284736 2009-07-14] () [File not signed]
S3 Modem; C:\Windows\System32\drivers\modem.sys [40448 2009-07-14] () [File not signed]
R3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-14] () [File not signed]
R3 mouclass; C:\Windows\System32\DRIVERS\mouclass.sys [49216 2009-07-14] () [File not signed]
R3 mouhid; C:\Windows\System32\DRIVERS\mouhid.sys [31232 2009-07-14] () [File not signed]
R0 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [94656 2015-02-03] () [File not signed]
S3 mpio; C:\Windows\system32\drivers\mpio.sys [155008 2010-11-20] () [File not signed]
R3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [77312 2009-07-14] () [File not signed]
S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [141312 2014-12-19] () [File not signed]
R3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [158208 2011-04-27] () [File not signed]
R3 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [288768 2011-07-09] () [File not signed]
R3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [128000 2011-04-27] () [File not signed]
S3 msahci; C:\Windows\system32\drivers\msahci.sys [31104 2010-11-20] () [File not signed]
S3 msdsm; C:\Windows\system32\drivers\msdsm.sys [140672 2010-11-20] () [File not signed]
R1 Msfs; C:\Windows\System32\Drivers\Msfs.sys [26112 2009-07-14] ()
S3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [8192 2009-07-14] () [File not signed]
R0 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [15424 2009-07-14] () [File not signed]
S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [11136 2009-07-14] () [File not signed]
S3 MSPCLOCK; C:\Windows\System32\drivers\MSPCLOCK.sys [7168 2009-07-14] () [File not signed]
S3 MSPQM; C:\Windows\System32\drivers\MSPQM.sys [6784 2009-07-14] () [File not signed]
S3 MsRPC; C:\Windows\System32\Drivers\MsRPC.sys [366976 2010-11-20] ()
R1 mssmbios; C:\Windows\system32\drivers\mssmbios.sys [32320 2009-07-14] () [File not signed]
S3 MSTEE; C:\Windows\System32\drivers\MSTEE.sys [8064 2009-07-14] () [File not signed]
S3 MTConfig; C:\Windows\system32\DRIVERS\MTConfig.sys [15360 2009-07-14] () [File not signed]
R0 Mup; C:\Windows\System32\Drivers\mup.sys [60496 2009-07-14] () [File not signed]
R3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [318976 2009-07-14] () [File not signed]
R0 NDIS; C:\Windows\System32\drivers\ndis.sys [950128 2012-08-22] () [File not signed]
S3 NdisCap; C:\Windows\System32\DRIVERS\ndiscap.sys [35328 2009-07-14] () [File not signed]
R3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [24064 2009-07-14] () [File not signed]
R3 Ndisuio; C:\Windows\System32\DRIVERS\ndisuio.sys [56832 2010-11-20] () [File not signed]
R3 NdisWan; C:\Windows\System32\DRIVERS\ndiswan.sys [164352 2010-11-20] () [File not signed]
R3 NDProxy; C:\Windows\System32\Drivers\NDProxy.sys [57856 2010-11-20] ()
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [22528 2012-03-26] () [File not signed]
R1 NetBIOS; C:\Windows\System32\DRIVERS\netbios.sys [44544 2009-07-14] () [File not signed]
R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [261632 2010-11-20] () [File not signed]
S3 nfrd960; C:\Windows\system32\DRIVERS\nfrd960.sys [51264 2009-07-14] () [File not signed]
R1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [44032 2009-07-14] ()
R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [24576 2009-07-14] () [File not signed]
R3 Ntfs; C:\Windows\System32\Drivers\Ntfs.sys [1684928 2014-01-24] ()
R1 Null; C:\Windows\System32\Drivers\Null.sys [6144 2009-07-14] () [File not signed]
R3 NVHDA; C:\Windows\System32\drivers\nvhda64v.sys [84512 2009-08-21] () [File not signed]
R3 nvlddmkm; C:\Windows\System32\DRIVERS\nvlddmkm.sys [11036448 2013-02-26] () [File not signed]
S3 nvraid; C:\Windows\system32\drivers\nvraid.sys [148352 2011-03-11] () [File not signed]
S3 nvstor; C:\Windows\system32\drivers\nvstor.sys [166272 2011-03-11] () [File not signed]
S3 nv_agp; C:\Windows\system32\drivers\nv_agp.sys [122960 2009-07-14] () [File not signed]
R3 NWIM; C:\Windows\System32\DRIVERS\avmnwim.sys [412024 2011-07-05] () [File not signed]
S3 ohci1394; C:\Windows\system32\drivers\ohci1394.sys [72832 2009-07-14] () [File not signed]
R3 Parport; C:\Windows\System32\DRIVERS\parport.sys [97280 2009-07-14] () [File not signed]
R0 partmgr; C:\Windows\System32\drivers\partmgr.sys [75120 2012-03-17] () [File not signed]
R0 pci; C:\Windows\System32\drivers\pci.sys [184704 2010-11-20] () [File not signed]
S3 pciide; C:\Windows\system32\drivers\pciide.sys [12352 2009-07-14] () [File not signed]
S3 pcmcia; C:\Windows\system32\DRIVERS\pcmcia.sys [220752 2009-07-14] () [File not signed]
R0 pcw; C:\Windows\System32\drivers\pcw.sys [50768 2009-07-14] () [File not signed]
R2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [663552 2015-02-03] () [File not signed]
R3 PptpMiniport; C:\Windows\System32\DRIVERS\raspptp.sys [111104 2010-11-20] () [File not signed]
S3 Processor; C:\Windows\system32\DRIVERS\processr.sys [60416 2009-07-14] () [File not signed]
R1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-20] () [File not signed]
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [55024 2008-06-16] () [File not signed]
S3 ql2300; C:\Windows\system32\DRIVERS\ql2300.sys [1524816 2009-07-14] () [File not signed]
S3 ql40xx; C:\Windows\system32\DRIVERS\ql40xx.sys [128592 2009-07-14] () [File not signed]
S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [46592 2009-07-14] () [File not signed]
S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [14848 2009-07-14] () [File not signed]
R3 RasAgileVpn; C:\Windows\System32\DRIVERS\AgileVpn.sys [60416 2009-07-14] () [File not signed]
R3 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-20] () [File not signed]
R3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [92672 2009-07-14] () [File not signed]
R3 RasSstp; C:\Windows\System32\DRIVERS\rassstp.sys [83968 2009-07-14] () [File not signed]
R1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [309248 2010-11-20] () [File not signed]
S3 rdpbus; C:\Windows\system32\DRIVERS\rdpbus.sys [24064 2009-07-14] () [File not signed]
R1 RDPCDD; C:\Windows\System32\DRIVERS\RDPCDD.sys [7680 2009-07-14] () [File not signed]
R1 RDPENCDD; C:\Windows\System32\drivers\rdpencdd.sys [7680 2009-07-14] () [File not signed]
R1 RDPREFMP; C:\Windows\System32\drivers\rdprefmp.sys [8192 2009-07-14] () [File not signed]
S3 RdpVideoMiniport; C:\Windows\System32\drivers\rdpvideominiport.sys [19456 2012-08-23] () [File not signed]
S3 RDPWD; C:\Windows\System32\Drivers\RDPWD.sys [212480 2014-07-17] ()
R0 rdyboost; C:\Windows\System32\drivers\rdyboost.sys [213888 2010-11-20] () [File not signed]
R2 rspndr; C:\Windows\System32\DRIVERS\rspndr.sys [76800 2009-07-14] () [File not signed]
S3 sbp2port; C:\Windows\system32\drivers\sbp2port.sys [103808 2010-11-20] () [File not signed]
S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [29696 2010-11-20] () [File not signed]
R2 secdrv; C:\Windows\System32\Drivers\secdrv.sys [23040 2009-06-10] ()
R3 Serenum; C:\Windows\System32\DRIVERS\serenum.sys [23552 2009-07-14] () [File not signed]
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] () [File not signed]
S3 sermouse; C:\Windows\system32\DRIVERS\sermouse.sys [26624 2009-07-14] () [File not signed]
S3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [14336 2009-07-14] () [File not signed]
S3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [13824 2009-07-14] () [File not signed]
S3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [14336 2010-11-20] () [File not signed]
S3 sfloppy; C:\Windows\system32\DRIVERS\sfloppy.sys [16896 2009-07-14] () [File not signed]
S3 SiSRaid2; C:\Windows\system32\DRIVERS\SiSRaid2.sys [43584 2009-07-14] () [File not signed]
S3 SiSRaid4; C:\Windows\system32\DRIVERS\sisraid4.sys [80464 2009-07-14] () [File not signed]
S3 Smb; C:\Windows\System32\DRIVERS\smb.sys [93184 2009-07-14] () [File not signed]
S3 SPCP825K; C:\Windows\System32\DRIVERS\SPCP825K.sys [42056 2010-07-19] () [File not signed]
R0 spldr; C:\Windows\System32\Drivers\spldr.sys [19008 2009-07-14] ()
R3 srv; C:\Windows\System32\DRIVERS\srv.sys [467456 2011-04-29] () [File not signed]
R3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [410112 2011-04-29] () [File not signed]
R3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [168448 2011-04-29] () [File not signed]
S3 ssm_bus; C:\Windows\System32\DRIVERS\ssm_bus.sys [136192 2010-04-27] () [File not signed]
S3 ssm_mdfl; C:\Windows\System32\DRIVERS\ssm_mdfl.sys [18944 2010-04-27] () [File not signed]
S3 ssm_mdm; C:\Windows\System32\DRIVERS\ssm_mdm.sys [172032 2010-04-27] () [File not signed]
S3 stexstor; C:\Windows\system32\DRIVERS\stexstor.sys [24656 2009-07-14] () [File not signed]
R3 swenum; C:\Windows\system32\drivers\swenum.sys [12496 2009-07-14] () [File not signed]
R0 Tcpip; C:\Windows\System32\drivers\tcpip.sys [1903552 2014-04-05] () [File not signed]
S3 TCPIP6; C:\Windows\System32\DRIVERS\tcpip.sys [1903552 2014-04-05] () [File not signed]
R2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [45568 2012-10-03] () [File not signed]
S3 TDPIPE; C:\Windows\System32\drivers\tdpipe.sys [15872 2009-07-14] () [File not signed]
S3 TDTCP; C:\Windows\System32\drivers\tdtcp.sys [23552 2012-02-17] () [File not signed]
R1 tdx; C:\Windows\System32\DRIVERS\tdx.sys [119296 2014-11-11] () [File not signed]
R1 TermDD; C:\Windows\system32\drivers\termdd.sys [63360 2010-11-20] () [File not signed]
S3 TFsExDisk; C:\Windows\System32\Drivers\TFsExDisk.sys [16448 2010-06-14] () [File not signed]
S3 tssecsrv; C:\Windows\System32\DRIVERS\tssecsrv.sys [39936 2014-07-17] () [File not signed]
S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [57856 2012-08-23] () [File not signed]
R3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-20] () [File not signed]
S3 uagp35; C:\Windows\system32\DRIVERS\uagp35.sys [64080 2009-07-14] () [File not signed]
S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [328192 2010-11-20] () [File not signed]
S3 uliagpkx; C:\Windows\system32\drivers\uliagpkx.sys [64592 2009-07-14] () [File not signed]
R3 umbus; C:\Windows\system32\drivers\umbus.sys [48640 2010-11-20] () [File not signed]
S3 UmPass; C:\Windows\system32\DRIVERS\umpass.sys [9728 2009-07-14] () [File not signed]
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [53760 2012-09-28] () [File not signed]
S3 usbaudio; C:\Windows\system32\drivers\usbaudio.sys [109824 2013-07-12] () [File not signed]
R3 usbccgp; C:\Windows\System32\DRIVERS\usbccgp.sys [99840 2013-11-27] () [File not signed]
S3 usbcir; C:\Windows\system32\drivers\usbcir.sys [100864 2013-07-12] () [File not signed]
R3 usbehci; C:\Windows\system32\drivers\usbehci.sys [53248 2013-11-27] () [File not signed]
R3 usbhub; C:\Windows\System32\DRIVERS\usbhub.sys [343040 2013-11-27] () [File not signed]
S3 usbohci; C:\Windows\system32\drivers\usbohci.sys [25600 2013-11-27] () [File not signed]
R3 usbprint; C:\Windows\System32\DRIVERS\usbprint.sys [25088 2009-07-14] () [File not signed]
R3 usbscan; C:\Windows\system32\drivers\usbscan.sys [42496 2013-07-03] () [File not signed]
R3 USBSTOR; C:\Windows\System32\DRIVERS\USBSTOR.SYS [91648 2011-03-11] () [File not signed]
R3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2013-11-27] () [File not signed]
R0 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [36432 2009-07-14] () [File not signed]
S3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [29184 2009-07-14] () [File not signed]
R1 VgaSave; C:\Windows\System32\drivers\vga.sys [29184 2009-07-14] () [File not signed]
S3 vhdmp; C:\Windows\system32\drivers\vhdmp.sys [215936 2010-11-20] () [File not signed]
S3 viaide; C:\Windows\system32\drivers\viaide.sys [17488 2009-07-14] () [File not signed]
R0 volmgr; C:\Windows\System32\drivers\volmgr.sys [71552 2010-11-20] () [File not signed]
R0 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [363392 2010-11-20] () [File not signed]
R0 volsnap; C:\Windows\System32\drivers\volsnap.sys [295808 2010-11-20] () [File not signed]
S3 vsmraid; C:\Windows\system32\DRIVERS\vsmraid.sys [161872 2009-07-14] () [File not signed]
S3 vwifibus; C:\Windows\System32\drivers\vwifibus.sys [24576 2009-07-14] () [File not signed]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] () [File not signed]
S3 VX3000; C:\Windows\System32\DRIVERS\VX3000.sys [2060144 2010-05-20] () [File not signed]
S3 WacomPen; C:\Windows\system32\DRIVERS\wacompen.sys [27776 2009-07-14] () [File not signed]
S3 WANARP; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] () [File not signed]
R1 Wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] () [File not signed]
S3 Wd; C:\Windows\system32\DRIVERS\wd.sys [21056 2009-07-14] () [File not signed]
R0 Wdf01000; C:\Windows\System32\drivers\Wdf01000.sys [785624 2013-06-26] () [File not signed]
R1 WfpLwf; C:\Windows\System32\DRIVERS\wfplwf.sys [12800 2009-07-14] () [File not signed]
S3 WIMMount; C:\Windows\System32\drivers\wimmount.sys [22096 2009-07-14] () [File not signed]
S3 WinUsb; C:\Windows\System32\DRIVERS\WinUsb.sys [41984 2010-11-20] () [File not signed]
R3 WmiAcpi; C:\Windows\system32\drivers\wmiacpi.sys [14336 2009-07-14] () [File not signed]
R1 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [21504 2009-07-14] () [File not signed]
R3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [87040 2012-07-26] () [File not signed]
R3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [198656 2012-07-26] () [File not signed]
U5 2b5b93e885bc6a00;  <===== ATTENTION Locked Service
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 sxuptp; system32\DRIVERS\sxuptp.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-25 01:16 - 2015-06-25 01:16 - 00268558 _____ C:\Users\Ahrendt\Desktop\JRT.txt
2015-06-25 01:12 - 2015-06-25 01:12 - 00000207 _____ C:\Windows\tweaking.com-regbackup-AHRENDT-PC-Windows-7-Home-Premium-(64-bit).dat
2015-06-25 01:12 - 2015-06-25 01:12 - 00000000 ____D C:\RegBackup
2015-06-25 01:05 - 2015-06-25 01:07 - 00000000 ____D C:\AdwCleaner
2015-06-25 00:57 - 2015-06-25 00:53 - 02870984 _____ (ESET) C:\Users\Ahrendt\Desktop\esetsmartinstaller_deu.exe
2015-06-25 00:57 - 2015-06-25 00:53 - 00852662 _____ C:\Users\Ahrendt\Desktop\SecurityCheck.exe
2015-06-25 00:57 - 2015-06-25 00:50 - 02951730 _____ (Malwarebytes Corporation) C:\Users\Ahrendt\Desktop\JRT.exe
2015-06-25 00:57 - 2015-06-25 00:50 - 02244096 _____ C:\Users\Ahrendt\Desktop\AdwCleaner_4.207.exe
2015-06-25 00:37 - 2015-06-25 00:37 - 00021755 _____ C:\ComboFix.txt
2015-06-25 00:02 - 2015-06-25 00:37 - 00000000 ____D C:\Qoobox
2015-06-25 00:02 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-06-25 00:02 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-06-25 00:02 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-06-25 00:01 - 2015-06-25 00:35 - 00000000 ____D C:\Windows\erdnt
2015-06-25 00:01 - 2015-06-24 23:54 - 05630239 ____R (Swearware) C:\Users\Ahrendt\Desktop\ComboFix.exe
2015-06-24 23:56 - 2015-06-24 23:56 - 00290384 _____ C:\Windows\Minidump\062415-31137-01.dmp
2015-06-24 22:35 - 2015-06-24 22:38 - 00043903 _____ C:\Users\Ahrendt\Desktop\Addition.txt
2015-06-24 22:34 - 2015-06-25 01:16 - 00040397 _____ C:\Users\Ahrendt\Desktop\FRST.txt
2015-06-24 22:34 - 2015-06-25 01:16 - 00000000 ____D C:\FRST
2015-06-24 22:33 - 2015-06-24 22:32 - 02112512 _____ (Farbar) C:\Users\Ahrendt\Desktop\FRST64.exe
2015-06-24 22:31 - 2015-06-24 22:43 - 00000476 _____ C:\Users\Ahrendt\Desktop\defogger_disable.log
2015-06-24 22:31 - 2015-06-24 22:31 - 00000000 _____ C:\Users\Ahrendt\defogger_reenable
2015-06-24 22:25 - 2015-06-24 22:20 - 00380416 _____ C:\Users\Ahrendt\Desktop\Gmer-19357.exe
2015-06-24 22:25 - 2015-06-24 22:19 - 00050477 _____ C:\Users\Ahrendt\Desktop\Defogger.exe
2015-06-24 22:08 - 2015-06-24 22:19 - 01636352 _____ (Farbar) C:\Users\Ahrendt\Desktop\FRST.exe
2015-06-24 21:42 - 2015-06-24 21:42 - 00001218 _____ C:\Users\Ahrendt\Desktop\malware 1.txt
2015-06-24 21:27 - 2015-06-25 00:48 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-24 21:27 - 2015-06-24 21:27 - 00001118 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-06-24 21:27 - 2015-06-24 21:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-06-24 21:27 - 2015-06-24 21:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-24 21:27 - 2015-06-24 21:27 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-24 21:27 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-06-24 21:27 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-06-24 21:27 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-06-24 20:54 - 2015-06-24 20:54 - 00000703 _____ C:\Users\Ahrendt\Desktop\mbam-setup-2.1.6.1022 - Verknüpfung.lnk
2015-06-24 05:59 - 2015-06-24 05:59 - 00000000 ____D C:\ProgramData\PMB Files
2015-06-21 13:50 - 2015-06-21 13:50 - 02931056 _____ C:\Users\Ahrendt\Downloads\SecurityTaskManager_Setup.exe
2015-06-19 18:27 - 2015-06-24 21:53 - 00007655 _____ C:\Users\Ahrendt\AppData\Local\Resmon.ResmonCfg
2015-06-19 18:01 - 2015-06-19 18:01 - 00088504 _____ C:\Windows\system32\Drivers\2b5b93e885bc6a00.sys
2015-06-19 17:58 - 2015-06-19 17:58 - 00000000 ___HD C:\ProgramData\{CA2FACF7-9029-4A21-892B-E7F60B39FF1A}
2015-06-18 11:14 - 2015-06-19 13:53 - 00000000 ____D C:\Users\Jonas\AppData\Local\{EA7E46CE-AB76-46C4-A65B-48BC06911FE2}
2015-06-18 11:14 - 2015-06-18 11:14 - 00000000 ____D C:\Users\Jonas\AppData\Local\GWX
2015-06-17 20:34 - 2015-06-17 20:34 - 00000000 ____D C:\Users\Jonas\AppData\Local\{90D4594C-86ED-4EF8-A507-A4116B7DDFA8}
2015-06-16 19:49 - 2015-06-16 19:49 - 00000000 ____D C:\Users\Kathi\AppData\Local\{E55BD9A8-B2A1-49CB-AC8D-1909E2785747}
2015-06-13 12:07 - 2015-06-13 12:07 - 00002168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-06-13 11:55 - 2015-06-13 11:55 - 00001132 _____ C:\Users\Public\Desktop\Avira.lnk
2015-06-13 11:49 - 2015-06-13 11:49 - 00862016 _____ C:\Windows\Minidump\061315-23930-01.dmp
2015-06-10 15:43 - 2015-05-25 20:24 - 05569984 _____ C:\Windows\system32\ntoskrnl.exe
2015-06-10 15:43 - 2015-05-25 20:23 - 00155584 _____ C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-10 15:43 - 2015-05-25 20:23 - 00095680 _____ C:\Windows\system32\Drivers\ksecdd.sys
2015-06-10 15:43 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00043520 _____ C:\Windows\system32\csrsrv.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-10 15:43 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-10 15:43 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-10 15:43 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-10 15:43 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-10 15:43 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-10 15:43 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-10 15:43 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-10 15:43 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-10 15:43 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-10 15:43 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-10 15:43 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-10 15:43 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-10 15:43 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-10 15:43 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-10 15:43 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-10 15:43 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-10 15:43 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-10 15:43 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-10 15:43 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-10 15:43 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-10 15:43 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 15:43 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-10 15:43 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-10 15:43 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-10 15:43 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-10 15:43 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-10 15:42 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-10 15:42 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-10 15:42 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 15:42 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-10 15:42 - 2015-05-25 19:08 - 03206144 _____ C:\Windows\system32\win32k.sys
2015-06-10 15:42 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-10 15:42 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-10 15:42 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-10 15:42 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-10 15:42 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-10 15:42 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-10 15:42 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-10 15:42 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-10 15:42 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-10 15:42 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-10 15:42 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-10 15:42 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-10 15:42 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-10 15:42 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-10 15:42 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-10 15:42 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-10 15:42 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-10 15:42 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-10 15:42 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-10 15:42 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-10 15:42 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-10 15:42 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-10 15:42 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-10 15:42 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-10 15:42 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-10 15:42 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-10 15:42 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 15:42 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-10 15:42 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-10 15:42 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 15:42 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 15:42 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 15:42 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-10 15:42 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-10 15:42 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 15:42 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 15:42 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-10 15:42 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 15:42 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 15:42 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-10 15:42 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 15:42 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-10 15:42 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-10 15:42 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 15:42 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-10 15:42 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-10 15:42 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 15:42 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 15:42 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-10 15:42 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 15:42 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 15:42 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-10 15:42 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 15:42 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-10 15:42 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 15:42 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-10 15:42 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-10 15:42 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-10 15:42 - 2015-04-11 05:19 - 00069888 _____ C:\Windows\system32\Drivers\stream.sys
2015-06-10 15:05 - 2015-06-10 15:05 - 00821856 _____ C:\Windows\Minidump\061015-20654-01.dmp
2015-06-09 16:33 - 2015-06-09 16:34 - 00000000 ____D C:\Users\Franzi\AppData\Local\{2476C28F-AB07-482B-BD1E-0CB87CA663A3}
2015-06-05 08:08 - 2015-06-05 08:08 - 00833032 _____ C:\Windows\Minidump\060515-18392-01.dmp
2015-06-05 07:17 - 2015-06-05 07:17 - 00001152 _____ C:\Users\Ahrendt\Desktop\Amazon Music.lnk
2015-06-05 07:16 - 2015-06-05 07:17 - 41033208 _____ (Amazon) C:\Users\Ahrendt\Downloads\AmazonMusicInstaller.exe
2015-06-05 07:00 - 2015-06-05 07:00 - 00000000 ____D C:\Users\Ahrendt\AppData\Local\GWX
2015-06-05 06:58 - 2015-06-05 06:58 - 00873320 _____ C:\Windows\Minidump\060515-19905-01.dmp
2015-06-04 20:48 - 2015-06-04 20:48 - 00000000 ____D C:\Users\Franzi\AppData\Local\{497D942B-BD8D-4273-9C76-A94891439FCF}
2015-06-02 18:06 - 2015-06-02 18:06 - 00000000 ____D C:\Users\Kathi\AppData\Local\GWX
2015-06-02 17:51 - 2015-06-02 17:51 - 00814696 _____ C:\Windows\Minidump\060215-19063-01.dmp
2015-06-01 15:03 - 2015-06-01 15:03 - 00000000 ____D C:\Users\Franzi\AppData\Local\{9FB7F37B-F715-416A-B3F8-D981C8F0D1B2}
2015-06-01 15:02 - 2015-06-01 15:02 - 00000000 ____D C:\Users\Franzi\AppData\Local\GWX
2015-06-01 07:17 - 2015-06-01 07:17 - 00819792 _____ C:\Windows\Minidump\060115-19671-01.dmp
2015-05-31 18:01 - 2015-05-31 18:01 - 00000000 ____D C:\Users\Franzi\AppData\Local\{BA95F12D-F725-450A-A5AB-7E79B153ED99}
2015-05-28 19:35 - 2015-05-28 19:35 - 00814984 _____ C:\Windows\Minidump\052815-18766-01.dmp
2015-05-28 13:13 - 2015-05-28 13:13 - 00000000 ____D C:\Users\Franzi\AppData\Local\{429AD207-1D86-4532-82BB-15B6077F19CE}
2015-05-27 18:11 - 2015-05-27 18:11 - 00000000 ____D C:\Users\Franzi\AppData\Local\{A1B29565-6E07-4382-8E39-38E562DB4189}
2015-05-27 08:11 - 2015-05-27 08:11 - 00000000 ____D C:\Users\Kathi\AppData\Local\{5DF776B8-67BC-4B61-BB47-C8FCE42B55AB}
2015-05-26 19:04 - 2015-05-26 19:05 - 00000000 ____D C:\Users\Kathi\AppData\Local\{BD89496F-B649-427A-B63F-B0CF937A616F}
2015-05-26 17:54 - 2015-05-26 17:54 - 00001972 _____ C:\Users\Ahrendt\Desktop\3476-123 col - Verknüpfung.lnk

