Ads not by this Site Problem

RONsen · 04.08.2013, 14:14

Hallo,

habe mich in letzter Zeit immer gewundert das bei mir immer zuviel Werbung aufpopt trotz AD plus im Firefox.

Ich habe schon ein wenig gegoogelt aber nix gefunden was bei mir zutrifft.

Habe jetzt mit GMER und OTL gescannt und die Logfiles angehangen.

Ich hoffe das mir hier jemand weiterhelfen kann.

cosinus · 04.08.2013, 14:22

Hallo und

Die Logs bitte in CODE-Tags posten

JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Im Anschluss:

adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Danach eine Kontrolle mit Farbars Tool bitte:

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

RONsen · 04.08.2013, 14:45

AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v2.306 - Datei am 04/08/2013 um 15:32:41 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : RONsen - RONSEN-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\RONsen\Downloads\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\searchplugins\11-suche.xml
Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Program Files\Web Assistant

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Schlüssel Gelöscht : HKLM\Software\PIP
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\kincjchfokkeneeofpeefomkikfkiedl
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\facetheme
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Web Assistant
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{EB132DB0-A4CA-11DF-9732-0E29E0D72085}]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{EB132DB0-A4CA-11DF-9732-0E29E0D72085}]

***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16635

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\prefs.js

Gelöscht : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...]
Gelöscht : user_pref("{8E9E3331-D360-4f87-8803-52DE43566502}.ScriptData_WSG_blackList", "form=CONTLB|babsrc=too[...]
Gelöscht : user_pref("{8E9E3331-D360-4f87-8803-52DE43566502}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...]

*************************

AdwCleaner[S1].txt - [14300 octets] - [04/08/2013 15:32:41]

########## EOF - C:\AdwCleaner[S1].txt - [14361 octets] ##########

--- --- ---

[/CODE]

OTL Logfile:

Code:

ATTFilter

OTL logfile created on: 04.08.2013 14:53:56 - Run 3
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\RONsen\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,98 Gb Total Physical Memory | 5,53 Gb Available Physical Memory | 69,28% Memory free
15,96 Gb Paging File | 13,32 Gb Available in Paging File | 83,46% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 450,66 Gb Total Space | 188,04 Gb Free Space | 41,72% Space Free | Partition Type: NTFS
 