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-25 01:13 - 2010-11-21 14:57 - 00000000 ____D C:\Users\Ahrendt\AppData\Local\PMB Files
2015-06-25 01:13 - 2009-07-14 06:45 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-25 01:13 - 2009-07-14 06:45 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-25 01:08 - 2011-07-31 16:48 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2015-06-25 01:08 - 2010-05-10 13:17 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-25 01:08 - 2009-07-14 06:51 - 00124938 _____ C:\Windows\setupact.log
2015-06-25 00:37 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-06-25 00:28 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-06-25 00:27 - 2010-03-15 15:09 - 00746286 _____ C:\Windows\PFRO.log
2015-06-25 00:21 - 2010-10-03 12:25 - 00000000 ____D C:\Users\Ahrendt
2015-06-24 23:56 - 2011-09-30 07:40 - 220234158 _____ C:\Windows\MEMORY.DMP
2015-06-24 23:56 - 2011-09-30 07:40 - 00000000 ____D C:\Windows\Minidump
2015-06-24 21:47 - 2014-01-05 16:13 - 00000000 ____D C:\Program Files (x86)\StarMoney 9.0 S-Edition
2015-06-24 21:23 - 2013-08-17 17:50 - 00000000 ____D C:\Users\Ahrendt\AppData\Roaming\Skype
2015-06-24 21:23 - 2013-08-13 15:13 - 00000000 ____D C:\ProgramData\Skype
2015-06-24 05:41 - 2010-05-08 05:19 - 00699432 _____ C:\Windows\system32\perfh007.dat
2015-06-24 05:41 - 2010-05-08 05:19 - 00149572 _____ C:\Windows\system32\perfc007.dat
2015-06-24 05:41 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-23 06:42 - 2013-01-22 15:18 - 00002187 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-22 21:56 - 2010-10-03 12:42 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-22 21:56 - 2010-10-03 12:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-22 21:44 - 2013-01-22 15:18 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-22 21:23 - 2012-12-15 13:18 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004UA.job
2015-06-22 21:09 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-22 20:43 - 2015-04-06 11:29 - 00000000 ___SD C:\Windows\system32\GWX
2015-06-22 20:43 - 2013-01-22 15:18 - 00000000 ____D C:\Windows\system32\Macromed
2015-06-22 20:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2015-06-22 20:33 - 2010-05-10 13:09 - 01748571 _____ C:\Windows\WindowsUpdate.log
2015-06-22 20:26 - 2015-04-06 11:29 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-06-22 14:42 - 2012-12-15 13:18 - 00000910 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004Core.job
2015-06-21 14:33 - 2013-01-05 22:07 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-06-20 09:28 - 2011-05-13 20:53 - 00000000 ____D C:\Users\Ahrendt\AppData\Local\CrashDumps
2015-06-19 18:01 - 2012-12-25 16:28 - 00000000 ____D C:\ProgramData\Avira
2015-06-19 14:21 - 2011-02-22 13:46 - 00000000 ____D C:\Users\Kathi\AppData\Local\CrashDumps
2015-06-18 11:15 - 2015-03-13 10:00 - 00000000 __SHD C:\Users\Jonas\AppData\Local\EmieBrowserModeList
2015-06-18 11:15 - 2014-04-30 19:35 - 00000000 __SHD C:\Users\Jonas\AppData\Local\EmieUserList
2015-06-18 11:15 - 2014-04-30 19:35 - 00000000 __SHD C:\Users\Jonas\AppData\Local\EmieSiteList
2015-06-18 11:14 - 2010-10-03 19:51 - 00000000 ____D C:\Users\Jonas\Tracing
2015-06-17 11:38 - 2014-11-18 17:05 - 00000000 __SHD C:\Users\Kathi\AppData\Local\EmieBrowserModeList
2015-06-17 11:38 - 2014-05-02 16:01 - 00000000 __SHD C:\Users\Kathi\AppData\Local\EmieUserList
2015-06-17 11:38 - 2014-05-02 16:01 - 00000000 __SHD C:\Users\Kathi\AppData\Local\EmieSiteList
2015-06-16 16:45 - 2012-12-25 15:50 - 00002198 ____H C:\Users\Ahrendt\Documents\Default.rdp
2015-06-13 12:09 - 2014-11-13 17:47 - 00000000 __SHD C:\Users\Ahrendt\AppData\Local\EmieBrowserModeList
2015-06-13 12:09 - 2014-04-23 11:45 - 00000000 __SHD C:\Users\Ahrendt\AppData\Local\EmieUserList
2015-06-13 12:09 - 2014-04-23 11:45 - 00000000 __SHD C:\Users\Ahrendt\AppData\Local\EmieSiteList
2015-06-13 12:06 - 2010-03-15 15:02 - 00000000 ____D C:\Program Files (x86)\Google
2015-06-13 11:55 - 2014-08-06 08:55 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-13 11:54 - 2012-12-25 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-06-13 11:54 - 2012-12-25 16:28 - 00000000 ____D C:\Program Files (x86)\Avira
2015-06-12 08:02 - 2013-01-22 15:18 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-12 08:01 - 2013-01-22 15:18 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-12 08:01 - 2013-01-22 15:18 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-11 10:18 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-11 03:39 - 2009-07-14 06:45 - 00414912 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-11 03:36 - 2014-12-12 04:31 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-11 03:36 - 2014-05-07 03:01 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-11 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-11 03:18 - 2010-03-15 14:52 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-11 03:16 - 2013-08-16 03:02 - 00000000 ____D C:\Windows\system32\MRT
2015-06-11 03:05 - 2010-11-14 16:32 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-10 15:17 - 2013-03-28 10:06 - 00153256 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-06-10 15:17 - 2013-03-28 10:06 - 00132656 _____ C:\Windows\system32\Drivers\avipbb.sys
2015-06-09 16:34 - 2014-03-06 20:56 - 00000000 ___RD C:\Users\Franzi\Dropbox
2015-06-09 16:34 - 2014-03-06 20:51 - 00000000 ____D C:\Users\Franzi\AppData\Roaming\Dropbox
2015-06-09 16:33 - 2010-10-03 19:14 - 00000000 ____D C:\Users\Franzi\Tracing
2015-06-07 20:51 - 2013-12-25 19:02 - 00000000 ____D C:\Users\Ahrendt\AppData\Local\iCopy
2015-05-26 19:16 - 2014-04-04 15:06 - 00000000 ____D C:\Users\Kathi\AppData\Local\Windows Live

==================== Files in the root of some directories =======

2011-05-02 14:33 - 2011-08-03 11:56 - 0005120 _____ () C:\Users\Ahrendt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-06-19 18:27 - 2015-06-24 21:53 - 0007655 _____ () C:\Users\Ahrendt\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\Ahrendt\AppData\Local\Temp\avgnt.exe
C:\Users\Ahrendt\AppData\Local\Temp\Quarantine.exe
C:\Users\Ahrendt\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys
[2011-05-25 18:06] - [2010-11-20 15:34] - 0295808 ____A () D41D8CD98F00B204E9800998ECF8427E

C:\Windows\System32\Drivers\volsnap.sys No Company Name <===== ATTENTION!



testsigning: ==> testsigning is on. Check for possible unsigned rootkit driver <===== ATTENTION!


LastRegBack: 2015-02-15 18:16

==================== End of log ============================
--- --- ---


Bis hierhin erst einmal vielen Dank.

Lässt sich eigentlich irgenwie feststellen, auf welchem Weg das Zeug auf dem Rechner gelandet ist ?

Beim nachsehen auf dem PC taucht unter "C:\Windows\system32\drivers" noch immer die Datei 2b5b93e885bc6a00.sys auf, die als Träger des Rootkit identifiziert wurde

Irgendwie blöde - oder normal ??

cosinus 25.06.2015 08:22
Rootkit ist noch da. Bitte mit MBAR und TDSS-Killer fortfahren:

Okay, dann Kontrollscans mit MBAM und ESET bitte:

1. Schritt: MBAR - Malwarebytes Anti-Rootkit

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers


2. Schritt: Kaspersky TDSS-Killer

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Joahpi 25.06.2015 18:52
Danke für die Hilfe, ich mache nun weiter

cosinus 25.06.2015 18:56
Ok, aber lass bitte solche Zwischenrufe, poste nur wenn es Probleme gibt oder wenn du die Logs hast (diese dann auch posten in CODE-Tags)

Joahpi 25.06.2015 20:54
nun habe ich die logs

zunächst der erste Durchlauf mit gefundener malware

Code:
Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org

Database version:
  main:    v2015.06.25.04
  rootkit: v2015.06.22.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.17843
Ahrendt :: AHRENDT-PC [administrator]

25.06.2015 19:51:06
mbar-log-2015-06-25 (19-51-06).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 574344
Time elapsed: 26 minute(s), 22 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 2
HKLM\SOFTWARE\CLASSES\CLSID\{F9E1BD9A-84B5-4D12-9195-0B3E7D86FD35} (Trojan.Agent.ED) -> Delete on reboot. [d315fec093f71e186cb088e9986add23]
HKCU\SOFTWARE\CLASSES\CLSID\{F9E1BD9A-84B5-4D12-9195-0B3E7D86FD35} (Trojan.Agent.ED) -> Delete on reboot. [d315fec093f71e186cb088e9986add23]

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\WINDOWS\SYSTEM32\drivers\2b5b93e885bc6a00.sys (Rootkit.Necurs.R.64) -> Delete on reboot. [d2f5b66db058df5ed5fb0156c3a12f06]
C:\ProgramData\{CA2FACF7-9029-4A21-892B-E7F60B39FF1A}\kdcom.dll (Trojan.Agent.ED) -> Delete on reboot. [d315fec093f71e186cb088e9986add23]

Physical Sectors Detected: 0
(No malicious items detected)

(end)
nun der saubere
Code:
Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org

Database version:
  main:    v2015.06.25.05
  rootkit: v2015.06.22.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.17843
Ahrendt :: AHRENDT-PC [administrator]

25.06.2015 21:11:37
mbar-log-2015-06-25 (21-11-37).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 574942
Time elapsed: 25 minute(s), 40 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
und zu guter letzt

Code:
21:45:52.0182 0x1200  TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
21:45:56.0914 0x1200  ============================================================
21:45:56.0914 0x1200  Current date / time: 2015/06/25 21:45:56.0914
21:45:56.0914 0x1200  SystemInfo:
21:45:56.0914 0x1200 
21:45:56.0914 0x1200  OS Version: 6.1.7601 ServicePack: 1.0
21:45:56.0914 0x1200  Product type: Workstation
21:45:56.0914 0x1200  ComputerName: AHRENDT-PC
21:45:56.0914 0x1200  UserName: Ahrendt
21:45:56.0914 0x1200  Windows directory: C:\Windows
21:45:56.0914 0x1200  System windows directory: C:\Windows
21:45:56.0914 0x1200  Running under WOW64
21:45:56.0914 0x1200  Processor architecture: Intel x64
21:45:56.0914 0x1200  Number of processors: 2
21:45:56.0914 0x1200  Page size: 0x1000
21:45:56.0914 0x1200  Boot type: Normal boot
21:45:56.0914 0x1200  ============================================================
21:46:03.0578 0x1200  KLMD registered as C:\Windows\system32\drivers\77005251.sys
21:46:04.0367 0x1200  System UUID: {528DDFE7-1764-F35A-3BEF-252215B9CA6F}
21:46:05.0103 0x1200  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:46:05.0148 0x1200  Drive \Device\Harddisk2\DR2 - Size: 0x78741000 ( 1.88 Gb ), SectorSize: 0x200, Cylinders: 0xF5, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
21:46:05.0164 0x1200  ============================================================
21:46:05.0164 0x1200  \Device\Harddisk0\DR0:
21:46:05.0177 0x1200  MBR partitions:
21:46:05.0177 0x1200  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2A00800, BlocksNum 0x32000
21:46:05.0177 0x1200  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x2A32800, BlocksNum 0x38DE7000
21:46:05.0177 0x1200  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x3B819800, BlocksNum 0x38EEC800
21:46:05.0177 0x1200  \Device\Harddisk2\DR2:
21:46:05.0178 0x1200  MBR partitions:
21:46:05.0178 0x1200  ============================================================
21:46:05.0452 0x1200  C: <-> \Device\Harddisk0\DR0\Partition2
21:46:05.0526 0x1200  D: <-> \Device\Harddisk0\DR0\Partition3
21:46:05.0526 0x1200  ============================================================
21:46:05.0526 0x1200  Initialize success
21:46:05.0526 0x1200  ============================================================
21:46:28.0381 0x12d0  ============================================================
21:46:28.0382 0x12d0  Scan started
21:46:28.0382 0x12d0  Mode: Manual; SigCheck; TDLFS;
21:46:28.0382 0x12d0  ============================================================
21:46:28.0382 0x12d0  KSN ping started
21:46:31.0295 0x12d0  KSN ping finished: true
21:46:56.0575 0x12d0  ================ Scan system memory ========================
21:46:56.0575 0x12d0  System memory - ok
21:46:56.0576 0x12d0  ================ Scan services =============================
21:46:56.0698 0x12d0  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
21:46:56.0892 0x12d0  1394ohci - ok
21:46:56.0937 0x12d0  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
21:46:56.0957 0x12d0  ACPI - ok
21:46:56.0991 0x12d0  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
21:46:57.0051 0x12d0  AcpiPmi - ok
21:46:57.0134 0x12d0  [ 34400005DE52842C4D6D4EE978B4D7CE, E7C3121812284B9FE6A12910C67C98354BAF5DB74865A5B4E0C2E64852BDB50A ] AdobeActiveFileMonitor8.0 c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
21:46:57.0148 0x12d0  AdobeActiveFileMonitor8.0 - ok
21:46:57.0260 0x12d0  [ 00CC35F515079F5F94FABC3AC5C7D363, 7CE8B1715009602059DEDD6CBCA9C18EF079EDA344E7809813D6C0A395622B82 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
21:46:57.0282 0x12d0  AdobeFlashPlayerUpdateSvc - ok
21:46:57.0327 0x12d0  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx        C:\Windows\system32\DRIVERS\adp94xx.sys
21:46:57.0351 0x12d0  adp94xx - ok
21:46:57.0375 0x12d0  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci        C:\Windows\system32\DRIVERS\adpahci.sys
21:46:57.0397 0x12d0  adpahci - ok
21:46:57.0420 0x12d0  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320        C:\Windows\system32\DRIVERS\adpu320.sys
21:46:57.0437 0x12d0  adpu320 - ok
21:46:57.0474 0x12d0  [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
21:46:57.0519 0x12d0  AeLookupSvc - ok
21:46:57.0591 0x12d0  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD            C:\Windows\system32\drivers\afd.sys
21:46:57.0637 0x12d0  AFD - ok
21:46:57.0667 0x12d0  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
21:46:57.0681 0x12d0  agp440 - ok
21:46:57.0726 0x12d0  [ 44F360B65C37A42EB5B71C2E5179FDD5, A7E65515FEE1698C96F647111F5C7D009C5FAC9A1F62D027802861A699AF1F93 ] aksdf          C:\Windows\system32\drivers\aksdf.sys
21:46:57.0801 0x12d0  aksdf - ok
21:46:57.0824 0x12d0  [ A56F1B0F967AEF8A82D7771E6D166DEF, 498B2C9AFC8298C0D06FD6278DEA698C2AFEEC419200C1EF8C150ED7CB6FA1E8 ] akshasp        C:\Windows\system32\DRIVERS\akshasp.sys
21:46:57.0852 0x12d0  akshasp - ok
21:46:57.0879 0x12d0  [ 27F2E2C89A1855B063FCAC21EB7D6A73, B6DB303B5A41F8A73D929492699396ADC22F0D4DD9A32A7731D0F85B1B629A4D ] aksusb          C:\Windows\system32\DRIVERS\aksusb.sys
21:46:57.0917 0x12d0  aksusb - ok
21:46:57.0940 0x12d0  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG            C:\Windows\System32\alg.exe
21:46:57.0988 0x12d0  ALG - ok
21:46:58.0034 0x12d0  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
21:46:58.0049 0x12d0  aliide - ok
21:46:58.0078 0x12d0  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
21:46:58.0090 0x12d0  amdide - ok
21:46:58.0111 0x12d0  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8          C:\Windows\system32\DRIVERS\amdk8.sys
21:46:58.0159 0x12d0  AmdK8 - ok
21:46:58.0172 0x12d0  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
21:46:58.0207 0x12d0  AmdPPM - ok
21:46:58.0232 0x12d0  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
21:46:58.0246 0x12d0  amdsata - ok
21:46:58.0263 0x12d0  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
21:46:58.0279 0x12d0  amdsbs - ok
21:46:58.0306 0x12d0  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata        C:\Windows\system32\drivers\amdxata.sys
21:46:58.0317 0x12d0  amdxata - ok
21:46:58.0442 0x12d0  [ 3358CAD1887DDDDD2A36B7796B579292, 40BA1A836276C2AA78914F294661C3C918F2D6DFAA9D6EF3FEB6D1EE3B07F584 ] AntiVirMailService C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
21:46:58.0489 0x12d0  AntiVirMailService - ok
21:46:58.0596 0x12d0  [ 1892E1DB0B6431720B98B52AE9388C28, 141098794D774265662FF0EBB4E938D70ADB8BD54B62B1C9A19F6C3C1F263FEC ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
21:46:58.0614 0x12d0  AntiVirSchedulerService - ok
21:46:58.0699 0x12d0  [ 1892E1DB0B6431720B98B52AE9388C28, 141098794D774265662FF0EBB4E938D70ADB8BD54B62B1C9A19F6C3C1F263FEC ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
21:46:58.0716 0x12d0  AntiVirService - ok
21:46:58.0797 0x12d0  [ 6FD5165364D88FDABE4FA59E1768376F, B82D11E6FCC297F822E29A49D46C9985955C9F5676D107A397B00D0468F93504 ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
21:46:58.0830 0x12d0  AntiVirWebService - ok
21:46:58.0872 0x12d0  [ 90C53BD47979FB8814F465A08B885102, 5EDFC1909FC1FF9133A534DFCC5408CF3A777AC41FB21FAD375436E3D86C02EC ] AppID          C:\Windows\system32\drivers\appid.sys
21:46:58.0902 0x12d0  AppID - ok
21:46:58.0922 0x12d0  [ 72D4757510FDA69D729169C00AFC211E, FB9686D0D94EE7C19A3994C29E8331A6EC3020B2980B2CC75F72F3AB25512C15 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
21:46:58.0952 0x12d0  AppIDSvc - ok
21:46:58.0985 0x12d0  [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo        C:\Windows\System32\appinfo.dll
21:46:59.0023 0x12d0  Appinfo - ok
21:46:59.0102 0x12d0  [ A5299D04ED225D64CF07A568A3E1BF8C, 6F7E73893127BADC8C9815E9BCC0EB5F6584E254D0D09A0B6A680704C71E0A90 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
21:46:59.0113 0x12d0  Apple Mobile Device - ok
21:46:59.0143 0x12d0  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc            C:\Windows\system32\DRIVERS\arc.sys
21:46:59.0157 0x12d0  arc - ok
21:46:59.0172 0x12d0  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
21:46:59.0186 0x12d0  arcsas - ok
21:46:59.0335 0x12d0  [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
21:46:59.0423 0x12d0  aspnet_state - ok
21:46:59.0445 0x12d0  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
21:46:59.0564 0x12d0  AsyncMac - ok
21:46:59.0598 0x12d0  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi          C:\Windows\system32\drivers\atapi.sys
21:46:59.0609 0x12d0  atapi - ok
21:46:59.0647 0x12d0  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:46:59.0700 0x12d0  AudioEndpointBuilder - ok
21:46:59.0737 0x12d0  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll
21:46:59.0763 0x12d0  AudioSrv - ok
21:46:59.0837 0x12d0  [ CC1ABBD9E61B7AA5CCBB45EA87CB033F, 4E5DE485833721E19B36455C017B9D908BAA7D12637A878934A0FAF2326E000B ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
21:46:59.0911 0x12d0  avgntflt - ok
21:46:59.0946 0x12d0  [ 07C8454D3A94BA478752FAFA2B94E0FE, EB19396D4A6D51D6C33ED55C8EF0259045801D39CCE2945931F9163D6006C133 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
21:46:59.0959 0x12d0  avipbb - ok
21:47:00.0046 0x12d0  [ 8884C9DDA76D76BADFD390B33D1DE70D, 0C7EE611C6E8255A280F1C13F7BFE493679E78D05986FB47BF5EF799637F6584 ] Avira.ServiceHost C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
21:47:00.0060 0x12d0  Avira.ServiceHost - ok
21:47:00.0096 0x12d0  [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
21:47:00.0107 0x12d0  avkmgr - ok
21:47:00.0183 0x12d0  [ 53A05544AB5D067B56F133225DBFC21B, FC0DA4C6825B05E1C8A832D17035B58E41E8D25C3E208166D3F7A004C8B1F0F4 ] avmike          C:\Program Files\FRITZ!Fernzugang\avmike.exe
21:47:00.0202 0x12d0  avmike - ok
21:47:00.0263 0x12d0  [ 13253E5E3B6BDF945B63B336A8C9489B, 671C716E43F89D4BDDAA2BE045CDEBBB569C85BC2BA334E1F550187B79A7740D ] avnetflt        C:\Windows\system32\DRIVERS\avnetflt.sys
21:47:00.0274 0x12d0  avnetflt - ok
21:47:00.0334 0x12d0  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
21:47:00.0391 0x12d0  AxInstSV - ok
21:47:00.0423 0x12d0  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv        C:\Windows\system32\DRIVERS\bxvbda.sys
21:47:00.0474 0x12d0  b06bdrv - ok
21:47:00.0505 0x12d0  [ A375AA8F1549BA51CFBCBD9A4AE0C2D3, D8F2DB410485C49AAE69353F8AD2E07DA8FCCF1B8F1FC5E54E200B4364B7827E ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
21:47:00.0523 0x12d0  b57nd60a - ok
21:47:00.0650 0x12d0  [ 5F685973740F289BE3C809952DB8408B, 4C0A0C06BB2B6B1879A860B0D68289A55F80CF74947FCCE7815F1D8121232F62 ] BBSvc          C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe
21:47:00.0665 0x12d0  BBSvc - ok
21:47:00.0739 0x12d0  [ 76F78018F45E7F92164CEA5020176933, 76E1CA6E198417F3749864721C43913189A7EA07B5ED320DE543B2037CEA3D65 ] BBUpdate        C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe
21:47:00.0757 0x12d0  BBUpdate - ok
21:47:00.0789 0x12d0  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
21:47:00.0831 0x12d0  BDESVC - ok
21:47:00.0868 0x12d0  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
21:47:00.0925 0x12d0  Beep - ok
21:47:00.0985 0x12d0  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE            C:\Windows\System32\bfe.dll
21:47:01.0051 0x12d0  BFE - ok
21:47:01.0102 0x12d0  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\system32\qmgr.dll
21:47:01.0281 0x12d0  BITS - ok
21:47:01.0298 0x12d0  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
21:47:01.0326 0x12d0  blbdrive - ok
21:47:01.0376 0x12d0  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
21:47:01.0398 0x12d0  Bonjour Service - ok
21:47:01.0427 0x12d0  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
21:47:01.0451 0x12d0  bowser - ok
21:47:01.0467 0x12d0  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
21:47:01.0564 0x12d0  BrFiltLo - ok
21:47:01.0578 0x12d0  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
21:47:01.0598 0x12d0  BrFiltUp - ok
21:47:01.0624 0x12d0  [ 5C2F352A4E961D72518261257AAE204B, 9EE1001E1D46A414A7A86FE1DBBE232203E26F54D9EF43ED31ED8EACD4D09853 ] BridgeMP        C:\Windows\system32\DRIVERS\bridge.sys
21:47:01.0670 0x12d0  BridgeMP - ok
21:47:01.0714 0x12d0  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser        C:\Windows\System32\browser.dll
21:47:01.0752 0x12d0  Browser - ok
21:47:01.0774 0x12d0  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
21:47:01.0816 0x12d0  Brserid - ok
21:47:01.0828 0x12d0  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
21:47:01.0860 0x12d0  BrSerWdm - ok
21:47:01.0882 0x12d0  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
21:47:01.0913 0x12d0  BrUsbMdm - ok
21:47:01.0918 0x12d0  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
21:47:01.0936 0x12d0  BrUsbSer - ok
21:47:01.0953 0x12d0  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
21:47:01.0975 0x12d0  BTHMODEM - ok
21:47:01.0997 0x12d0  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv        C:\Windows\system32\bthserv.dll
21:47:02.0048 0x12d0  bthserv - ok
21:47:02.0059 0x12d0  catchme - ok
21:47:02.0082 0x12d0  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
21:47:02.0121 0x12d0  cdfs - ok
21:47:02.0163 0x12d0  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
21:47:02.0197 0x12d0  cdrom - ok
21:47:02.0245 0x12d0  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc    C:\Windows\System32\certprop.dll
21:47:02.0286 0x12d0  CertPropSvc - ok
21:47:02.0335 0x12d0  [ DC716E2329403300B2477997581BBFD7, 7F910EA0455386790E12370688DDF51F8F87DB8141E645202B457068837C69B2 ] certsrv        C:\Program Files\FRITZ!Fernzugang\certsrv.exe
21:47:02.0347 0x12d0  certsrv - ok
21:47:02.0363 0x12d0  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
21:47:02.0387 0x12d0  circlass - ok
21:47:02.0431 0x12d0  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys
21:47:02.0451 0x12d0  CLFS - ok
21:47:02.0519 0x12d0  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:47:02.0545 0x12d0  clr_optimization_v2.0.50727_32 - ok
21:47:02.0581 0x12d0  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
21:47:02.0599 0x12d0  clr_optimization_v2.0.50727_64 - ok
21:47:02.0691 0x12d0  [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:47:02.0739 0x12d0  clr_optimization_v4.0.30319_32 - ok
21:47:02.0759 0x12d0  [ 4AEDAB50F83580D0B4D6CF78191F92AA, D113C47013B018B45161911B96E93AF96A2F3B34FA47061BF6E7A71FBA03194A ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
21:47:02.0815 0x12d0  clr_optimization_v4.0.30319_64 - ok
21:47:02.0820 0x12d0  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
21:47:02.0837 0x12d0  CmBatt - ok
21:47:02.0856 0x12d0  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
21:47:02.0869 0x12d0  cmdide - ok
21:47:02.0895 0x12d0  [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG            C:\Windows\system32\Drivers\cng.sys
21:47:02.0932 0x12d0  CNG - ok
21:47:02.0955 0x12d0  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
21:47:02.0969 0x12d0  Compbatt - ok
21:47:03.0001 0x12d0  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
21:47:03.0099 0x12d0  CompositeBus - ok
21:47:03.0113 0x12d0  COMSysApp - ok
21:47:03.0132 0x12d0  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk        C:\Windows\system32\DRIVERS\crcdisk.sys
21:47:03.0144 0x12d0  crcdisk - ok
21:47:03.0208 0x12d0  [ 1CD76A83B9E8E9A5A3519B39E28354D9, F9931743B99820FFBFB13136DFFD92F86802D543F9D8478648CDC554FB38899D ] CryptSvc        C:\Windows\system32\cryptsvc.dll
21:47:03.0578 0x12d0  CryptSvc - ok
21:47:03.0764 0x12d0  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
21:47:03.0831 0x12d0  DcomLaunch - ok
21:47:03.0863 0x12d0  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc      C:\Windows\System32\defragsvc.dll
21:47:03.0918 0x12d0  defragsvc - ok
21:47:03.0946 0x12d0  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
21:47:03.0979 0x12d0  DfsC - ok
21:47:04.0008 0x12d0  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
21:47:04.0033 0x12d0  Dhcp - ok
21:47:04.0128 0x12d0  [ AA5319FA8602676B5D3A2B4A1355896D, 57532E16FF0DDE3D62B6B6DC35E2598DD453140E9277247965A1E835645E588A ] DiagTrack      C:\Windows\system32\diagtrack.dll
21:47:04.0265 0x12d0  DiagTrack - ok
21:47:04.0281 0x12d0  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
21:47:04.0330 0x12d0  discache - ok
21:47:04.0352 0x12d0  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\DRIVERS\disk.sys
21:47:04.0365 0x12d0  Disk - ok
21:47:04.0410 0x12d0  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
21:47:04.0434 0x12d0  Dnscache - ok
21:47:04.0475 0x12d0  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc        C:\Windows\System32\dot3svc.dll
21:47:04.0512 0x12d0  dot3svc - ok
21:47:04.0546 0x12d0  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS            C:\Windows\system32\dps.dll
21:47:04.0580 0x12d0  DPS - ok
21:47:04.0618 0x12d0  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
21:47:04.0662 0x12d0  drmkaud - ok
21:47:04.0713 0x12d0  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
21:47:04.0758 0x12d0  DXGKrnl - ok
21:47:04.0786 0x12d0  EagleX64 - ok
21:47:04.0807 0x12d0  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost        C:\Windows\System32\eapsvc.dll
21:47:04.0852 0x12d0  EapHost - ok
21:47:04.0969 0x12d0  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv          C:\Windows\system32\DRIVERS\evbda.sys
21:47:05.0091 0x12d0  ebdrv - ok
21:47:05.0132 0x12d0  [ 17A6A9AAD04CCC6EE53290585BFC43AF, E4901D86C6470D21ABA0F6D9615A613E5C74A3FEF931E497F51B6AFA5715332B ] EFS            C:\Windows\System32\lsass.exe
21:47:05.0181 0x12d0  EFS - ok
21:47:05.0276 0x12d0  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
21:47:05.0343 0x12d0  ehRecvr - ok
21:47:05.0378 0x12d0  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched        C:\Windows\ehome\ehsched.exe
21:47:05.0411 0x12d0  ehSched - ok
21:47:05.0442 0x12d0  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor        C:\Windows\system32\DRIVERS\elxstor.sys
21:47:05.0466 0x12d0  elxstor - ok
21:47:05.0503 0x12d0  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
21:47:05.0535 0x12d0  ErrDev - ok
21:47:05.0575 0x12d0  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem    C:\Windows\system32\es.dll
21:47:05.0644 0x12d0  EventSystem - ok
21:47:05.0681 0x12d0  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat          C:\Windows\system32\drivers\exfat.sys
21:47:05.0718 0x12d0  exfat - ok
21:47:05.0759 0x12d0  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat        C:\Windows\system32\drivers\fastfat.sys
21:47:05.0802 0x12d0  fastfat - ok
21:47:05.0848 0x12d0  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax            C:\Windows\system32\fxssvc.exe
21:47:05.0891 0x12d0  Fax - ok
21:47:05.0904 0x12d0  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc            C:\Windows\system32\DRIVERS\fdc.sys
21:47:05.0917 0x12d0  fdc - ok
21:47:05.0930 0x12d0  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost        C:\Windows\system32\fdPHost.dll
21:47:05.0977 0x12d0  fdPHost - ok
21:47:05.0991 0x12d0  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
21:47:06.0034 0x12d0  FDResPub - ok
21:47:06.0050 0x12d0  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
21:47:06.0062 0x12d0  FileInfo - ok
21:47:06.0072 0x12d0  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
21:47:06.0103 0x12d0  Filetrace - ok
21:47:06.0151 0x12d0  [ ABEDFD48AC042C6AAAD32452E77217A1, BC45A1C36BDBC20EF4E7D3CFB5368912382D964CB34D050ED255F56307F4C910 ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
21:47:06.0194 0x12d0  FLEXnet Licensing Service - ok
21:47:06.0216 0x12d0  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
21:47:06.0229 0x12d0  flpydisk - ok
21:47:06.0273 0x12d0  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
21:47:06.0290 0x12d0  FltMgr - ok
21:47:06.0372 0x12d0  [ E612E86FA15EA1EF9A52433A2743C447, 8A66164541D2EE2334B6DE3995C31138EA85E3A06BC7FD901E60D345E4E1E8A8 ] FontCache      C:\Windows\system32\FntCache.dll
21:47:06.0453 0x12d0  FontCache - ok
21:47:06.0519 0x12d0  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:47:06.0540 0x12d0  FontCache3.0.0.0 - ok
21:47:06.0582 0x12d0  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
21:47:06.0620 0x12d0  FsDepends - ok
21:47:06.0672 0x12d0  [ 07DA62C960DDCCC2D35836AEAB4FC578, C67A29E928AF59BF7FB573FAC2176C5598F595406AA90DDB4A364A15BC89A6C4 ] fssfltr        C:\Windows\system32\DRIVERS\fssfltr.sys
21:47:06.0685 0x12d0  fssfltr - ok
21:47:06.0772 0x12d0  [ 28DDEEEC44E988657B732CF404D504CB, 47F83018E5449CDCED3DD447991788EBAAC92C418D4513FBA9408C45E9AB8E7E ] fsssvc          C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
21:47:06.0837 0x12d0  fsssvc - ok
21:47:06.0883 0x12d0  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
21:47:06.0898 0x12d0  Fs_Rec - ok
21:47:06.0933 0x12d0  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
21:47:06.0955 0x12d0  fvevol - ok
21:47:06.0972 0x12d0  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
21:47:06.0988 0x12d0  gagp30kx - ok
21:47:07.0216 0x12d0  [ 6858C318E8DAA40E747E6FB9B214E104, B9EAA473FE9FDB1E3BFE3A3A98B6E1999E315DBCB028BB0771F1AA1D6C72F75A ] GameConsoleService C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe
21:47:14.0964 0x12d0  GameConsoleService - ok
21:47:15.0048 0x12d0  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM    C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
21:47:15.0066 0x12d0  GEARAspiWDM - ok
21:47:15.0171 0x12d0  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc          C:\Windows\System32\gpsvc.dll
21:47:15.0300 0x12d0  gpsvc - ok
21:47:15.0596 0x12d0  [ 816FD5A6F3C2F3D600900096632FC60E, D92401C4B56663F8A12B6390562608A125713408B00266C53844129679E48E9C ] Greg_Service    C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe
21:47:15.0642 0x12d0  Greg_Service - ok
21:47:15.0897 0x12d0  [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdate        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:47:15.0955 0x12d0  gupdate - ok
21:47:16.0016 0x12d0  [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:47:16.0026 0x12d0  gupdatem - ok
21:47:16.0051 0x12d0  [ 5D4BC124FAAE6730AC002CDB67BF1A1C, 00294F4DC7D17F6DD2A22B9C3299BED40146BA45C972367154D20DB502472551 ] gusvc          C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
21:47:16.0065 0x12d0  gusvc - ok
21:47:16.0125 0x12d0  [ D619BA1712B83D14149850E758B835AD, AD18807EC4DA6FA8C6846C1A0D914071FD59BD3273AFC103E5F2A7141F18C5F4 ] hardlock        C:\Windows\system32\drivers\hardlock.sys
21:47:16.0152 0x12d0  hardlock - ok
21:47:16.0181 0x12d0  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
21:47:16.0207 0x12d0  hcw85cir - ok
21:47:16.0678 0x12d0  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:47:16.0764 0x12d0  HdAudAddService - ok
21:47:16.0777 0x12d0  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
21:47:16.0814 0x12d0  HDAudBus - ok
21:47:16.0831 0x12d0  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt        C:\Windows\system32\DRIVERS\HidBatt.sys
21:47:16.0856 0x12d0  HidBatt - ok
21:47:16.0877 0x12d0  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
21:47:16.0903 0x12d0  HidBth - ok
21:47:16.0916 0x12d0  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr          C:\Windows\system32\DRIVERS\hidir.sys
21:47:16.0942 0x12d0  HidIr - ok
21:47:17.0001 0x12d0  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv        C:\Windows\System32\hidserv.dll
21:47:17.0044 0x12d0  hidserv - ok
21:47:17.0095 0x12d0  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
21:47:17.0122 0x12d0  HidUsb - ok
21:47:17.0156 0x12d0  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
21:47:17.0203 0x12d0  hkmsvc - ok
21:47:17.0316 0x12d0  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:47:17.0491 0x12d0  HomeGroupListener - ok
21:47:17.0622 0x12d0  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:47:17.0701 0x12d0  HomeGroupProvider - ok
21:47:17.0849 0x12d0  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
21:47:17.0879 0x12d0  HpSAMD - ok
21:47:18.0194 0x12d0  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
21:47:18.0267 0x12d0  HTTP - ok
21:47:18.0383 0x12d0  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
21:47:18.0451 0x12d0  hwpolicy - ok
21:47:18.0715 0x12d0  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
21:47:18.0747 0x12d0  i8042prt - ok
21:47:18.0972 0x12d0  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
21:47:19.0009 0x12d0  iaStorV - ok
21:47:19.0419 0x12d0  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc          C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
21:47:19.0589 0x12d0  idsvc - ok
21:47:20.0798 0x12d0  IEEtwCollectorService - ok
21:47:24.0272 0x12d0  [ A87261EF1546325B559374F5689CF5BC, 8DE48A8A13A32AAAC54CDDF58F3F61BE3E2802C1D9CA1CA98E57EB0D65FB6002 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
21:47:24.0589 0x12d0  igfx - ok
21:47:24.0746 0x12d0  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp          C:\Windows\system32\DRIVERS\iirsp.sys
21:47:24.0772 0x12d0  iirsp - ok
21:47:24.0911 0x12d0  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
21:47:25.0040 0x12d0  IKEEXT - ok
21:47:25.0378 0x12d0  [ 52D9171838BB92319F23656F502916E9, 882FDD02E2036412C8B9DE979EBB6B63461B1260CF7109BA2D6A7E9BC8F85BF7 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
21:47:25.0444 0x12d0  IntcAzAudAddService - ok
21:47:25.0495 0x12d0  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
21:47:25.0535 0x12d0  intelide - ok
21:47:25.0597 0x12d0  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
21:47:25.0652 0x12d0  intelppm - ok
21:47:25.0743 0x12d0  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
21:47:25.0820 0x12d0  IPBusEnum - ok
21:47:25.0898 0x12d0  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:47:25.0980 0x12d0  IpFilterDriver - ok
21:47:26.0044 0x12d0  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
21:47:26.0142 0x12d0  iphlpsvc - ok
21:47:26.0176 0x12d0  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
21:47:26.0207 0x12d0  IPMIDRV - ok
21:47:26.0268 0x12d0  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
21:47:26.0357 0x12d0  IPNAT - ok
21:47:26.0601 0x12d0  [ 0F261EC4F514926177C70C1832374231, 7E61B89FE2651C0C7951E10454267174550677DEAB1C497571A9B0B583687304 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
21:47:26.0723 0x12d0  iPod Service - ok
21:47:26.0771 0x12d0  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
21:47:26.0824 0x12d0  IRENUM - ok
21:47:26.0855 0x12d0  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
21:47:26.0866 0x12d0  isapnp - ok
21:47:26.0901 0x12d0  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
21:47:26.0919 0x12d0  iScsiPrt - ok
21:47:26.0945 0x12d0  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
21:47:26.0958 0x12d0  kbdclass - ok
21:47:26.0983 0x12d0  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
21:47:27.0009 0x12d0  kbdhid - ok
21:47:27.0031 0x12d0  [ 17A6A9AAD04CCC6EE53290585BFC43AF, E4901D86C6470D21ABA0F6D9615A613E5C74A3FEF931E497F51B6AFA5715332B ] KeyIso          C:\Windows\system32\lsass.exe
21:47:27.0045 0x12d0  KeyIso - ok
21:47:27.0080 0x12d0  [ BF69D973523D539A35807946C6DA7E16, 38F2C59B0857131961DBEA48C4A5DFA9BE7B564941935086B8DC8DBEF896F3EC ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
21:47:27.0094 0x12d0  KSecDD - ok
21:47:27.0105 0x12d0  [ 272C27711C8AA6E7815EE33F8ACA9C66, 0A5A10A7A3E87DB92E06395A6676B94FE8B7AD6704864075D443CDC9BABDB4DF ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
21:47:27.0121 0x12d0  KSecPkg - ok
21:47:27.0144 0x12d0  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
21:47:27.0183 0x12d0  ksthunk - ok
21:47:27.0224 0x12d0  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm          C:\Windows\system32\msdtckrm.dll
21:47:27.0285 0x12d0  KtmRm - ok
21:47:27.0326 0x12d0  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\System32\srvsvc.dll
21:47:27.0367 0x12d0  LanmanServer - ok
21:47:27.0408 0x12d0  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:47:27.0443 0x12d0  LanmanWorkstation - ok
21:47:27.0474 0x12d0  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
21:47:27.0533 0x12d0  lltdio - ok
21:47:27.0559 0x12d0  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc        C:\Windows\System32\lltdsvc.dll
21:47:27.0605 0x12d0  lltdsvc - ok
21:47:27.0640 0x12d0  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts        C:\Windows\System32\lmhsvc.dll
21:47:27.0679 0x12d0  lmhosts - ok
21:47:27.0697 0x12d0  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
21:47:27.0711 0x12d0  LSI_FC - ok
21:47:27.0731 0x12d0  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS        C:\Windows\system32\DRIVERS\lsi_sas.sys
21:47:27.0745 0x12d0  LSI_SAS - ok
21:47:27.0756 0x12d0  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
21:47:27.0775 0x12d0  LSI_SAS2 - ok
21:47:27.0787 0x12d0  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
21:47:27.0802 0x12d0  LSI_SCSI - ok
21:47:27.0829 0x12d0  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv          C:\Windows\system32\drivers\luafv.sys
21:47:27.0868 0x12d0  luafv - ok
21:47:27.0988 0x12d0  [ 0307CF4184F4F22DB75F36ACCCEF7ED1, 32EAC5DADDD70175EA7AD4FC0A8624BECB138B9ED9E66AF74AC4A06EEB3EB4B7 ] mbamchameleon  C:\Windows\system32\drivers\mbamchameleon.sys
21:47:28.0038 0x12d0  mbamchameleon - ok
21:47:28.0131 0x12d0  [ 1E9E32AEC3E1EB1B31B8169F33168B56, 39114585E1FDBBA31E1F781C6A627281907183F94626EB347B08D1F78992ED2A ] MBAMProtector  C:\Windows\system32\drivers\mbam.sys
21:47:28.0160 0x12d0  MBAMProtector - ok
21:47:28.0570 0x12d0  [ 2B983F067AEE3F9EB4DF5E97F45D21D1, 0B9ED0E91FF01A5445927650113E320C3C0EA16F1401AA55A509DDBF704DF22F ] MBAMService    C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
21:47:28.0648 0x12d0  MBAMService - ok
21:47:28.0703 0x12d0  [ F49FB3C88E263AE9A246593B0BB29294, FB53D6FA4A98B98334DCFF81E40712265256D31A9E9FF36022887BABD50F39EB ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
21:47:28.0740 0x12d0  MBAMWebAccessControl - ok
21:47:28.0767 0x12d0  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
21:47:28.0792 0x12d0  Mcx2Svc - ok
21:47:28.0828 0x12d0  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas        C:\Windows\system32\DRIVERS\megasas.sys
21:47:28.0869 0x12d0  megasas - ok
21:47:29.0101 0x12d0  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
21:47:29.0141 0x12d0  MegaSR - ok
21:47:29.0297 0x12d0  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS          C:\Windows\system32\mmcss.dll
21:47:29.0385 0x12d0  MMCSS - ok
21:47:29.0406 0x12d0  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem          C:\Windows\system32\drivers\modem.sys
21:47:29.0453 0x12d0  Modem - ok
21:47:29.0505 0x12d0  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
21:47:29.0542 0x12d0  monitor - ok
21:47:29.0618 0x12d0  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
21:47:29.0651 0x12d0  mouclass - ok
21:47:29.0672 0x12d0  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
21:47:29.0743 0x12d0  mouhid - ok
21:47:29.0792 0x12d0  [ 87BCD1034CBF33537D4D4C251D39BA26, CB9DD235B62B79383F99873D75E26EEA5EE7914CA89E4B75992207F83420437F ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
21:47:29.0831 0x12d0  mountmgr - ok
21:47:29.0878 0x12d0  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
21:47:29.0917 0x12d0  mpio - ok
21:47:29.0955 0x12d0  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
21:47:30.0015 0x12d0  mpsdrv - ok
21:47:30.0181 0x12d0  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
21:47:30.0285 0x12d0  MpsSvc - ok
21:47:30.0371 0x12d0  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
21:47:30.0468 0x12d0  MRxDAV - ok
21:47:30.0544 0x12d0  [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
21:47:30.0650 0x12d0  mrxsmb - ok
21:47:30.0705 0x12d0  [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:47:30.0761 0x12d0  mrxsmb10 - ok
21:47:30.0781 0x12d0  [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:47:30.0821 0x12d0  mrxsmb20 - ok
21:47:30.0863 0x12d0  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
21:47:30.0889 0x12d0  msahci - ok
21:47:30.0998 0x12d0  [ A592A054D78750B4D73ABAA4C94DECDF, 40B135C9F9EE698EC78BD19BD18353AE2CF4D020DDB9CFC37CD2FDBF7602614A ] MSCamSvc        C:\Program Files\Microsoft LifeCam\MSCamS64.exe
21:47:31.0013 0x12d0  MSCamSvc - ok
21:47:31.0041 0x12d0  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
21:47:31.0057 0x12d0  msdsm - ok
21:47:31.0072 0x12d0  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC          C:\Windows\System32\msdtc.exe
21:47:31.0102 0x12d0  MSDTC - ok
21:47:31.0119 0x12d0  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
21:47:31.0158 0x12d0  Msfs - ok
21:47:31.0178 0x12d0  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
21:47:31.0280 0x12d0  mshidkmdf - ok
21:47:31.0294 0x12d0  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
21:47:31.0321 0x12d0  msisadrv - ok
21:47:31.0396 0x12d0  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
21:47:31.0461 0x12d0  MSiSCSI - ok
21:47:31.0467 0x12d0  msiserver - ok
21:47:31.0543 0x12d0  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
21:47:31.0615 0x12d0  MSKSSRV - ok
21:47:31.0676 0x12d0  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
21:47:31.0758 0x12d0  MSPCLOCK - ok
21:47:31.0790 0x12d0  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
21:47:31.0883 0x12d0  MSPQM - ok
21:47:31.0939 0x12d0  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
21:47:31.0972 0x12d0  MsRPC - ok
21:47:32.0026 0x12d0  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
21:47:32.0055 0x12d0  mssmbios - ok
21:47:32.0079 0x12d0  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
21:47:32.0122 0x12d0  MSTEE - ok
21:47:32.0150 0x12d0  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
21:47:32.0201 0x12d0  MTConfig - ok
21:47:32.0288 0x12d0  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup            C:\Windows\system32\Drivers\mup.sys
21:47:32.0324 0x12d0  Mup - ok
21:47:32.0502 0x12d0  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
21:47:32.0606 0x12d0  napagent - ok
21:47:32.0797 0x12d0  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
21:47:32.0887 0x12d0  NativeWifiP - ok
21:47:33.0193 0x12d0  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
21:47:33.0241 0x12d0  NDIS - ok
21:47:33.0310 0x12d0  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
21:47:33.0380 0x12d0  NdisCap - ok
21:47:33.0414 0x12d0  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
21:47:33.0497 0x12d0  NdisTapi - ok
21:47:33.0573 0x12d0  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
21:47:33.0686 0x12d0  Ndisuio - ok
21:47:33.0721 0x12d0  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
21:47:33.0830 0x12d0  NdisWan - ok
21:47:33.0914 0x12d0  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
21:47:34.0012 0x12d0  NDProxy - ok
21:47:34.0718 0x12d0  [ 7D2633295EB6FF2B938185874884059D, B3A4E52ABCB2E2720D8ADB0B68C222D4AB98E838D40B6A731D15EB1D6C9DEA15 ] Nero BackItUp Scheduler 4.0 C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
21:47:34.0761 0x12d0  Nero BackItUp Scheduler 4.0 - ok
21:47:34.0851 0x12d0  [ 6F4607E2333FE21E9E3FF8133A88B35B, F7B7B262D85D03552A8D0F3F91E795B31E3D09020DDA1E3D62A4A3209D916BB6 ] Netaapl        C:\Windows\system32\DRIVERS\netaapl64.sys
21:47:34.0958 0x12d0  Netaapl - ok
21:47:35.0064 0x12d0  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
21:47:35.0182 0x12d0  NetBIOS - ok
21:47:35.0295 0x12d0  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
21:47:35.0360 0x12d0  NetBT - ok
21:47:35.0376 0x12d0  [ 17A6A9AAD04CCC6EE53290585BFC43AF, E4901D86C6470D21ABA0F6D9615A613E5C74A3FEF931E497F51B6AFA5715332B ] Netlogon        C:\Windows\system32\lsass.exe
21:47:35.0389 0x12d0  Netlogon - ok
21:47:35.0535 0x12d0  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
21:47:35.0597 0x12d0  Netman - ok
21:47:35.0668 0x12d0  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:47:35.0949 0x12d0  NetMsmqActivator - ok
21:47:35.0975 0x12d0  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:47:35.0990 0x12d0  NetPipeActivator - ok
21:47:36.0073 0x12d0  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
21:47:36.0161 0x12d0  netprofm - ok
21:47:36.0180 0x12d0  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:47:36.0198 0x12d0  NetTcpActivator - ok
21:47:36.0227 0x12d0  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:47:36.0242 0x12d0  NetTcpPortSharing - ok
21:47:36.0358 0x12d0  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960        C:\Windows\system32\DRIVERS\nfrd960.sys
21:47:36.0382 0x12d0  nfrd960 - ok
21:47:36.0507 0x12d0  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
21:47:36.0549 0x12d0  NlaSvc - ok
21:47:36.0567 0x12d0  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
21:47:36.0606 0x12d0  Npfs - ok
21:47:36.0658 0x12d0  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi            C:\Windows\system32\nsisvc.dll
21:47:36.0717 0x12d0  nsi - ok
21:47:36.0757 0x12d0  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
21:47:36.0808 0x12d0  nsiproxy - ok
21:47:36.0896 0x12d0  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
21:47:36.0972 0x12d0  Ntfs - ok
21:47:36.0989 0x12d0  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
21:47:37.0020 0x12d0  Null - ok
21:47:37.0057 0x12d0  [ AD37248BD442D41C9A896E53EB8A85EE, 9CC50602480544DBD0B873B3444D355CC13CB97EC1BCA97F85668C45DEFE78C1 ] NVHDA          C:\Windows\system32\drivers\nvhda64v.sys
21:47:37.0069 0x12d0  NVHDA - ok
21:47:37.0413 0x12d0  [ FCBA1C22727939E7CFF9EB08FE9692AB, 081FBF38EA17746C5CF2260AD32B62385D4A075476E30CBB9A2AA080F8AA0CA4 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
21:47:37.0781 0x12d0  nvlddmkm - ok
21:47:37.0836 0x12d0  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
21:47:37.0851 0x12d0  nvraid - ok
21:47:37.0878 0x12d0  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
21:47:37.0893 0x12d0  nvstor - ok
21:47:37.0953 0x12d0  [ 10C232F6CFFD51D2332898AE7AE0FF23, 92E5452D8467852C22D702ACAFB5DBFD312A8F72A4353B8D0A9C18AEFCE4B2B2 ] nvsvc          C:\Windows\system32\nvvsvc.exe
21:47:37.0998 0x12d0  nvsvc - ok
21:47:38.0109 0x12d0  [ 4789E020D2617046862D1790FC235FF6, FCFD56DF2CADA830E7B2D4B91D5A9D2FE783B1396CBA124000765168FA5B6574 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
21:47:38.0167 0x12d0  nvUpdatusService - ok
21:47:38.0208 0x12d0  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
21:47:38.0261 0x12d0  nv_agp - ok
21:47:38.0414 0x12d0  [ 9ED2D6751813F5589710A8122CD227B2, 6CC824DFF403E0C43FE036E40EFDD0FD4B95D908EF3C687E21D9AD54491DFE81 ] NWIM            C:\Windows\system32\DRIVERS\avmnwim.sys
21:47:38.0469 0x12d0  NWIM - ok
21:47:38.0613 0x12d0  [ 05965ED689DFF62ED50F3CE86B758985, 6388ED13E8AB12A01656B7B57689B3DB9530E45A388B409E7787D26B0337D44F ] nwtsrv          C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe
21:47:38.0686 0x12d0  nwtsrv - ok
21:47:38.0938 0x12d0  [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv          C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
21:47:38.0984 0x12d0  odserv - ok
21:47:39.0027 0x12d0  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
21:47:39.0041 0x12d0  ohci1394 - ok
21:47:39.0076 0x12d0  [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose            C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:47:39.0089 0x12d0  ose - ok
21:47:39.0122 0x12d0  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
21:47:39.0179 0x12d0  p2pimsvc - ok
21:47:39.0233 0x12d0  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
21:47:39.0308 0x12d0  p2psvc - ok
21:47:39.0349 0x12d0  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport        C:\Windows\system32\DRIVERS\parport.sys
21:47:39.0364 0x12d0  Parport - ok
21:47:39.0399 0x12d0  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr        C:\Windows\system32\drivers\partmgr.sys
21:47:39.0425 0x12d0  partmgr - ok
21:47:39.0479 0x12d0  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll
21:47:39.0521 0x12d0  PcaSvc - ok
21:47:39.0549 0x12d0  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci            C:\Windows\system32\drivers\pci.sys
21:47:39.0574 0x12d0  pci - ok
21:47:39.0665 0x12d0  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
21:47:39.0688 0x12d0  pciide - ok
21:47:39.0729 0x12d0  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
21:47:39.0761 0x12d0  pcmcia - ok
21:47:40.0097 0x12d0  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw            C:\Windows\system32\drivers\pcw.sys
21:47:40.0135 0x12d0  pcw - ok
21:47:40.0331 0x12d0  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
21:47:40.0397 0x12d0  PEAUTH - ok
21:47:40.0649 0x12d0  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
21:47:40.0676 0x12d0  PerfHost - ok
21:47:40.0783 0x12d0  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla            C:\Windows\system32\pla.dll
21:47:40.0964 0x12d0  pla - ok
21:47:41.0042 0x12d0  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
21:47:41.0103 0x12d0  PlugPlay - ok
21:47:41.0113 0x12d0  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
21:47:41.0139 0x12d0  PNRPAutoReg - ok
21:47:41.0151 0x12d0  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
21:47:41.0169 0x12d0  PNRPsvc - ok
21:47:41.0258 0x12d0  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
21:47:41.0361 0x12d0  PolicyAgent - ok
21:47:41.0390 0x12d0  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power          C:\Windows\system32\umpo.dll
21:47:41.0425 0x12d0  Power - ok
21:47:41.0452 0x12d0  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
21:47:41.0498 0x12d0  PptpMiniport - ok
21:47:41.0511 0x12d0  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor      C:\Windows\system32\DRIVERS\processr.sys
21:47:41.0529 0x12d0  Processor - ok
21:47:41.0569 0x12d0  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc        C:\Windows\system32\profsvc.dll
21:47:41.0620 0x12d0  ProfSvc - ok
21:47:41.0631 0x12d0  [ 17A6A9AAD04CCC6EE53290585BFC43AF, E4901D86C6470D21ABA0F6D9615A613E5C74A3FEF931E497F51B6AFA5715332B ] ProtectedStorage C:\Windows\system32\lsass.exe
21:47:41.0643 0x12d0  ProtectedStorage - ok
21:47:41.0694 0x12d0  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
21:47:41.0745 0x12d0  Psched - ok
21:47:41.0771 0x12d0  [ FBF4DB6D53585437E41A113300002A2B, A0145CE87A95DA3775B28A00E741660C26ADE34BBCC7FC502ED809931482C8F2 ] PxHlpa64        C:\Windows\system32\Drivers\PxHlpa64.sys
21:47:41.0781 0x12d0  PxHlpa64 - ok
21:47:41.0836 0x12d0  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
21:47:41.0898 0x12d0  ql2300 - ok
21:47:41.0923 0x12d0  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
21:47:41.0937 0x12d0  ql40xx - ok
21:47:41.0970 0x12d0  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE          C:\Windows\system32\qwave.dll
21:47:41.0991 0x12d0  QWAVE - ok
21:47:42.0008 0x12d0  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
21:47:42.0031 0x12d0  QWAVEdrv - ok
21:47:42.0042 0x12d0  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
21:47:42.0081 0x12d0  RasAcd - ok
21:47:42.0102 0x12d0  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
21:47:42.0149 0x12d0  RasAgileVpn - ok
21:47:42.0164 0x12d0  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto        C:\Windows\System32\rasauto.dll
21:47:42.0200 0x12d0  RasAuto - ok
21:47:42.0242 0x12d0  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
21:47:42.0316 0x12d0  Rasl2tp - ok
21:47:42.0450 0x12d0  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
21:47:42.0499 0x12d0  RasMan - ok
21:47:42.0520 0x12d0  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
21:47:42.0560 0x12d0  RasPppoe - ok
21:47:42.0573 0x12d0  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
21:47:42.0618 0x12d0  RasSstp - ok
21:47:42.0658 0x12d0  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
21:47:42.0706 0x12d0  rdbss - ok
21:47:42.0732 0x12d0  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
21:47:42.0753 0x12d0  rdpbus - ok
21:47:42.0767 0x12d0  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
21:47:42.0798 0x12d0  RDPCDD - ok
21:47:42.0806 0x12d0  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
21:47:42.0857 0x12d0  RDPENCDD - ok
21:47:42.0879 0x12d0  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
21:47:42.0910 0x12d0  RDPREFMP - ok
21:47:43.0007 0x12d0  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
21:47:43.0073 0x12d0  RdpVideoMiniport - ok
21:47:43.0112 0x12d0  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
21:47:43.0167 0x12d0  RDPWD - ok
21:47:43.0223 0x12d0  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
21:47:43.0247 0x12d0  rdyboost - ok
21:47:43.0269 0x12d0  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
21:47:43.0309 0x12d0  RemoteAccess - ok
21:47:43.0329 0x12d0  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
21:47:43.0373 0x12d0  RemoteRegistry - ok
21:47:43.0386 0x12d0  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
21:47:43.0419 0x12d0  RpcEptMapper - ok
21:47:43.0440 0x12d0  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
21:47:43.0453 0x12d0  RpcLocator - ok
21:47:43.0490 0x12d0  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs          C:\Windows\system32\rpcss.dll
21:47:43.0530 0x12d0  RpcSs - ok
21:47:43.0549 0x12d0  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
21:47:43.0588 0x12d0  rspndr - ok
21:47:43.0608 0x12d0  [ 17A6A9AAD04CCC6EE53290585BFC43AF, E4901D86C6470D21ABA0F6D9615A613E5C74A3FEF931E497F51B6AFA5715332B ] SamSs          C:\Windows\system32\lsass.exe
21:47:43.0621 0x12d0  SamSs - ok
21:47:43.0652 0x12d0  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
21:47:43.0665 0x12d0  sbp2port - ok
21:47:43.0684 0x12d0  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
21:47:43.0734 0x12d0  SCardSvr - ok
21:47:43.0778 0x12d0  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
21:47:43.0850 0x12d0  scfilter - ok
21:47:43.0901 0x12d0  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll
21:47:43.0980 0x12d0  Schedule - ok
21:47:44.0023 0x12d0  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc    C:\Windows\System32\certprop.dll
21:47:44.0067 0x12d0  SCPolicySvc - ok
21:47:44.0102 0x12d0  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
21:47:44.0140 0x12d0  SDRSVC - ok
21:47:44.0157 0x12d0  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
21:47:44.0189 0x12d0  secdrv - ok
21:47:44.0235 0x12d0  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
21:47:44.0362 0x12d0  seclogon - ok
21:47:44.0404 0x12d0  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\system32\sens.dll
21:47:44.0477 0x12d0  SENS - ok
21:47:44.0500 0x12d0  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
21:47:44.0526 0x12d0  SensrSvc - ok
21:47:44.0536 0x12d0  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum        C:\Windows\system32\DRIVERS\serenum.sys
21:47:44.0557 0x12d0  Serenum - ok
21:47:44.0570 0x12d0  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys
21:47:44.0584 0x12d0  Serial - ok
21:47:44.0610 0x12d0  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
21:47:44.0637 0x12d0  sermouse - ok
21:47:44.0683 0x12d0  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
21:47:44.0746 0x12d0  SessionEnv - ok
21:47:44.0778 0x12d0  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
21:47:44.0793 0x12d0  sffdisk - ok
21:47:44.0802 0x12d0  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
21:47:44.0825 0x12d0  sffp_mmc - ok
21:47:44.0838 0x12d0  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
21:47:44.0854 0x12d0  sffp_sd - ok
21:47:44.0865 0x12d0  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy        C:\Windows\system32\DRIVERS\sfloppy.sys
21:47:44.0877 0x12d0  sfloppy - ok
21:47:44.0912 0x12d0  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
21:47:44.0953 0x12d0  SharedAccess - ok
21:47:44.0994 0x12d0  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:47:45.0034 0x12d0  ShellHWDetection - ok
21:47:45.0056 0x12d0  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
21:47:45.0068 0x12d0  SiSRaid2 - ok
21:47:45.0089 0x12d0  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
21:47:45.0102 0x12d0  SiSRaid4 - ok
21:47:45.0137 0x12d0  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
21:47:45.0170 0x12d0  Smb - ok
21:47:45.0179 0x12d0  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
21:47:45.0208 0x12d0  SNMPTRAP - ok
21:47:45.0238 0x12d0  [ 7C7BA5781756E55697A3DFEBBAE10C1F, B9AD34B594BE0EC133359BD7AE66D79B99CC4F5051B7975760643E0ACAEC1850 ] SPCP825K        C:\Windows\system32\DRIVERS\SPCP825K.sys
21:47:45.0248 0x12d0  SPCP825K - ok
21:47:45.0261 0x12d0  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr          C:\Windows\system32\drivers\spldr.sys
21:47:45.0273 0x12d0  spldr - ok
21:47:45.0322 0x12d0  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler        C:\Windows\System32\spoolsv.exe
21:47:45.0378 0x12d0  Spooler - ok
21:47:45.0508 0x12d0  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
21:47:45.0654 0x12d0  sppsvc - ok
21:47:45.0680 0x12d0  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
21:47:45.0714 0x12d0  sppuinotify - ok
21:47:45.0748 0x12d0  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv            C:\Windows\system32\DRIVERS\srv.sys
21:47:45.0788 0x12d0  srv - ok
21:47:45.0812 0x12d0  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
21:47:45.0844 0x12d0  srv2 - ok
21:47:45.0866 0x12d0  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
21:47:45.0885 0x12d0  srvnet - ok
21:47:45.0907 0x12d0  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
21:47:45.0957 0x12d0  SSDPSRV - ok
21:47:45.0984 0x12d0  [ 8E1B485AEBF4743F05B4FB162F6ED430, 89CB6756E71E5F11E58CA42D08BF3D011618D4CFFA6335BA3EAB8B7DC441BFB8 ] ssm_bus        C:\Windows\system32\DRIVERS\ssm_bus.sys
21:47:45.0997 0x12d0  ssm_bus - ok
21:47:46.0039 0x12d0  [ 1DFDEE4A0E168B6362A6A0778EAFDB55, F726DB086B3829C2D1A63ADB8BE6414D4F4A975FCF13BA7A9AEEB7B3542D608C ] ssm_mdfl        C:\Windows\system32\DRIVERS\ssm_mdfl.sys
21:47:46.0057 0x12d0  ssm_mdfl - ok
21:47:46.0087 0x12d0  [ 1FFCC272F19BD84596378780F5C9843D, 4896DBC4B53D9CFA93E9A3A46BBC327A795A83844CA404520EF9F95D0A87802F ] ssm_mdm        C:\Windows\system32\DRIVERS\ssm_mdm.sys
21:47:46.0113 0x12d0  ssm_mdm - ok
21:47:46.0138 0x12d0  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc        C:\Windows\system32\sstpsvc.dll
21:47:46.0171 0x12d0  SstpSvc - ok
21:47:46.0390 0x12d0  [ E8606BF6BE3B7481D95F1DD2E4F3FCBA, 522646B5266C3E18AF909CB49F411ABB10F5DCD02A2B923C1EA209529AFD1A94 ] StarMoney 7.0 OnlineUpdate C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
21:47:46.0415 0x12d0  StarMoney 7.0 OnlineUpdate - ok
21:47:46.0536 0x12d0  [ 98CC6BDCB5F593394CE2000EC454AEE4, 13973E69DDFB5A0494141C60ABF0E6F7EF555B476AC4171B18A31FF04618D54B ] StarMoney 8.0 OnlineUpdate C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
21:47:46.0568 0x12d0  StarMoney 8.0 OnlineUpdate - ok
21:47:46.0728 0x12d0  [ 3BF022F8064A83A23DF90971DD78CA83, 85754DF1C6DE745ADF9A0BAB1948AFF2CA16C4569128DA90AF610D199E621BF4 ] StarMoney 9.0 OnlineUpdate C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
21:47:46.0765 0x12d0  StarMoney 9.0 OnlineUpdate - ok
21:47:46.0852 0x12d0  [ 5A19667A580B1CE886EAF968B9743F45, 0A9EBE4057A0A6EF4732623794C2416A6BD8B87356DA46652BD92762505F57C7 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
21:47:46.0879 0x12d0  Stereo Service - ok
21:47:46.0941 0x12d0  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
21:47:46.0962 0x12d0  stexstor - ok
21:47:47.0011 0x12d0  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
21:47:47.0063 0x12d0  stisvc - ok
21:47:47.0086 0x12d0  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys
21:47:47.0097 0x12d0  swenum - ok
21:47:47.0127 0x12d0  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv          C:\Windows\System32\swprv.dll
21:47:47.0183 0x12d0  swprv - ok
21:47:47.0189 0x12d0  sxuptp - ok
21:47:47.0277 0x12d0  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain        C:\Windows\system32\sysmain.dll
21:47:47.0362 0x12d0  SysMain - ok
21:47:47.0401 0x12d0  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:47:47.0420 0x12d0  TabletInputService - ok
21:47:47.0462 0x12d0  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv        C:\Windows\System32\tapisrv.dll
21:47:47.0508 0x12d0  TapiSrv - ok
21:47:47.0526 0x12d0  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS            C:\Windows\System32\tbssvc.dll
21:47:47.0565 0x12d0  TBS - ok
21:47:47.0642 0x12d0  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
21:47:47.0771 0x12d0  Tcpip - ok
21:47:47.0843 0x12d0  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
21:47:47.0894 0x12d0  TCPIP6 - ok
21:47:47.0937 0x12d0  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
21:47:47.0974 0x12d0  tcpipreg - ok
21:47:47.0993 0x12d0  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
21:47:48.0015 0x12d0  TDPIPE - ok
21:47:48.0040 0x12d0  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
21:47:48.0060 0x12d0  TDTCP - ok
21:47:48.0092 0x12d0  [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
21:47:48.0131 0x12d0  tdx - ok
21:47:48.0151 0x12d0  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys
21:47:48.0164 0x12d0  TermDD - ok
21:47:48.0213 0x12d0  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService    C:\Windows\System32\termsrv.dll
21:47:48.0251 0x12d0  TermService - ok
21:47:48.0310 0x12d0  [ 48D9D00C2E0E72C3D4F52772C80355F6, 86F281C7F5FA2FCF1A36C69DD6561531E48483CACB8A873B955F7E93D9A1D259 ] TFsExDisk      C:\Windows\System32\Drivers\TFsExDisk.sys
21:47:48.0322 0x12d0  TFsExDisk - ok
21:47:48.0338 0x12d0  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
21:47:48.0355 0x12d0  Themes - ok
21:47:48.0385 0x12d0  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER    C:\Windows\system32\mmcss.dll
21:47:48.0418 0x12d0  THREADORDER - ok
21:47:48.0432 0x12d0  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
21:47:48.0474 0x12d0  TrkWks - ok
21:47:48.0513 0x12d0  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:47:48.0557 0x12d0  TrustedInstaller - ok
21:47:48.0589 0x12d0  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
21:47:48.0602 0x12d0  tssecsrv - ok
21:47:48.0653 0x12d0  [ 17C6B51CBCCDED95B3CC14E22791F85E, EE417C19E9B2C258D62A74F1F2421AFFBAC67ACD62481CAA08F5B6A3439C1D7C ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
21:47:48.0690 0x12d0  TsUsbFlt - ok
21:47:48.0741 0x12d0  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
21:47:48.0796 0x12d0  tunnel - ok
21:47:48.0814 0x12d0  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
21:47:48.0827 0x12d0  uagp35 - ok
21:47:48.0857 0x12d0  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
21:47:48.0897 0x12d0  udfs - ok
21:47:48.0915 0x12d0  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect      C:\Windows\system32\UI0Detect.exe
21:47:48.0929 0x12d0  UI0Detect - ok
21:47:48.0946 0x12d0  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
21:47:48.0959 0x12d0  uliagpkx - ok
21:47:49.0004 0x12d0  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus          C:\Windows\system32\drivers\umbus.sys
21:47:49.0031 0x12d0  umbus - ok
21:47:49.0045 0x12d0  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
21:47:49.0058 0x12d0  UmPass - ok
21:47:49.0110 0x12d0  [ F9EC9ACD504D823D9B9CA98A4F8D3CA2, 58DAD5111C598F14CB199FE6A61FA5918F29513B778A8664FD05EFAB3C665D4F ] Updater Service C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
21:47:49.0134 0x12d0  Updater Service - ok
21:47:49.0167 0x12d0  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
21:47:49.0219 0x12d0  upnphost - ok
21:47:49.0271 0x12d0  [ 43228F8EDD1B0BCDD3145AD246E63D39, 108D8793E9F94C0A0E895398599B359121751F2E7BAA8B7BD24838AEF646726D ] USBAAPL64      C:\Windows\system32\Drivers\usbaapl64.sys
21:47:49.0293 0x12d0  USBAAPL64 - ok
21:47:49.0340 0x12d0  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
21:47:49.0379 0x12d0  usbaudio - ok
21:47:49.0410 0x12d0  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
21:47:49.0439 0x12d0  usbccgp - ok
21:47:49.0464 0x12d0  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
21:47:49.0510 0x12d0  usbcir - ok
21:47:49.0540 0x12d0  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci        C:\Windows\system32\drivers\usbehci.sys
21:47:49.0560 0x12d0  usbehci - ok
21:47:49.0612 0x12d0  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
21:47:49.0671 0x12d0  usbhub - ok
21:47:49.0704 0x12d0  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci        C:\Windows\system32\drivers\usbohci.sys
21:47:49.0729 0x12d0  usbohci - ok
21:47:49.0755 0x12d0  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
21:47:49.0793 0x12d0  usbprint - ok
21:47:49.0803 0x12d0  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan        C:\Windows\system32\drivers\usbscan.sys
21:47:49.0837 0x12d0  usbscan - ok
21:47:49.0856 0x12d0  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:47:49.0876 0x12d0  USBSTOR - ok
21:47:49.0905 0x12d0  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci        C:\Windows\system32\drivers\usbuhci.sys
21:47:49.0917 0x12d0  usbuhci - ok
21:47:49.0933 0x12d0  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms          C:\Windows\System32\uxsms.dll
21:47:49.0978 0x12d0  UxSms - ok
21:47:49.0998 0x12d0  [ 17A6A9AAD04CCC6EE53290585BFC43AF, E4901D86C6470D21ABA0F6D9615A613E5C74A3FEF931E497F51B6AFA5715332B ] VaultSvc        C:\Windows\system32\lsass.exe
21:47:50.0010 0x12d0  VaultSvc - ok
21:47:50.0044 0x12d0  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
21:47:50.0064 0x12d0  vdrvroot - ok
21:47:50.0125 0x12d0  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds            C:\Windows\System32\vds.exe
21:47:50.0197 0x12d0  vds - ok
21:47:50.0215 0x12d0  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
21:47:50.0230 0x12d0  vga - ok
21:47:50.0250 0x12d0  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave        C:\Windows\System32\drivers\vga.sys
21:47:50.0291 0x12d0  VgaSave - ok
21:47:50.0326 0x12d0  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
21:47:50.0343 0x12d0  vhdmp - ok
21:47:50.0373 0x12d0  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
21:47:50.0385 0x12d0  viaide - ok
21:47:50.0407 0x12d0  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
21:47:50.0420 0x12d0  volmgr - ok
21:47:50.0452 0x12d0  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
21:47:50.0472 0x12d0  volmgrx - ok
21:47:50.0490 0x12d0  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap        C:\Windows\system32\drivers\volsnap.sys
21:47:50.0508 0x12d0  volsnap - ok
21:47:50.0525 0x12d0  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid        C:\Windows\system32\DRIVERS\vsmraid.sys
21:47:50.0540 0x12d0  vsmraid - ok
21:47:50.0609 0x12d0  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS            C:\Windows\system32\vssvc.exe
21:47:50.0756 0x12d0  VSS - ok
21:47:50.0775 0x12d0  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
21:47:50.0790 0x12d0  vwifibus - ok
21:47:50.0886 0x12d0  [ C366AE91D2CC2C1C25380061D235C36B, FF641D2D913223069EEDCDC08286D91D40BEE5FC7471610DE76E98D8A32045A2 ] VX3000          C:\Windows\system32\DRIVERS\VX3000.sys
21:47:50.0960 0x12d0  VX3000 - ok
21:47:50.0986 0x12d0  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time        C:\Windows\system32\w32time.dll
21:47:51.0027 0x12d0  W32Time - ok
21:47:51.0047 0x12d0  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
21:47:51.0068 0x12d0  WacomPen - ok
21:47:51.0096 0x12d0  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
21:47:51.0132 0x12d0  WANARP - ok
21:47:51.0137 0x12d0  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
21:47:51.0169 0x12d0  Wanarpv6 - ok
21:47:51.0237 0x12d0  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
21:47:51.0319 0x12d0  wbengine - ok
21:47:51.0353 0x12d0  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
21:47:51.0385 0x12d0  WbioSrvc - ok
21:47:51.0429 0x12d0  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc        C:\Windows\System32\wcncsvc.dll
21:47:51.0455 0x12d0  wcncsvc - ok
21:47:51.0471 0x12d0  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:47:51.0512 0x12d0  WcsPlugInService - ok
21:47:51.0535 0x12d0  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\DRIVERS\wd.sys
21:47:51.0547 0x12d0  Wd - ok
21:47:51.0587 0x12d0  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
21:47:51.0620 0x12d0  Wdf01000 - ok
21:47:51.0661 0x12d0  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll
21:47:51.0688 0x12d0  WdiServiceHost - ok
21:47:51.0693 0x12d0  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost  C:\Windows\system32\wdi.dll
21:47:51.0707 0x12d0  WdiSystemHost - ok
21:47:51.0738 0x12d0  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient      C:\Windows\System32\webclnt.dll
21:47:51.0783 0x12d0  WebClient - ok
21:47:51.0806 0x12d0  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
21:47:51.0844 0x12d0  Wecsvc - ok
21:47:51.0862 0x12d0  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
21:47:51.0896 0x12d0  wercplsupport - ok
21:47:51.0919 0x12d0  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
21:47:51.0953 0x12d0  WerSvc - ok
21:47:51.0958 0x12d0  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
21:47:51.0989 0x12d0  WfpLwf - ok
21:47:52.0003 0x12d0  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
21:47:52.0015 0x12d0  WIMMount - ok
21:47:52.0038 0x12d0  WinDefend - ok
21:47:52.0059 0x12d0  WinHttpAutoProxySvc - ok
21:47:52.0102 0x12d0  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
21:47:52.0149 0x12d0  Winmgmt - ok
21:47:52.0235 0x12d0  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM          C:\Windows\system32\WsmSvc.dll
21:47:52.0384 0x12d0  WinRM - ok
21:47:52.0426 0x12d0  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
21:47:52.0441 0x12d0  WinUsb - ok
21:47:52.0478 0x12d0  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc        C:\Windows\System32\wlansvc.dll
21:47:52.0531 0x12d0  Wlansvc - ok
21:47:52.0594 0x12d0  [ 06C8FA1CF39DE6A735B54D906BA791C6, D8FEC7DE227781CDA876904701B2AA995268F74DCD6CB34AA0296C557FC283B6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
21:47:52.0612 0x12d0  wlcrasvc - ok
21:47:52.0741 0x12d0  [ 2BACD71123F42CEA603F4E205E1AE337, 1FEF20554110371D738F462ECFFA999158EFEED02062414C58C1B61C422BF0B9 ] wlidsvc        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
21:47:52.0851 0x12d0  wlidsvc - ok
21:47:52.0889 0x12d0  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi        C:\Windows\system32\drivers\wmiacpi.sys
21:47:52.0923 0x12d0  WmiAcpi - ok
21:47:52.0943 0x12d0  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
21:47:53.0006 0x12d0  wmiApSrv - ok
21:47:53.0027 0x12d0  WMPNetworkSvc - ok
21:47:53.0045 0x12d0  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
21:47:53.0070 0x12d0  WPCSvc - ok
21:47:53.0099 0x12d0  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
21:47:53.0139 0x12d0  WPDBusEnum - ok
21:47:53.0146 0x12d0  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
21:47:53.0205 0x12d0  ws2ifsl - ok
21:47:53.0254 0x12d0  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\system32\wscsvc.dll
21:47:53.0273 0x12d0  wscsvc - ok
21:47:53.0277 0x12d0  WSearch - ok
21:47:53.0380 0x12d0  [ 0814A74C853F50B354F08F83DDA9F7FB, 0A63BAA8DE451B8C2C71FEF961718E769B9BAC305C76D24048C664CB27D0DF28 ] wuauserv        C:\Windows\system32\wuaueng.dll
21:47:53.0524 0x12d0  wuauserv - ok
21:47:53.0566 0x12d0  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
21:47:53.0589 0x12d0  WudfPf - ok
21:47:53.0607 0x12d0  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
21:47:53.0638 0x12d0  WUDFRd - ok
21:47:53.0676 0x12d0  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
21:47:53.0713 0x12d0  wudfsvc - ok
21:47:53.0756 0x12d0  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc        C:\Windows\System32\wwansvc.dll
21:47:53.0811 0x12d0  WwanSvc - ok
21:47:53.0846 0x12d0  ================ Scan global ===============================
21:47:53.0870 0x12d0  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
21:47:53.0900 0x12d0  [ 2313AF8D5A9CEB4A55400A01DD311A95, A5779FE967EA2703E86BEDC32CD736617AF278C72048228F038DFC628E1E0AA2 ] C:\Windows\system32\winsrv.dll
21:47:53.0929 0x12d0  [ 2313AF8D5A9CEB4A55400A01DD311A95, A5779FE967EA2703E86BEDC32CD736617AF278C72048228F038DFC628E1E0AA2 ] C:\Windows\system32\winsrv.dll
21:47:53.0946 0x12d0  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
21:47:53.0972 0x12d0  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
21:47:53.0981 0x12d0  [ Global ] - ok
21:47:53.0981 0x12d0  ================ Scan MBR ==================================
21:47:53.0999 0x12d0  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
21:47:54.0294 0x12d0  \Device\Harddisk0\DR0 - ok
21:47:54.0302 0x12d0  [ C26B45F60AC12D11AD1AA51B63D9C74D ] \Device\Harddisk2\DR2
21:47:54.0893 0x12d0  \Device\Harddisk2\DR2 - ok
21:47:54.0894 0x12d0  ================ Scan VBR ==================================
21:47:54.0898 0x12d0  [ B809D230816135242EA6E5EC501325EC ] \Device\Harddisk0\DR0\Partition1
21:47:54.0925 0x12d0  \Device\Harddisk0\DR0\Partition1 - ok
21:47:54.0929 0x12d0  [ 1894DC214CA2EA1AA9404E7EC7EB0309 ] \Device\Harddisk0\DR0\Partition2
21:47:54.0940 0x12d0  \Device\Harddisk0\DR0\Partition2 - ok
21:47:54.0945 0x12d0  [ C0BF0BF92AA4EA01F4FC5F337C155910 ] \Device\Harddisk0\DR0\Partition3
21:47:54.0946 0x12d0  \Device\Harddisk0\DR0\Partition3 - ok
21:47:54.0949 0x12d0  ================ Scan generic autorun ======================
21:47:55.0249 0x12d0  [ 899886E81E666D147036C9358FA94A01, D128722D325DFE300D37DC924412E12CAF2E3BB1D674EAB60C7F95A9B2728D87 ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
21:47:55.0584 0x12d0  RtHDVCpl - ok
21:47:55.0656 0x12d0  [ 5A89395D7185A2B1B6A43870079D808F, 6557F3F82931D2782B33976FB7B441FFE65AB98377ADB2E8582D0CA41A28F581 ] C:\Program Files (x86)\Packard Bell\OOBEOffer\ootag.exe
21:47:55.0666 0x12d0  OOTag - ok
21:47:55.0713 0x12d0  [ 69764A6475A4C54732E6A07CE6EF8BE2, BF983299386AC0A16FA798D8EED43B3E88541D49A03E3F6F2B89A9A0C9A18503 ] C:\Windows\vVX3000.exe
21:47:55.0740 0x12d0  VX3000 - ok
21:47:55.0844 0x12d0  [ 68D45D36DD827738A2F2E8E21E53C193, C51BA0A2A40D320663BE5BF2519A61B831E12FEBB349E638246E87408AD02B84 ] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
21:47:55.0941 0x12d0  CanonMyPrinter - ok
21:47:55.0951 0x12d0  [ 5A89395D7185A2B1B6A43870079D808F, 6557F3F82931D2782B33976FB7B441FFE65AB98377ADB2E8582D0CA41A28F581 ] C:\Program Files (x86)\Packard Bell\OOBEOffer\OOTag.exe
21:47:55.0960 0x12d0  OOTag - ok
21:47:56.0007 0x12d0  [ F4F7C86191A981C804326E2EF6F3604F, 1ECE05E643AFFB27A148A8B86615F6C167875EF29D6FF7E2FD15B8DCBE6B8A16 ] C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
21:47:56.0025 0x12d0  Adobe Reader Speed Launcher - ok
21:47:56.0063 0x12d0  [ AD16557CECFB17CF7393D28DC40F6D09, 1D44F79F39E4A9413605DD6F1C63366970475C5E2A3FFF7636A80EFDA0D5E0E8 ] C:\Program Files (x86)\Packard Bell\Hotkey Utility\HotkeyUtility.exe
21:47:56.0091 0x12d0  Hotkey Utility - ok
21:47:56.0143 0x12d0  [ 271943F32252D85DC2E01EF393E640CB, 3B2A16495DF19E2BB0E6C7E1D94A6813920A15E9E65F5928DAC91050C4790FDC ] C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe
21:47:56.0166 0x12d0  NortonOnlineBackupReminder - ok
21:47:56.0242 0x12d0  [ 48BE298F7FD1BEF4D8FBACB04D8D95C4, D375B3F6E850E4B0EC81BAA0E554C356BE2248AA77C6C56F5267CA05460FE4EB ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
21:47:56.0287 0x12d0  Adobe ARM - ok
21:47:56.0334 0x12d0  [ 0133E5265FDD7063F87856C9BD5156C9, 27C0389B3FA0209C6B4D1A8A75AAD23525DD3B5DB7B0CD7358D1D6417818C8EF ] C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
21:47:56.0358 0x12d0  LifeCam - ok
21:47:56.0489 0x12d0  [ 7C6FCBAF1BE7513C5BC5B90519EE59DF, 9AC3C43BB186099C7E8C3B069EE849FDC4B9D166DFC183502AEAB30B8959A1FA ] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
21:47:56.0588 0x12d0  Pando Media Booster - ok
21:47:56.0654 0x12d0  [ 1E377D64DACD4E4656C86241CE5A1233, F0AE582DBCF2525F580DA6D441B4F24BAE551CD35C0F2B19B2B0127787F2AE3A ] C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe
21:47:56.0704 0x12d0  AutoStartNPSAgent - ok
21:47:56.0748 0x12d0  [ 5D61BE7DB55B026A5D61A3EED09D0EAD, D32CC7B31A6F98C60ABC313ABC7D1143681F72DE2BB2604711A0BA20710CAAAE ] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
21:47:56.0767 0x12d0  swg - ok
21:47:57.0924 0x12d0  [ B097DDC359318BD7DC1F1DC246935E04, 12364A1D47BD350217799119F39428A9F4C163AC33252264BE5D0476C8F380D7 ] C:\Users\Ahrendt\AppData\Local\Amazon Music\Amazon Music Helper.exe
21:47:58.0083 0x12d0  Amazon Music - ok
21:47:58.0100 0x12d0  [ 5D61BE7DB55B026A5D61A3EED09D0EAD, D32CC7B31A6F98C60ABC313ABC7D1143681F72DE2BB2604711A0BA20710CAAAE ] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
21:47:58.0109 0x12d0  swg - ok
21:47:58.0311 0x12d0  [ 24B1666FD14CC71C7B0679AC61625B90, 4243F0B91BF9EAB365BBC724F5984FEB3AD74DF91EAF15F36A44DEA0AEDB7D20 ] C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
21:47:58.0534 0x12d0  msnmsgr - ok
21:47:58.0643 0x12d0  [ 24B1666FD14CC71C7B0679AC61625B90, 4243F0B91BF9EAB365BBC724F5984FEB3AD74DF91EAF15F36A44DEA0AEDB7D20 ] C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
21:47:58.0737 0x12d0  msnmsgr - ok
21:47:58.0750 0x12d0  [ 5D61BE7DB55B026A5D61A3EED09D0EAD, D32CC7B31A6F98C60ABC313ABC7D1143681F72DE2BB2604711A0BA20710CAAAE ] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
21:47:58.0759 0x12d0  swg - ok
21:47:58.0844 0x12d0  [ 2A3FB4C98F139038E23330D2439DB8A4, DE9253AD362B03FA5D3D4912662398E5C4AC76F7274B83E51C251A6921A5B838 ] C:\Users\Franzi\AppData\Local\Facebook\Update\FacebookUpdate.exe
21:47:58.0868 0x12d0  Facebook Update - ok
21:47:58.0873 0x12d0  [ 5D61BE7DB55B026A5D61A3EED09D0EAD, D32CC7B31A6F98C60ABC313ABC7D1143681F72DE2BB2604711A0BA20710CAAAE ] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
21:47:58.0882 0x12d0  swg - ok
21:47:58.0960 0x12d0  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
21:47:59.0034 0x12d0  Sidebar - ok
21:47:59.0101 0x12d0  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
21:47:59.0148 0x12d0  mctadmin - ok
21:47:59.0205 0x12d0  [ B54B12B37A61F93CBBA38C00A4EBF838, 1352E439BEB9CED023818EE694EAE8257C725EF066A94E17DB54CCB39D5CE4F8 ] C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe
21:47:59.0244 0x12d0  ScrSav - ok
21:47:59.0246 0x12d0  Waiting for KSN requests completion. In queue: 305
21:48:00.0246 0x12d0  Waiting for KSN requests completion. In queue: 305
21:48:01.0246 0x12d0  Waiting for KSN requests completion. In queue: 305
21:48:02.0339 0x12d0  AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 15.0.11.550 ), 0x41000 ( enabled : updated )
21:48:02.0382 0x12d0  Win FW state via NFP2: enabled
21:48:04.0741 0x12d0  ============================================================
21:48:04.0741 0x12d0  Scan finished
21:48:04.0741 0x12d0  ============================================================
21:48:04.0758 0x0f00  Detected object count: 0
21:48:04.0758 0x0f00  Actual detected object count: 0

cosinus 25.06.2015 21:02
Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Scan klicken

http://saved.im/mtg0mjy4yjlu/2014-04...ryscantool.png

Joahpi 25.06.2015 21:09
Mir scheint, der Weg ist sehr gut :crazy:

[CODE]Additional
FRST Logfile:
Code:
scan result of Farbar Recovery Scan Tool (x64) Version:24-06-2015
Ran by Ahrendt at 2015-06-25 22:05:38
Running from C:\Users\Ahrendt\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3928908445-2049478909-3784465887-500 - Administrator - Disabled)
Ahrendt (S-1-5-21-3928908445-2049478909-3784465887-1001 - Administrator - Enabled) => C:\Users\Ahrendt
Franzi (S-1-5-21-3928908445-2049478909-3784465887-1004 - Limited - Enabled) => C:\Users\Franzi
Gast (S-1-5-21-3928908445-2049478909-3784465887-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3928908445-2049478909-3784465887-1002 - Limited - Enabled)
Jonas (S-1-5-21-3928908445-2049478909-3784465887-1003 - Limited - Enabled) => C:\Users\Jonas
Kathi (S-1-5-21-3928908445-2049478909-3784465887-1005 - Limited - Enabled) => C:\Users\Kathi
UpdatusUser (S-1-5-21-3928908445-2049478909-3784465887-1006 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Photoshop Elements 8.0 (HKLM-x32\...\Adobe Photoshop Elements 8.0) (Version: 8.0 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
Amazon Music (HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Amazon Amazon Music) (Version: 3.9.5.820 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Amazon Amazon Music) (Version: 3.9.5.820 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{CCE825DB-347A-4004-A186-5F4A6FDD8547}) (Version: 2.3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{D70884EA-E2CE-4539-91DB-4766CC1E5F5F}) (Version: 6.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira (HKLM-x32\...\{0696cc37-db90-4000-be99-4a173ca7c8af}) (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.11.574 - Avira Operations GmbH & Co. KG)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.82 - WildTangent) Hidden
Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Blasterball 3 (x32 Version: 2.2.0.82 - WildTangent) Hidden
Bob the Builder Can-Do-Zoo (x32 Version: 2.2.0.82 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Build-a-lot 2 (x32 Version: 2.2.0.82 - WildTangent) Hidden
CAD-Modul 2011 (HKLM\...\CAD-Modul 2011) (Version: 18.1.49.0 - liNear GmbH)
CAD-Modul 2011 (Version: 18.1.49.0 - liNear GmbH) Hidden
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version:  - )
Canon Kurzwahlprogramm (HKLM-x32\...\Speed Dial Utility) (Version:  - )
Canon MP Navigator EX 4.1 (HKLM-x32\...\MP Navigator EX 4.1) (Version:  - )
Canon MX420 series Benutzerregistrierung (HKLM-x32\...\Canon MX420 series Benutzerregistrierung) (Version:  - )
Canon MX420 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX420_series) (Version:  - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )
Chicken Invaders 3 - Revenge of the Yolk (x32 Version: 2.2.0.82 - WildTangent) Hidden
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Dropbox) (Version: 3.4.6 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{E0B19DF7-B1C7-4937-82C4-0E4B1E346965}) (Version: 2.1.0901 - OEM)
ElsterFormular (HKLM-x32\...\ElsterFormular 13.2.0.8623k) (Version: 16.1.16483 - Landesfinanzdirektion Thüringen)
Escape Rosecliff Island (x32 Version: 2.2.0.82 - WildTangent) Hidden
ESOP 4.0 (HKLM-x32\...\ESOP 4.0_is1) (Version: 4.0 - Viessmann GmbH)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Faerie Solitaire (x32 Version: 2.2.0.82 - WildTangent) Hidden
FATE - The Traitor Soul (x32 Version: 2.2.0.82 - WildTangent) Hidden
FMS (HKLM-x32\...\FMS) (Version:  - )
FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version:  - )
FRITZ!Box-Fernzugang einrichten (HKLM-x32\...\{EFADD989-D9F2-49F6-A280-675951CC78D3}) (Version: 1.0.3 - AVM Berlin)
FRITZ!Fernzugang (HKLM\...\{5001E5BC-C9BF-4598-AB89-E7318C76C5F4}) (Version: 1.2.6 - AVM Berlin)
GamersFirst LIVE! (HKLM-x32\...\GamersFirst LIVE!) (Version:  - GamersFirst)
GIMP 2.8.8 (HKLM\...\GIMP-2_is1) (Version: 2.8.8 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.04) (Version: 9.04 - Artifex Software Inc.)
GPS Master 1.2.0.0 (HKLM-x32\...\GPS Master_is1) (Version: 1.0 - GPS Master)
Hotkey Utility (HKLM-x32\...\Hotkey Utility) (Version: 2.05.3003 - Packard Bell)
iCopy (HKLM-x32\...\iCopy) (Version: 1.6.1 - Matteo Rossi)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Packard Bell)
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
Insaniquarium Deluxe (x32 Version: 2.2.0.82 - WildTangent) Hidden
iTunes (HKLM\...\{0E5D76AD-A3FB-48D5-8400-8903B10317D3}) (Version: 11.0.1.12 - Apple Inc.)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Jewel Quest (x32 Version: 2.2.0.82 - WildTangent) Hidden
Jewel Quest Solitaire 3 (x32 Version: 2.2.0.82 - WildTangent) Hidden
JNLP (HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\JNLP) (Version:  - JNLP)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
liNear Admin (HKLM-x32\...\liNear Admin) (Version: 1.00 - liNear GmbH)
liNear Admin (x32 Version: 1.00 - liNear GmbH) Hidden
liNear CAD Bibliotheken (HKLM-x32\...\liNear CAD-Daten) (Version: 1.00 - liNear GmbH)
liNear CAD-Daten (x32 Version: 1.00 - liNear GmbH) Hidden
liNear Produktdaten (x32 Version: 2.00 - liNear GmbH) Hidden
liNear Produktdatensätze (HKLM-x32\...\liNear Produktdaten) (Version: 2.00 - liNear GmbH)
liNear Updater (HKLM-x32\...\liNear Updater) (Version: 2.00 - liNear GmbH)
liNear Updater (x32 Version: 2.00 - liNear GmbH) Hidden
Mahjongg Artifacts (x32 Version: 2.2.0.82 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{6965A8D2-465D-4F98-9FAA-0E9E2348F329}) (Version: 3.22.270.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Language Pack 2007 - German/Deutsch (HKLM-x32\...\OMUI.de-de) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.218 (HKLM\...\{BBBE35B2-9349-3C48-BD3D-F574B17C7924}) (Version: 9.0.21022.218 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 Essentials (HKLM-x32\...\{330e1566-027d-4d04-a8c5-011f9f6e8bc7}) (Version:  - Nero AG)
Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.0.36 - Symantec)
NVIDIA 3D Vision Treiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.9 - NVIDIA Corporation)
NVIDIA Grafiktreiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}) (Version: 9.09.0814 - NVIDIA Corporation)
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
Orange Line 3 - Erweiterungskurs Sprachtrainer (HKLM-x32\...\{C7F41948-6B7E-4811-B558-F4790585D7EA}) (Version: 1.00.000 - Klett)
Packard Bell Game Console (x32 Version:  - WildTangent) Hidden
Packard Bell Games (HKLM-x32\...\WildTangent packardbell Master Uninstall) (Version: 1.0.0.80 - WildTangent)
Packard Bell InfoCentre (HKLM-x32\...\Packard Bell InfoCentre) (Version: 3.02.3000 - Packard Bell)
Packard Bell Recovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3007 - Packard Bell)
Packard Bell Registration (HKLM-x32\...\Packard Bell Registration) (Version: 1.02.3006 - Packard Bell)
Packard Bell ScreenSaver (HKLM-x32\...\Packard Bell Screensaver) (Version: 1.1.0812 - Packard Bell Incorporated)
Packard Bell Software Suite SE (HKLM-x32\...\Packard Bell Software Suite SE) (Version: 2.01.3003 - Packard Bell)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.3.3.6 - Pando Networks Inc.)
Penguins! (x32 Version: 2.2.0.82 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.82 - WildTangent) Hidden
Polar Golfer (x32 Version: 2.2.0.82 - WildTangent) Hidden
Polar Pool (x32 Version: 2.2.0.82 - WildTangent) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5983 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version:  - )
Samsung New PC Studio (HKLM-x32\...\InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio (x32 Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
Samsung PC Studio 3 USB Driver Installer (HKLM-x32\...\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}) (Version: 3.2.0.70701 - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.3.650.0 - SAMSUNG Electronics Co., Ltd.)
Sprachtrainer Fonts (HKLM-x32\...\{FBCF2ED3-AFB5-475E-BF9A-30BEAD366FBC}) (Version: 1.00.01 - Ernst Klett Verlag GmbH)
StarMoney (x32 Version: 2.0 - StarFinanz) Hidden
StarMoney (x32 Version: 3.0.2.50 - StarFinanz) Hidden
StarMoney (x32 Version: 4.0.0.203 - StarFinanz) Hidden
StarMoney (x32 Version: 5.0 - StarFinanz) Hidden
StarMoney 5.0 S-Edition (HKLM-x32\...\{6FDCF790-49AF-4E3B-8EB2-C07E2DBA55EA}) (Version: 5.0 - StarFinanz GmbH)
StarMoney 7.0 S-Edition (HKLM-x32\...\{C5C78296-C06F-4800-BEF8-820980BB5889}) (Version: 7.0 - Star Finanz GmbH)
StarMoney 8.0 S-Edition (HKLM-x32\...\{92800318-9F3D-473E-B80D-7BF7EDFE0293}) (Version: 8.0 - Star Finanz GmbH)
StarMoney 9.0 S-Edition (HKLM-x32\...\{46231661-A15A-43FA-AB57-3714A33E500C}) (Version: 9.0 - Star Finanz GmbH)
TAPPS 1.28 DE (HKLM-x32\...\TAPPS DE_is1) (Version:  - )
TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)
UnderCoverXP 1.23 (HKLM-x32\...\UnderCoverXP_is1) (Version:  - Wicked & Wild Inc.)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Virtual Families (x32 Version: 2.2.0.82 - WildTangent) Hidden
Virtual Villagers - A New Home (x32 Version: 2.2.0.82 - WildTangent) Hidden
Vitodesk 100 CAD-Bibliothek (HKLM-x32\...\Vitodesk Browser) (Version: 1.00 - Viessmann)
Vitodesk 100 Tools (HKLM-x32\...\Vitodesk Programme 3) (Version: 3.00 - Viessmann)
Vitodesk 200 CAD-Programme 2011 (HKLM-x32\...\Vitodesk CAD 2011) (Version: 11.00 - Viessmann)
Vitodesk 200 Haustechnik 2011 (HKLM-x32\...\Vitodesk Haustechnik 2011) (Version: 11.00 - Viessmann)
Vitodesk 200 Leistungsverzeichnis (HKLM-x32\...\VitoLV 3) (Version: 3.00 - Viessmann)
Vitodesk Browser (x32 Version: 1.00 - Viessmann) Hidden
Vitodesk CAD 2011 (x32 Version: 11.00 - Viessmann) Hidden
Vitodesk Haustechnik 2011 (x32 Version: 11.00 - Viessmann) Hidden
Vitodesk Programme 3 (x32 Version: 3.00 - Viessmann) Hidden
Vitodesk Projektverwaltung (HKLM-x32\...\Vitodesk Projektverwaltung 3) (Version: 3.00 - Viessmann)
Vitodesk Projektverwaltung 3 (x32 Version: 3.00 - Viessmann) Hidden
VitoLV 3 (x32 Version: 3.00 - Viessmann) Hidden
War Rock (HKLM-x32\...\GamersFirst War Rock) (Version:  - GamersFirst)
Welcome Center (HKLM-x32\...\Packard Bell Welcome Center) (Version: 1.00.3013 - Packard Bell)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows-Treiberpaket - Sunplus (SPCP825K) Ports  (07/01/2010 1.0.9.0) (HKLM\...\20986CDBFBCA238AA12329A115B1CC9D88E9C06C) (Version: 07/01/2010 1.0.9.0 - Sunplus)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version:  - )
Yahtzee (x32 Version: 2.2.0.82 - WildTangent) Hidden
Zuma Deluxe (x32 Version: 2.2.0.82 - WildTangent) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Franzi\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\liNear GmbH\CAD-Modul 2011\CADMODficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\liNear GmbH\CAD-Modul 2011\CADMOD.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File

==================== Restore Points =========================

21-05-2015 03:00:53 Windows Update
11-06-2015 03:01:28 Windows Update
22-06-2015 20:34:25 Wiederherstellungsvorgang
24-06-2015 21:22:00 Removed Skype™ 7.0
25-06-2015 20:19:35 Malwarebytes Anti-Rootkit Restore Point

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2015-06-25 00:28 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {210DFDC0-D29D-4D1F-A389-5DA24C908FAF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {3C4C58C7-3504-4302-879A-1B18C2F5BCDF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-12] (Adobe Systems Incorporated)
Task: {43FEE7ED-F69B-4B9F-9B0C-488639003506} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {7722B1A7-1AAE-4FA5-8803-9152136EB5ED} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {79CB0E13-08B4-4A1A-B41A-CCC44A7FECB2} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004UA => C:\Users\Franzi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-15] (Facebook Inc.)
Task: {854FA511-20D2-4C46-B801-722E79B99F71} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {A19DB5B7-4B75-4F97-8B13-DC217836681B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {BB61B54C-E26E-4BEF-B53B-6D3E670D168A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004Core => C:\Users\Franzi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-15] (Facebook Inc.)
Task: {CCD0BA7F-9C5F-4648-B4DC-B7C96929851F} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Time-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {F8E95B31-8E0E-460E-8B44-29F0D6E261C6} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {F8EB001B-A72D-4B5B-8156-006A1E6587DC} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004Core.job => C:\Users\Franzi\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004UA.job => C:\Users\Franzi\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2013-01-06 16:03 - 2010-06-17 22:56 - 00087040 _____ () C:\Windows\System32\redmonnt.dll
2012-11-19 04:03 - 2013-01-18 17:00 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2010-10-27 18:53 - 2010-03-15 11:28 - 00052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2015-06-05 07:17 - 2015-05-07 21:12 - 05886784 _____ () C:\Users\Ahrendt\AppData\Local\Amazon Music\Amazon Music Helper.exe
2010-03-26 04:29 - 2010-03-26 04:29 - 00563744 _____ () C:\Program Files (x86)\Packard Bell\Hotkey Utility\HotkeyUtility.exe
2012-11-28 15:13 - 2012-11-28 15:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-11-11 17:06 - 2009-10-06 15:36 - 00205312 _____ () C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\PATCHW32.dll
2013-02-20 15:20 - 2011-01-13 11:44 - 00232800 _____ () C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\PATCHW32.dll
2014-07-26 15:18 - 2011-01-13 11:44 - 00232800 _____ () C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\PATCHW32.dll
2010-03-26 04:29 - 2010-03-26 04:29 - 00154144 _____ () C:\Program Files (x86)\Packard Bell\Hotkey Utility\HotkeyHook.dll
2015-06-23 06:42 - 2015-06-20 07:46 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\libglesv2.dll
2015-06-23 06:42 - 2015-06-20 07:46 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\zillertalbahn.at -> hxxps://www.zillertalbahn.at
IE trusted site: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\zillertalbahn.at -> hxxp://www.zillertalbahn.at


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Ahrendt\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Ahrendt\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Jonas\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Franzi\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Kathi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.179.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{21E466AB-73D5-44ED-93E1-EB4C6C787645}] => (Allow) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\AdobePhotoshopElementsMediaServer.exe
FirewallRules: [{F8C572FA-9C13-4440-8515-0DCF257C7432}] => (Allow) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\AdobePhotoshopElementsMediaServer.exe
FirewallRules: [{625D081F-13FC-4013-B324-F16DDB81680B}] => (Allow) C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{B9F44D94-129B-4C9A-A8F5-27CBF481892C}] => (Allow) C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{BAAF4656-A163-4773-9FAB-924EEF0430B1}] => (Allow) C:\Program Files (x86)\StarMoney 7.0 S-Edition\app\StarMoney.exe
FirewallRules: [{D3B719C8-9B9E-4A34-A6DC-61656EFBD5C7}] => (Allow) C:\Program Files (x86)\StarMoney 7.0 S-Edition\app\StarMoney.exe
FirewallRules: [{4E24477D-3A74-48C2-B16B-423A0CBED643}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{5A631238-FA30-411D-A718-825114937DE8}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{11269547-4FA6-4681-88A4-170749694249}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{A8B7FC55-BB1D-460E-A11E-FEDDD31483AC}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{F56AC759-630A-4210-888C-C2F72878F394}] => (Allow) svchost.exe
FirewallRules: [{B2E4E8AF-17B4-4204-B5AE-2A6B16A4C457}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{71590C80-A7FE-4BA8-87FC-EA51FFD5D4E2}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{D2EA91EE-1534-42FB-BB17-983330F7A54A}] => (Allow) LPort=2869
FirewallRules: [{1E15041B-37E8-4544-AF33-6A8DA1317F8B}] => (Allow) LPort=1900
FirewallRules: [{294AD4DD-A56F-461C-B86A-589AF3561CF1}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{BACF33B4-B49E-4652-9AE5-F7CD8B488D6A}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{6E081DC8-3822-4446-9F2F-7205D697FC0C}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{071FADCE-7ECD-4084-83FA-DA4A158812F4}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{D2BC78E2-514E-4FF4-B944-B16E2340E4CD}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{CBB08867-5C90-46EC-A1D4-6B86BD2FAE8C}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{75F92621-458F-42E5-832F-87B9A1715684}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{715195D1-2799-431E-B181-8C3953EC2F7D}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{874E0363-CE30-4AAC-B100-7114D9F47768}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [TCP Query User{4682AEEA-8F50-4BD5-9888-BEC408F7C9D7}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{02437E10-A271-4201-A96E-CF82EB440930}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [{01092104-F661-435D-BFE3-847928C5940D}] => (Allow) C:\Program Files (x86)\Samsung\Samsung New PC Studio\npsasvr.exe
FirewallRules: [{EB82CADC-30D0-46A3-B50F-177E63818B11}] => (Allow) C:\Program Files (x86)\Samsung\Samsung New PC Studio\npsasvr.exe
FirewallRules: [{48F78E35-5457-46FA-8269-C9EA854B4127}] => (Allow) C:\Program Files (x86)\Samsung\Samsung New PC Studio\npsvsvr.exe
FirewallRules: [{804B2EF5-D689-47F4-9F5D-3D5A43EDF6EB}] => (Allow) C:\Program Files (x86)\Samsung\Samsung New PC Studio\npsvsvr.exe
FirewallRules: [{6D2AC53E-A75F-4A5B-B3AE-9DA196302841}] => (Allow) C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{778B44F9-BFC2-4EDE-9CB8-EA9AD3DD6345}] => (Allow) C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{D61E0676-0861-4721-9081-783C2468BD2D}] => (Allow) C:\Program Files (x86)\StarMoney 8.0 S-Edition\app\StarMoney.exe
FirewallRules: [{50EFBEDD-FD5B-4464-88FF-5D06BF0123A7}] => (Allow) C:\Program Files (x86)\StarMoney 8.0 S-Edition\app\StarMoney.exe
FirewallRules: [{742062C9-4B05-46DF-A9C3-C76D84F5A744}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{D1ECD416-1D0A-40C9-9E0F-FAFE4CAD305E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4410B076-64CA-4119-99E1-A1615FECA210}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{609D9CD9-4F02-4A10-A97A-64F02038B1F6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{29218A37-4992-4B00-80D2-64AA63C977BE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{823CFDF3-57C3-4635-ADF8-90F70DBC0A7F}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [{CBFB2827-FD72-4B6E-93E9-C5768E6D3C10}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{84F31968-EC16-4ACC-9D38-8EB3DDF5B599}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{3469A7B9-7716-49E9-8DE5-C1870A0B199F}C:\users\ahrendt\appdata\roaming\iwek\owomgu.exe] => (Block) C:\users\ahrendt\appdata\roaming\iwek\owomgu.exe
FirewallRules: [UDP Query User{5397193D-DB4A-4D7F-A3F8-47958C5874D0}C:\users\ahrendt\appdata\roaming\iwek\owomgu.exe] => (Block) C:\users\ahrendt\appdata\roaming\iwek\owomgu.exe
FirewallRules: [TCP Query User{BC0F63DE-A434-4C77-89DC-537E578E5FB7}C:\users\franzi\appdata\roaming\zaygu\ukes.exe] => (Block) C:\users\franzi\appdata\roaming\zaygu\ukes.exe
FirewallRules: [UDP Query User{C23132DB-7004-48AA-ACE2-79C56C922A8F}C:\users\franzi\appdata\roaming\zaygu\ukes.exe] => (Block) C:\users\franzi\appdata\roaming\zaygu\ukes.exe
FirewallRules: [{C1284558-9807-4087-B4B9-904381B51563}] => (Allow) C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{8201FE81-21B2-496C-BB48-D1B171906773}] => (Allow) C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{8BCC85E1-A2F5-43D1-B7E5-93611B2154FB}] => (Allow) C:\Program Files (x86)\StarMoney 9.0 S-Edition\app\StarMoney.exe
FirewallRules: [{C61F595D-AB75-400A-B491-1478BA3B7B72}] => (Allow) C:\Program Files (x86)\StarMoney 9.0 S-Edition\app\StarMoney.exe
FirewallRules: [{80C3DCEF-C5CF-45C3-BE5C-163A00C380EA}] => (Allow) C:\Users\Franzi\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{462B0D24-66F3-4EDE-B3FC-C0F3DF0346E9}] => (Allow) C:\Users\Franzi\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{8BD4B56B-3C3D-4D9B-8551-EED9F9E5D630}C:\users\franzi\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\franzi\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{AA4D5F35-F72E-4768-A11B-B0654D2ABF2F}C:\users\franzi\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\franzi\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{E9586850-6E1C-4FDC-8AB8-55C57408090A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is disabled because the firmware of the device did not give it the required resources. (Code 29)
Resolution: Enable the device in the BIOS of the device.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/25/2015 07:44:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: ad8

Startzeit: 01d0af6e051420e0

Endzeit: 34

Anwendungspfad: C:\Windows\Explorer.EXE

Berichts-ID: c85b2241-1b61-11e5-8b1f-90fba686074c

Error: (06/25/2015 07:43:50 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (06/25/2015 01:09:44 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (06/25/2015 00:57:41 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (06/25/2015 00:56:54 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (06/25/2015 00:02:56 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\wbem\wmiprvse.exe; Beschreibung = ComboFix created restore point; Fehler = 0x80042302).

Error: (06/25/2015 00:02:56 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "Error calling CreateFile on volume '\\?\Volume{091f3b7e-5c24-11df-bd14-806e6f6e6963}\'" ist ein unerwarteter Fehler aufgetreten. hr = 0x8000ffff, Schwerwiegender Fehler
.


Vorgang:
  Vergleichsbereich für dieses Volume abfragen

Kontext:
  Volumename: \\?\Volume{091f3b7e-5c24-11df-bd14-806e6f6e6963}\

Error: (06/24/2015 11:59:53 PM) (Source: Software Protection Platform Service) (EventID: 1001) (User: )
Description: Fehler beim Starten des Softwareschutzdiensts.  0xD0000022
6.1.7601.17514

Error: (06/23/2015 04:11:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3350293

Error: (06/23/2015 04:11:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3350293


System errors:
=============
Error: (06/25/2015 09:10:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (06/25/2015 09:10:35 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (06/25/2015 09:06:13 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎25.‎06.‎2015 um 21:05:13 unerwartet heruntergefahren.

Error: (06/25/2015 08:24:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (06/25/2015 08:24:47 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (06/25/2015 07:50:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (06/25/2015 07:50:13 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (06/25/2015 07:47:35 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "MBAMService" ist vom Dienst "MBAMProtector" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%31

Error: (06/25/2015 07:47:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MBAMProtector" wurde aufgrund folgenden Fehlers nicht gestartet:
%%31

Error: (06/25/2015 07:47:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "avgntflt" wurde aufgrund folgenden Fehlers nicht gestartet:
%%31


Microsoft Office:
=========================
Error: (06/15/2014 05:19:48 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6700.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 84820 seconds with 60 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2015-06-25 00:21:31.529
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-06-25 00:21:31.413
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Processor: Pentium(R) Dual-Core CPU E5400 @ 2.70GHz
Percentage of memory in use: 49%
Total physical RAM: 3071.24 MB
Available physical RAM: 1562.97 MB
Total Pagefile: 6140.69 MB
Available Pagefile: 4124.1 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:454.95 GB) (Free:351.1 GB) NTFS
Drive d: (DATA) (Fixed) (Total:455.46 GB) (Free:441.26 GB) NTFS
Drive k: () (Removable) (Total:1.88 GB) (Free:1.19 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 17C23BE2)
Partition 1: (Not Active) - (Size=21 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=455 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=455.5 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 1.9 GB) (Disk ID: 0009E87D)
No partition Table on disk 2.

==================== End of log ============================
--- --- ---

Joahpi 25.06.2015 21:10
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:24-06-2015
Ran by Ahrendt (administrator) on AHRENDT-PC on 25-06-2015 22:04:47
Running from C:\Users\Ahrendt\Desktop
Loaded Profiles: Ahrendt &  (Available Profiles: Ahrendt & Jonas & Franzi & Kathi & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\avmike.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\certsrv.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(Acer Group) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\vVX3000.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe
() C:\Users\Ahrendt\AppData\Local\Amazon Music\Amazon Music Helper.exe
() C:\Program Files (x86)\Packard Bell\Hotkey Utility\HotkeyUtility.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Microsoft) C:\Program Files (x86)\Packard Bell\Hotkey Utility\HotkeyUI.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9608224 2009-11-17] (Realtek Semiconductor)
HKLM\...\Run: [OOTag] => C:\Program Files (x86)\Packard Bell\OOBEOffer\ootag.exe [13856 2010-02-23] (Microsoft)
HKLM\...\Run: [VX3000] => C:\Windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-25] (CANON INC.)
HKLM-x32\...\Run: [OOTag] => C:\Program Files (x86)\Packard Bell\OOBEOffer\OOTag.exe [13856 2010-02-23] (Microsoft)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Hotkey Utility] => C:\Program Files (x86)\Packard Bell\Hotkey Utility\HotkeyUtility.exe [563744 2010-03-26] ()
HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [588648 2009-07-25] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LifeCam] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1213848 2010-09-14] (CANON INC.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [730416 2015-06-10] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152544 2012-12-12] (Apple Inc.)
HKLM-x32\...\Run: [FreePDF Assistant] => C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [130864 2015-05-21] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2937528 2010-11-21] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [AutoStartNPSAgent] => C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [95576 2010-07-04] (Samsung Electronics Co., Ltd.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Run: [Amazon Music] => C:\Users\Ahrendt\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886784 2015-05-07] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2937528 2010-11-21] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [AutoStartNPSAgent] => C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [95576 2010-07-04] (Samsung Electronics Co., Ltd.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Amazon Music] => C:\Users\Ahrendt\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886784 2015-05-07] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Facebook Update] => C:\Users\Franzi\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-12-15] (Facebook Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {91103586-91b5-11e4-b5c0-90fba686074c} - K:\iLinker.exe
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-03-15] (Google Inc.)
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {91103586-91b5-11e4-b5c0-90fba686074c} - K:\iLinker.exe
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Packard Bell.scr [425984 2009-08-05] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [ScrSav] => C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162336 2009-07-22] ()
HKU\S-1-5-21-3928908445-2049478909-3784465887-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Packard Bell.scr [425984 2009-08-05] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk [2010-11-21]
ShortcutTarget: GamersFirst LIVE!.lnk -> C:\Program Files (x86)\GamersFirst\LIVE!\Live.exe (GamersFirst)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Franzi\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
ShellIconOverlayIdentifiers: [Symbol-Overlay-Steuerprogramm für AutoCAD Digitale Signaturen] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2010-02-10] (Autodesk, Inc.)
GroupPolicyUsers\S-1-5-21-3928908445-2049478909-3784465887-1004\User: Group Policy Restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-3928908445-2049478909-3784465887-1003\User: Group Policy Restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.as-holm.de/
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.as-holm.de/
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&m=imedia_s1800&r=173610105906pe425v165y4572261n
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {3A4D4030-84C7-44ED-88F6-848AF6DC65DD} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=1840E579-392B-4023-8A89-361012000303&apn_sauid=F292E45F-2D8D-4264-A64A-296226E6CEA9&
SearchScopes: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_deDE399DE399
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)
BHO-x32: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2010-11-08] (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-03] (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18] (Oracle Corporation)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2010-11-08] (CANON INC.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-3928908445-2049478909-3784465887-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
DPF: HKLM-x32 {73888E2B-FF04-416C-8847-984D7FC4507F} hxxp://eggerstedt.dyndns.org:1030/RtspVaPgDecNew2.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Tcpip\Parameters: [DhcpNameServer] 192.168.179.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2012-10-31] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-14] (CANON INC.)
FF Plugin-x32: @gamersfirst.com/LiveLauncher -> C:\Program Files (x86)\GamersFirst\LIVE!\nplivelauncher.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-12-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-12-18] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3928908445-2049478909-3784465887-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Franzi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)

Chrome:
=======
CHR Profile: C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-01-22]
CHR Extension: (Google Search) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-01-22]
CHR Extension: (Avira Browser Safety) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]
CHR Extension: (Google Wallet) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28]
CHR Extension: (Gmail) - C:\Users\Ahrendt\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-01-22]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [827184 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [450808 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [450808 2015-06-10] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1188360 2015-06-10] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [208632 2015-05-21] (Avira Operations GmbH & Co. KG)
R2 avmike; C:\Program Files\FRITZ!Fernzugang\avmike.exe [336248 2012-02-02] (AVM Berlin)
R2 certsrv; C:\Program Files\FRITZ!Fernzugang\certsrv.exe [143736 2011-10-31] (AVM Berlin)
S3 GameConsoleService; C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe [238328 2009-10-10] (WildTangent, Inc.)
R2 Greg_Service; C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 nwtsrv; C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe [189304 2011-10-31] (AVM Berlin)
R2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 StarMoney 8.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
R2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [21120 2011-08-09] (SafeNet Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [153256 2015-06-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132656 2015-06-10] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-05] (Avira Operations GmbH & Co. KG)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [321536 2011-10-07] (SafeNet Inc.)
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [107736 2015-06-25] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R3 NWIM; C:\Windows\System32\DRIVERS\avmnwim.sys [412024 2011-07-05] (AVM Berlin)
S3 SPCP825K; C:\Windows\System32\DRIVERS\SPCP825K.sys [42056 2010-07-19] (SUNPLUS TECHNOLOGY Co., LTD.)
S3 ssm_bus; C:\Windows\System32\DRIVERS\ssm_bus.sys [136192 2010-04-27] (MCCI Corporation)
S3 ssm_mdfl; C:\Windows\System32\DRIVERS\ssm_mdfl.sys [18944 2010-04-27] (MCCI Corporation)
S3 ssm_mdm; C:\Windows\System32\DRIVERS\ssm_mdm.sys [172032 2010-04-27] (MCCI Corporation)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 sxuptp; system32\DRIVERS\sxuptp.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-25 19:50 - 2015-06-25 21:41 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-06-25 19:44 - 2015-06-25 21:40 - 00000000 ____D C:\Users\Ahrendt\Desktop\mbar
2015-06-25 19:44 - 2015-06-25 19:42 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Ahrendt\Desktop\tdsskiller.exe
2015-06-25 19:43 - 2015-06-25 19:42 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Ahrendt\Desktop\mbar-1.09.1.1004.exe
2015-06-25 01:16 - 2015-06-25 01:16 - 00268558 _____ C:\Users\Ahrendt\Desktop\JRT.txt
2015-06-25 01:12 - 2015-06-25 01:12 - 00000207 _____ C:\Windows\tweaking.com-regbackup-AHRENDT-PC-Windows-7-Home-Premium-(64-bit).dat
2015-06-25 01:12 - 2015-06-25 01:12 - 00000000 ____D C:\RegBackup
2015-06-25 01:05 - 2015-06-25 01:07 - 00000000 ____D C:\AdwCleaner
2015-06-25 00:57 - 2015-06-25 00:53 - 02870984 _____ (ESET) C:\Users\Ahrendt\Desktop\esetsmartinstaller_deu.exe
2015-06-25 00:57 - 2015-06-25 00:53 - 00852662 _____ C:\Users\Ahrendt\Desktop\SecurityCheck.exe
2015-06-25 00:57 - 2015-06-25 00:50 - 02951730 _____ (Malwarebytes Corporation) C:\Users\Ahrendt\Desktop\JRT.exe
2015-06-25 00:57 - 2015-06-25 00:50 - 02244096 _____ C:\Users\Ahrendt\Desktop\AdwCleaner_4.207.exe
2015-06-25 00:37 - 2015-06-25 00:37 - 00021755 _____ C:\ComboFix.txt
2015-06-25 00:02 - 2015-06-25 00:37 - 00000000 ____D C:\Qoobox
2015-06-25 00:02 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-06-25 00:02 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-06-25 00:02 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-06-25 00:02 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-06-25 00:01 - 2015-06-25 00:35 - 00000000 ____D C:\Windows\erdnt
2015-06-25 00:01 - 2015-06-24 23:54 - 05630239 ____R (Swearware) C:\Users\Ahrendt\Desktop\ComboFix.exe
2015-06-24 23:56 - 2015-06-24 23:56 - 00290384 _____ C:\Windows\Minidump\062415-31137-01.dmp
2015-06-24 22:35 - 2015-06-24 22:38 - 00043903 _____ C:\Users\Ahrendt\Desktop\Addition.txt
2015-06-24 22:34 - 2015-06-25 22:05 - 00033233 _____ C:\Users\Ahrendt\Desktop\FRST.txt
2015-06-24 22:34 - 2015-06-25 22:04 - 00000000 ____D C:\FRST
2015-06-24 22:33 - 2015-06-24 22:32 - 02112512 _____ (Farbar) C:\Users\Ahrendt\Desktop\FRST64.exe
2015-06-24 22:31 - 2015-06-24 22:43 - 00000476 _____ C:\Users\Ahrendt\Desktop\defogger_disable.log
2015-06-24 22:31 - 2015-06-24 22:31 - 00000000 _____ C:\Users\Ahrendt\defogger_reenable
2015-06-24 22:25 - 2015-06-24 22:20 - 00380416 _____ C:\Users\Ahrendt\Desktop\Gmer-19357.exe
2015-06-24 22:25 - 2015-06-24 22:19 - 00050477 _____ C:\Users\Ahrendt\Desktop\Defogger.exe
2015-06-24 22:08 - 2015-06-24 22:19 - 01636352 _____ (Farbar) C:\Users\Ahrendt\Desktop\FRST.exe
2015-06-24 21:42 - 2015-06-24 21:42 - 00001218 _____ C:\Users\Ahrendt\Desktop\malware 1.txt
2015-06-24 21:27 - 2015-06-25 21:10 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-24 21:27 - 2015-06-25 20:26 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-06-24 21:27 - 2015-06-24 21:27 - 00001118 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-06-24 21:27 - 2015-06-24 21:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-06-24 21:27 - 2015-06-24 21:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-24 21:27 - 2015-06-24 21:27 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-24 21:27 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-06-24 21:27 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-06-24 20:54 - 2015-06-24 20:54 - 00000703 _____ C:\Users\Ahrendt\Desktop\mbam-setup-2.1.6.1022 - Verknüpfung.lnk
2015-06-24 05:59 - 2015-06-24 05:59 - 00000000 ____D C:\ProgramData\PMB Files
2015-06-21 13:50 - 2015-06-21 13:50 - 02931056 _____ C:\Users\Ahrendt\Downloads\SecurityTaskManager_Setup.exe
2015-06-19 18:27 - 2015-06-25 21:56 - 00007655 _____ C:\Users\Ahrendt\AppData\Local\Resmon.ResmonCfg
2015-06-19 17:58 - 2015-06-25 20:20 - 00000000 ___HD C:\ProgramData\{CA2FACF7-9029-4A21-892B-E7F60B39FF1A}
2015-06-18 11:14 - 2015-06-19 13:53 - 00000000 ____D C:\Users\Jonas\AppData\Local\{EA7E46CE-AB76-46C4-A65B-48BC06911FE2}
2015-06-18 11:14 - 2015-06-18 11:14 - 00000000 ____D C:\Users\Jonas\AppData\Local\GWX
2015-06-17 20:34 - 2015-06-17 20:34 - 00000000 ____D C:\Users\Jonas\AppData\Local\{90D4594C-86ED-4EF8-A507-A4116B7DDFA8}
2015-06-16 19:49 - 2015-06-16 19:49 - 00000000 ____D C:\Users\Kathi\AppData\Local\{E55BD9A8-B2A1-49CB-AC8D-1909E2785747}
2015-06-13 12:07 - 2015-06-13 12:07 - 00002168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-06-13 11:55 - 2015-06-13 11:55 - 00001132 _____ C:\Users\Public\Desktop\Avira.lnk
2015-06-13 11:49 - 2015-06-13 11:49 - 00862016 _____ C:\Windows\Minidump\061315-23930-01.dmp
2015-06-10 15:43 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-10 15:43 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-10 15:43 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-10 15:43 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-10 15:43 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-10 15:43 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-10 15:43 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-10 15:43 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-10 15:43 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-10 15:43 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-10 15:43 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-10 15:43 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-10 15:43 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-10 15:43 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-10 15:43 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-10 15:43 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-10 15:43 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-10 15:43 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-10 15:43 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-10 15:43 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-10 15:43 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-10 15:43 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-10 15:43 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 15:43 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-10 15:43 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-10 15:43 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-10 15:43 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-10 15:43 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-10 15:43 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-10 15:43 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-10 15:43 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-10 15:43 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 15:43 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-10 15:43 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-10 15:43 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-10 15:43 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-10 15:43 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-10 15:42 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-10 15:42 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-10 15:42 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 15:42 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-10 15:42 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-10 15:42 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-10 15:42 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-10 15:42 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-10 15:42 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-10 15:42 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-10 15:42 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-10 15:42 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-10 15:42 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-10 15:42 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-10 15:42 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-10 15:42 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-10 15:42 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-10 15:42 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-10 15:42 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-10 15:42 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-10 15:42 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-10 15:42 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-10 15:42 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-10 15:42 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-10 15:42 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-10 15:42 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-10 15:42 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-10 15:42 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-10 15:42 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-10 15:42 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-10 15:42 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-10 15:42 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 15:42 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-10 15:42 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-10 15:42 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 15:42 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 15:42 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 15:42 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-10 15:42 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-10 15:42 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 15:42 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 15:42 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-10 15:42 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 15:42 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 15:42 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-10 15:42 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 15:42 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-10 15:42 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-10 15:42 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 15:42 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-10 15:42 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-10 15:42 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 15:42 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 15:42 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-10 15:42 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 15:42 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 15:42 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-10 15:42 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 15:42 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-10 15:42 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 15:42 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-10 15:42 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-10 15:42 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-10 15:42 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-10 15:05 - 2015-06-10 15:05 - 00821856 _____ C:\Windows\Minidump\061015-20654-01.dmp
2015-06-09 16:33 - 2015-06-09 16:34 - 00000000 ____D C:\Users\Franzi\AppData\Local\{2476C28F-AB07-482B-BD1E-0CB87CA663A3}
2015-06-05 08:08 - 2015-06-05 08:08 - 00833032 _____ C:\Windows\Minidump\060515-18392-01.dmp
2015-06-05 07:17 - 2015-06-05 07:17 - 00001152 _____ C:\Users\Ahrendt\Desktop\Amazon Music.lnk
2015-06-05 07:16 - 2015-06-05 07:17 - 41033208 _____ (Amazon) C:\Users\Ahrendt\Downloads\AmazonMusicInstaller.exe
2015-06-05 07:00 - 2015-06-05 07:00 - 00000000 ____D C:\Users\Ahrendt\AppData\Local\GWX
2015-06-05 06:58 - 2015-06-05 06:58 - 00873320 _____ C:\Windows\Minidump\060515-19905-01.dmp
2015-06-04 20:48 - 2015-06-04 20:48 - 00000000 ____D C:\Users\Franzi\AppData\Local\{497D942B-BD8D-4273-9C76-A94891439FCF}
2015-06-02 18:06 - 2015-06-02 18:06 - 00000000 ____D C:\Users\Kathi\AppData\Local\GWX
2015-06-02 17:51 - 2015-06-02 17:51 - 00814696 _____ C:\Windows\Minidump\060215-19063-01.dmp
2015-06-01 15:03 - 2015-06-01 15:03 - 00000000 ____D C:\Users\Franzi\AppData\Local\{9FB7F37B-F715-416A-B3F8-D981C8F0D1B2}
2015-06-01 15:02 - 2015-06-01 15:02 - 00000000 ____D C:\Users\Franzi\AppData\Local\GWX
2015-06-01 07:17 - 2015-06-01 07:17 - 00819792 _____ C:\Windows\Minidump\060115-19671-01.dmp
2015-05-31 18:01 - 2015-05-31 18:01 - 00000000 ____D C:\Users\Franzi\AppData\Local\{BA95F12D-F725-450A-A5AB-7E79B153ED99}
2015-05-28 19:35 - 2015-05-28 19:35 - 00814984 _____ C:\Windows\Minidump\052815-18766-01.dmp
2015-05-28 13:13 - 2015-05-28 13:13 - 00000000 ____D C:\Users\Franzi\AppData\Local\{429AD207-1D86-4532-82BB-15B6077F19CE}
2015-05-27 18:11 - 2015-05-27 18:11 - 00000000 ____D C:\Users\Franzi\AppData\Local\{A1B29565-6E07-4382-8E39-38E562DB4189}
2015-05-27 08:11 - 2015-05-27 08:11 - 00000000 ____D C:\Users\Kathi\AppData\Local\{5DF776B8-67BC-4B61-BB47-C8FCE42B55AB}
2015-05-26 19:04 - 2015-05-26 19:05 - 00000000 ____D C:\Users\Kathi\AppData\Local\{BD89496F-B649-427A-B63F-B0CF937A616F}
2015-05-26 17:54 - 2015-05-26 17:54 - 00001972 _____ C:\Users\Ahrendt\Desktop\3476-123 col - Verknüpfung.lnk

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-25 21:45 - 2010-05-10 13:09 - 01781282 _____ C:\Windows\WindowsUpdate.log
2015-06-25 21:40 - 2010-11-21 14:57 - 00000000 ____D C:\Users\Ahrendt\AppData\Local\PMB Files
2015-06-25 21:16 - 2009-07-14 06:45 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-25 21:16 - 2009-07-14 06:45 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-25 21:06 - 2011-07-31 16:48 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2015-06-25 21:06 - 2010-05-10 13:17 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-25 21:06 - 2010-03-15 15:09 - 00747004 _____ C:\Windows\PFRO.log
2015-06-25 21:06 - 2009-07-14 06:51 - 00125162 _____ C:\Windows\setupact.log
2015-06-25 20:21 - 2009-07-14 09:45 - 00000000 ____D C:\Windows\ShellNew
2015-06-25 00:37 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-06-25 00:28 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-06-25 00:21 - 2010-10-03 12:25 - 00000000 ____D C:\Users\Ahrendt
2015-06-24 23:56 - 2011-09-30 07:40 - 220234158 _____ C:\Windows\MEMORY.DMP
2015-06-24 23:56 - 2011-09-30 07:40 - 00000000 ____D C:\Windows\Minidump
2015-06-24 21:47 - 2014-01-05 16:13 - 00000000 ____D C:\Program Files (x86)\StarMoney 9.0 S-Edition
2015-06-24 21:23 - 2013-08-17 17:50 - 00000000 ____D C:\Users\Ahrendt\AppData\Roaming\Skype
2015-06-24 21:23 - 2013-08-13 15:13 - 00000000 ____D C:\ProgramData\Skype
2015-06-24 05:41 - 2010-05-08 05:19 - 00699432 _____ C:\Windows\system32\perfh007.dat
2015-06-24 05:41 - 2010-05-08 05:19 - 00149572 _____ C:\Windows\system32\perfc007.dat
2015-06-24 05:41 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-23 06:42 - 2013-01-22 15:18 - 00002187 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-22 21:56 - 2010-10-03 12:42 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-22 21:56 - 2010-10-03 12:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-22 21:44 - 2013-01-22 15:18 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-22 21:23 - 2012-12-15 13:18 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004UA.job
2015-06-22 21:09 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-22 20:43 - 2015-04-06 11:29 - 00000000 ___SD C:\Windows\system32\GWX
2015-06-22 20:43 - 2013-01-22 15:18 - 00000000 ____D C:\Windows\system32\Macromed
2015-06-22 20:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2015-06-22 20:26 - 2015-04-06 11:29 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-06-22 14:42 - 2012-12-15 13:18 - 00000910 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3928908445-2049478909-3784465887-1004Core.job
2015-06-21 14:33 - 2013-01-05 22:07 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-06-20 09:28 - 2011-05-13 20:53 - 00000000 ____D C:\Users\Ahrendt\AppData\Local\CrashDumps
2015-06-19 18:01 - 2012-12-25 16:28 - 00000000 ____D C:\ProgramData\Avira
2015-06-19 14:21 - 2011-02-22 13:46 - 00000000 ____D C:\Users\Kathi\AppData\Local\CrashDumps
2015-06-18 11:15 - 2015-03-13 10:00 - 00000000 __SHD C:\Users\Jonas\AppData\Local\EmieBrowserModeList
2015-06-18 11:15 - 2014-04-30 19:35 - 00000000 __SHD C:\Users\Jonas\AppData\Local\EmieUserList
2015-06-18 11:15 - 2014-04-30 19:35 - 00000000 __SHD C:\Users\Jonas\AppData\Local\EmieSiteList
2015-06-18 11:14 - 2010-10-03 19:51 - 00000000 ____D C:\Users\Jonas\Tracing
2015-06-17 11:38 - 2014-11-18 17:05 - 00000000 __SHD C:\Users\Kathi\AppData\Local\EmieBrowserModeList
2015-06-17 11:38 - 2014-05-02 16:01 - 00000000 __SHD C:\Users\Kathi\AppData\Local\EmieUserList
2015-06-17 11:38 - 2014-05-02 16:01 - 00000000 __SHD C:\Users\Kathi\AppData\Local\EmieSiteList
2015-06-16 16:45 - 2012-12-25 15:50 - 00002198 ____H C:\Users\Ahrendt\Documents\Default.rdp
2015-06-13 12:09 - 2014-11-13 17:47 - 00000000 __SHD C:\Users\Ahrendt\AppData\Local\EmieBrowserModeList
2015-06-13 12:09 - 2014-04-23 11:45 - 00000000 __SHD C:\Users\Ahrendt\AppData\Local\EmieUserList
2015-06-13 12:09 - 2014-04-23 11:45 - 00000000 __SHD C:\Users\Ahrendt\AppData\Local\EmieSiteList
2015-06-13 12:06 - 2010-03-15 15:02 - 00000000 ____D C:\Program Files (x86)\Google
2015-06-13 11:55 - 2014-08-06 08:55 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-13 11:54 - 2012-12-25 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-06-13 11:54 - 2012-12-25 16:28 - 00000000 ____D C:\Program Files (x86)\Avira
2015-06-12 08:02 - 2013-01-22 15:18 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-12 08:01 - 2013-01-22 15:18 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-12 08:01 - 2013-01-22 15:18 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-11 10:18 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-11 03:39 - 2009-07-14 06:45 - 00414912 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-11 03:36 - 2014-12-12 04:31 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-11 03:36 - 2014-05-07 03:01 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-11 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-11 03:18 - 2010-03-15 14:52 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-11 03:16 - 2013-08-16 03:02 - 00000000 ____D C:\Windows\system32\MRT
2015-06-11 03:05 - 2010-11-14 16:32 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-10 15:17 - 2013-03-28 10:06 - 00153256 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-06-10 15:17 - 2013-03-28 10:06 - 00132656 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-06-09 16:34 - 2014-03-06 20:56 - 00000000 ___RD C:\Users\Franzi\Dropbox
2015-06-09 16:34 - 2014-03-06 20:51 - 00000000 ____D C:\Users\Franzi\AppData\Roaming\Dropbox
2015-06-09 16:33 - 2010-10-03 19:14 - 00000000 ____D C:\Users\Franzi\Tracing
2015-06-07 20:51 - 2013-12-25 19:02 - 00000000 ____D C:\Users\Ahrendt\AppData\Local\iCopy
2015-05-26 19:16 - 2014-04-04 15:06 - 00000000 ____D C:\Users\Kathi\AppData\Local\Windows Live

==================== Files in the root of some directories =======

2011-05-02 14:33 - 2011-08-03 11:56 - 0005120 _____ () C:\Users\Ahrendt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-06-19 18:27 - 2015-06-25 21:56 - 0007655 _____ () C:\Users\Ahrendt\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\Ahrendt\AppData\Local\Temp\avgnt.exe
C:\Users\Ahrendt\AppData\Local\Temp\Quarantine.exe
C:\Users\Ahrendt\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-15 18:16

==================== End of log ============================

cosinus 25.06.2015 21:19
FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
GroupPolicyUsers\S-1-5-21-3928908445-2049478909-3784465887-1004\User: Group Policy Restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-3928908445-2049478909-3784465887-1003\User: Group Policy Restriction detected <======= ATTENTION
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
C:\ProgramData\{CA2FACF7-9029-4A21-892B-E7F60B39FF1A}
C:\Users\Jonas\AppData\Local\{EA7E46CE-AB76-46C4-A65B-48BC06911FE2}
C:\Users\Jonas\AppData\Local\{90D4594C-86ED-4EF8-A507-A4116B7DDFA8}
C:\Users\Kathi\AppData\Local\{E55BD9A8-B2A1-49CB-AC8D-1909E2785747}
EmptyTemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


Joahpi 25.06.2015 21:42
Code:
Fix result of Farbar Recovery Scan Tool (x64) Version:24-06-2015
Ran by Ahrendt at 2015-06-25 22:24:11 Run:1
Running from C:\Users\Ahrendt\Desktop
Loaded Profiles: Ahrendt &  (Available Profiles: Ahrendt & Jonas & Franzi & Kathi & UpdatusUser)
Boot Mode: Normal
==============================================

fixlist content:
*****************
GroupPolicyUsers\S-1-5-21-3928908445-2049478909-3784465887-1004\User: Group Policy Restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-3928908445-2049478909-3784465887-1003\User: Group Policy Restriction detected <======= ATTENTION
HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
C:\ProgramData\{CA2FACF7-9029-4A21-892B-E7F60B39FF1A}
C:\Users\Jonas\AppData\Local\{EA7E46CE-AB76-46C4-A65B-48BC06911FE2}
C:\Users\Jonas\AppData\Local\{90D4594C-86ED-4EF8-A507-A4116B7DDFA8}
C:\Users\Kathi\AppData\Local\{E55BD9A8-B2A1-49CB-AC8D-1909E2785747}
EmptyTemp:
*****************

C:\Windows\system32\GroupPolicyUsers\S-1-5-21-3928908445-2049478909-3784465887-1004\User => moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully.
C:\Windows\system32\GroupPolicyUsers\S-1-5-21-3928908445-2049478909-3784465887-1003\User => moved successfully.
"HKU\S-1-5-21-3928908445-2049478909-3784465887-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
C:\ProgramData\{CA2FACF7-9029-4A21-892B-E7F60B39FF1A} => moved successfully.
C:\Users\Jonas\AppData\Local\{EA7E46CE-AB76-46C4-A65B-48BC06911FE2} => moved successfully.
C:\Users\Jonas\AppData\Local\{90D4594C-86ED-4EF8-A507-A4116B7DDFA8} => moved successfully.
C:\Users\Kathi\AppData\Local\{E55BD9A8-B2A1-49CB-AC8D-1909E2785747} => moved successfully.
EmptyTemp: => 4.6 GB temporary data Removed.


The system needed a reboot..

==== End of Fixlog 22:38:23 ====

cosinus 25.06.2015 21:44
Okay, dann Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Joahpi 28.06.2015 18:08
So, ich bin wieder im Lande und kann nun weitermachen-

zunächst das Log-File von MBAM:
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org


Error, 27.06.2015 20:57, SYSTEM, AHRENDT-PC, Protection, IsLicensed, 13,
Protection, 27.06.2015 20:57, SYSTEM, AHRENDT-PC, Protection, Malware Protection, Stopping,
Protection, 27.06.2015 20:57, SYSTEM, AHRENDT-PC, Protection, Malware Protection, Stopped,
Update, 27.06.2015 21:02, SYSTEM, AHRENDT-PC, Manual, Remediation Database, 2015.6.15.1, 2015.6.26.1,
Update, 27.06.2015 21:02, SYSTEM, AHRENDT-PC, Manual, Rootkit Database, 2015.6.22.1, 2015.6.26.1,
Update, 27.06.2015 21:02, SYSTEM, AHRENDT-PC, Manual, Malware Database, 2015.6.26.1, 2015.6.27.3,
Update, 27.06.2015 21:02, SYSTEM, AHRENDT-PC, Manual, program, 2.1.6.1022, 2.1.8.0,
Error, 27.06.2015 21:05, SYSTEM, AHRENDT-PC, Update, Bad md5 or size: akadomains, 11,
Error, 27.06.2015 21:05, SYSTEM, AHRENDT-PC, Update, Bad md5 or size: akaips, 11,
Update, 27.06.2015 21:05, SYSTEM, AHRENDT-PC, Manual, Domain Database, 0.0.0.0, 2015.6.12.1,
Update, 27.06.2015 21:05, SYSTEM, AHRENDT-PC, Manual, Remediation Database, 2015.5.13.1, 2015.6.26.1,
Update, 27.06.2015 21:05, SYSTEM, AHRENDT-PC, Manual, Rootkit Database, 2015.6.2.1, 2015.6.26.1,
Update, 27.06.2015 21:05, SYSTEM, AHRENDT-PC, Manual, IP Database, 0.0.0.0, 2015.6.12.1,
Update, 27.06.2015 21:05, SYSTEM, AHRENDT-PC, Manual, AKA IP Database, 0.0.0.0, 2015.6.12.1,
Update, 27.06.2015 21:05, SYSTEM, AHRENDT-PC, Manual, AKA Domain Database, 0.0.0.0, 2015.6.12.1,
Update, 27.06.2015 21:05, SYSTEM, AHRENDT-PC, Manual, Malware Database, 2015.6.3.3, 2015.6.27.3,

(end)
und hier von Eset:
Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=930cbf65353e7a42913c4629eaa31a2e
# end=init
# utc_time=2015-06-27 07:36:01
# local_time=2015-06-27 09:36:01 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 24536
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=930cbf65353e7a42913c4629eaa31a2e
# end=updated
# utc_time=2015-06-27 07:39:12
# local_time=2015-06-27 09:39:12 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=930cbf65353e7a42913c4629eaa31a2e
# engine=24536
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-06-27 09:55:30
# local_time=2015-06-27 11:55:30 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 61014138 187071980 0 0
# scanned=419599
# found=1
# cleaned=0
# scan_time=8177
sh=633BC524428DEF52C6A1DFFF6593B1C6054A480B ft=1 fh=76b4636b0ec33ffb vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir"
Ich habe gerade festgestellt, das meine MBAM-Log Datei falsch ist, ich finde jedoch die "scan log" nicht, lediglich die "Schutz log" wird mir angezeigt - kannst Du da auch irgend etwas mit anfangen ?

Hallo Cosinus,

ich bekomme kein Scan-log mehr aus dem Programm heraus, es sind immer nur ein "Schutz-log" bzw beim benutzerdefinierten Suchlauf das beigefügte Suchlaufprotokoll.
Vielleicht hilft's ja auch.


Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 28.06.2015
Suchlaufzeit: 18:01
Protokolldatei: mblog.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.06.28.02
Rootkit-Datenbank: v2015.06.26.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Ahrendt

Suchlauftyp: Benutzerdefinierter Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 548297
Abgelaufene Zeit: 4 Min., 29 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Deaktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 1
PUP.Optional.Ask.A, HKU\S-1-5-21-3928908445-2049478909-3784465887-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3A4D4030-84C7-44ED-88F6-848AF6DC65DD}, , [ee24fec28bff7eb8ffb68b082adbf808],

Registrierungswerte: 1
PUP.Optional.Ask.A, HKU\S-1-5-21-3928908445-2049478909-3784465887-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3A4D4030-84C7-44ED-88F6-848AF6DC65DD}|URL, hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=1840E579-392B-4023-8A89-361012000303&apn_sauid=F292E45F-2D8D-4264-A64A-296226E6CEA9&, , [ee24fec28bff7eb8ffb68b082adbf808]

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

cosinus 28.06.2015 22:46
MBAM wiederholen. Du hast die restlichen Funde nicht entfernen lassen.

Joahpi 29.06.2015 19:35
Ich hab nun MBAM neu installiert und das herausbekommen:
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org


Update, 29.06.2015 06:24, SYSTEM, AHRENDT-PC, Manual, Malware Database, 2015.6.28.3, 2015.6.28.4,
Scan, 29.06.2015 06:31, SYSTEM, AHRENDT-PC, Manual, Start: 29.06.2015 06:26, Dauer: 5 Min. 33 Sek., Benutzerdefinierter Suchlauf, Abgeschlossen, 0 Malware-Erkennung, 0 Nicht-Malware-Erkennungen,
Error, 29.06.2015 19:44, SYSTEM, AHRENDT-PC, Protection, IsLicensed, 13,
Protection, 29.06.2015 19:44, SYSTEM, AHRENDT-PC, Protection, Malware Protection, Stopping,
Protection, 29.06.2015 19:44, SYSTEM, AHRENDT-PC, Protection, Malware Protection, Stopped,
Protection, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Protection, Malware Protection, Starting,
Protection, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Protection, Malware Protection, Started,
Protection, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Protection, Malicious Website Protection, Starting,
Protection, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Protection, Malicious Website Protection, Started,
Update, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Manual, Remediation Database, 2015.3.9.1, 2015.6.26.1,
Update, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Manual, IP Database, 0.0.0.0, 2015.6.12.1,
Update, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Manual, Domain Database, 0.0.0.0, 2015.6.12.1,
Update, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Manual, Rootkit Database, 2015.2.25.1, 2015.6.26.1,
Update, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Manual, Malware Database, 2015.3.9.5, 2015.6.29.3,
Protection, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Protection, Refresh, Starting,
Protection, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Protection, Malicious Website Protection, Stopping,
Protection, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Protection, Malicious Website Protection, Stopped,
Protection, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Protection, Refresh, Success,
Protection, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Protection, Malicious Website Protection, Starting,
Protection, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Protection, Malicious Website Protection, Started,
Protection, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Protection, Malicious Website Protection, Stopping,
Protection, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Protection, Malicious Website Protection, Stopped,
Protection, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Protection, Malware Protection, Stopping,
Protection, 29.06.2015 19:54, SYSTEM, AHRENDT-PC, Protection, Malware Protection, Stopped,
Protection, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Protection, Malware Protection, Starting,
Protection, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Protection, Malware Protection, Started,
Error, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Update, Bad md5 or size: akadomains, 11,
Error, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Update, Bad md5 or size: akaips, 11,
Update, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Manual, Domain Database, 0.0.0.0, 2015.6.12.1,
Update, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Manual, Remediation Database, 2015.5.13.1, 2015.6.26.1,
Update, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Manual, Rootkit Database, 2015.6.2.1, 2015.6.26.1,
Update, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Manual, IP Database, 0.0.0.0, 2015.6.12.1,
Update, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Manual, AKA IP Database, 0.0.0.0, 2015.6.12.1,
Update, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Manual, AKA Domain Database, 0.0.0.0, 2015.6.12.1,
Update, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Manual, Malware Database, 2015.6.3.3, 2015.6.29.3,
Protection, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Protection, Refresh, Starting,
Protection, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Protection, Refresh, Success,
Protection, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Protection, Malicious Website Protection, Starting,
Protection, 29.06.2015 19:55, SYSTEM, AHRENDT-PC, Protection, Malicious Website Protection, Started,
Scan, 29.06.2015 20:26, SYSTEM, AHRENDT-PC, Manual, Start: 29.06.2015 19:55, Dauer: 30 Min. 27 Sek., Bedrohungssuchlauf, Abgeschlossen, 0 Malware-Erkennung, 0 Nicht-Malware-Erkennungen,

(end)

cosinus 29.06.2015 19:42
Das ist das falsche Log. Bitte keine Protection-Logs posten.

Joahpi 29.06.2015 20:10
Entschuldigung, war doppelt

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 29.06.2015
Suchlaufzeit: 20:38
Protokolldatei: suchlauf.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.06.29.04
Rootkit-Datenbank: v2015.06.26.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Ahrendt

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 561597
Abgelaufene Zeit: 20 Min., 45 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

cosinus 29.06.2015 22:34
Sieht soweit ok aus :daumenhoc

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) empfehle ich die Erweiterung Ghostery, diese verhindert weitgehend Usertracking bzw. das Anzeigen von Werbebannern.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

Joahpi 30.06.2015 05:46
Hallo Cosinus,

zunächst einmal vielen Dank für den Einsatz und die Hilfe. Ich habe keine weiteren Probleme festgestellt und hoffe, die Sache ist damit erfolgreich überstanden. Der Rechner läuft wieder wie gehabt.

Ich deinstalliere nun alle Anwendungen, die ich in den letzten Tagen geladen hatte und werde Ghostery für unseren Familienrechner laden.

Nochmals Vielen Dank

Joahpi

cosinus 30.06.2015 07:53
Dann wären wir durch! :daumenhoc

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

Abschließend müssen wir noch ein paar Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren
  • Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  • Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
  • Klicke auf OK.
    Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
  • Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
 Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

   
   


Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Joahpi 01.07.2015 21:26
Alles erfolgreich erledigt - vielen Dank


Alle Zeitangaben in WEZ +1. Es ist jetzt 09:19 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131