Computer Name: RONSEN-PC | User Name: RONsen | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.08.04 14:53:44 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\RONsen\Downloads\OTL.exe
PRC - [2013.06.30 16:37:28 | 000,188,760 | ---- | M] () -- C:\Programme\Web Assistant\ExtensionUpdaterService.exe
PRC - [2013.06.18 16:21:11 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2013.06.16 12:47:17 | 001,855,880 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
PRC - [2013.05.10 09:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.09.01 22:14:59 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2012.08.01 09:33:47 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.05.08 16:48:31 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2012.05.08 16:48:31 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2010.12.23 14:46:44 | 000,120,104 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
PRC - [2010.12.23 14:46:40 | 000,181,632 | ---- | M] () -- C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
PRC - [2010.12.09 07:27:50 | 001,025,616 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
PRC - [2010.12.09 07:27:50 | 000,311,376 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe
PRC - [2010.12.09 07:27:50 | 000,287,824 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe
PRC - [2010.11.12 03:21:52 | 000,257,344 | ---- | M] (NTI Corporation) -- C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
PRC - [2010.11.12 03:21:36 | 000,296,768 | ---- | M] (NTI Corporation) -- C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
PRC - [2010.10.06 06:08:48 | 002,655,768 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2010.10.06 06:08:44 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010.09.28 05:00:56 | 000,340,336 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
PRC - [2010.09.18 02:10:16 | 000,407,920 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
PRC - [2010.09.18 02:10:02 | 000,201,584 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
PRC - [2010.09.14 04:32:32 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2010.09.14 04:32:30 | 000,283,160 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
PRC - [2010.04.27 04:09:52 | 000,113,288 | ---- | M] (Renesas Electronics Corporation) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
PRC - [2010.01.29 02:27:36 | 000,243,232 | ---- | M] (Acer Group) -- C:\Programme\Acer\Acer Updater\UpdaterService.exe
PRC - [2010.01.08 15:21:22 | 000,023,584 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.07.18 17:23:20 | 000,475,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\e937e3331234e8da935e71172e46ba17\IAStorUtil.ni.dll
MOD - [2013.07.18 17:23:20 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\34002b75cd0faab68bf8079299c1aa46\IAStorCommon.ni.dll
MOD - [2013.07.17 19:14:39 | 011,914,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\c57eba08ab60f48e7d57228849d92a34\System.Web.ni.dll
MOD - [2013.07.17 19:14:33 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\89fe719039385377f6b5ad8d0070aa6b\System.Runtime.Remoting.ni.dll
MOD - [2013.07.17 19:14:12 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\178644ab40108f3becd8b91049a254c3\System.Windows.Forms.ni.dll
MOD - [2013.07.17 19:14:06 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\bfa7a95284aec941f4b03bae0debe07c\System.Drawing.ni.dll
MOD - [2013.07.17 19:13:56 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\c25666b99761bc42322bae2e59968df8\WindowsBase.ni.dll
MOD - [2013.07.17 19:13:51 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\32066405eb9ab14056b2af3115d2a6de\System.Xml.ni.dll
MOD - [2013.07.17 19:13:49 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\72c249e8bea5ae896e266f77d7f675e6\System.Configuration.ni.dll
MOD - [2013.07.17 19:13:48 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\187c13e8967097d2ed1e5f123e7d890a\System.ni.dll
MOD - [2013.07.17 19:13:36 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll
MOD - [2013.06.18 16:21:30 | 003,285,912 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2013.06.16 12:47:17 | 016,033,160 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll
MOD - [2011.07.09 23:58:57 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll
MOD - [2010.12.23 14:46:40 | 000,181,632 | ---- | M] () -- C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
MOD - [2010.12.23 14:46:38 | 000,210,312 | ---- | M] () -- C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll
MOD - [2010.11.13 01:26:08 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010.11.12 03:22:22 | 000,465,640 | ---- | M] () -- C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2013.03.29 03:34:18 | 000,241,152 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2013.07.27 00:46:24 | 000,563,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013.06.30 16:37:28 | 000,188,760 | ---- | M] () [Auto | Running] -- C:\Programme\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant Updater)
SRV - [2013.06.18 16:21:21 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.06.03 16:21:54 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013.05.10 09:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.09.01 22:14:59 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012.05.08 16:48:31 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012.05.08 16:48:31 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.04.22 13:51:04 | 000,720,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2011.09.27 21:04:08 | 000,359,192 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2011.07.09 14:28:01 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2011.03.28 21:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2010.12.09 07:27:50 | 000,311,376 | ---- | M] (Dritek System Inc.) [Auto | Running] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService)
SRV - [2010.11.25 20:29:54 | 000,052,896 | ---- | M] (Atheros Commnucations) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe -- (AtherosSvc)
SRV - [2010.11.12 03:21:52 | 000,257,344 | ---- | M] (NTI Corporation) [Auto | Running] -- C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe -- (NTI IScheduleSvc)
SRV - [2010.10.29 20:22:12 | 000,868,224 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Programme\Acer\Acer ePower Management\ePowerSvc.exe -- (ePowerSvc)
SRV - [2010.10.08 02:24:16 | 000,150,016 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Programme\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV - [2010.10.06 06:08:48 | 002,655,768 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2010.10.06 06:08:44 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2010.09.28 04:09:54 | 000,172,912 | ---- | M] (Egis Technology Inc. ) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe -- (EgisTec Ticket Service)
SRV - [2010.09.22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2010.09.14 04:32:32 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2010.06.02 01:31:28 | 002,804,568 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.01.29 02:27:36 | 000,243,232 | ---- | M] (Acer Group) [Auto | Running] -- C:\Programme\Acer\Acer Updater\UpdaterService.exe -- (Updater Service)
SRV - [2010.01.08 15:21:22 | 000,023,584 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe -- (GREGService)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2013.06.08 20:58:20 | 000,031,136 | ---- | M] (REALiX(tm)) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\HWiNFO64A.SYS -- (HWiNFO32)
DRV:64bit: - [2013.03.29 04:35:02 | 011,658,752 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2013.03.29 03:09:44 | 000,581,120 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2013.02.14 13:41:10 | 000,096,768 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012.05.08 16:48:31 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2012.05.08 16:48:31 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2012.04.22 13:51:38 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.02.15 11:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012.01.09 17:28:20 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
DRV:64bit: - [2012.01.09 17:28:20 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
DRV:64bit: - [2012.01.09 17:28:20 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:64bit: - [2012.01.09 17:28:18 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
DRV:64bit: - [2011.12.19 21:09:33 | 000,279,616 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2011.09.16 16:08:07 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2011.09.02 08:30:46 | 000,042,776 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LUsbFilt.sys -- (LUsbFilt)
DRV:64bit: - [2011.09.02 08:30:36 | 000,060,696 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:64bit: - [2011.09.02 08:30:24 | 000,066,840 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.01.15 18:21:04 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)
DRV:64bit: - [2010.12.10 21:22:10 | 000,062,584 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk)
DRV:64bit: - [2010.12.10 21:22:10 | 000,022,912 | ---- | M] (Egis Technology Inc.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDFilter.sys -- (mwlPSDFilter)
DRV:64bit: - [2010.12.10 21:22:10 | 000,020,328 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDNserv.sys -- (mwlPSDNServ)
DRV:64bit: - [2010.11.25 20:30:12 | 000,275,616 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
DRV:64bit: - [2010.11.25 20:30:12 | 000,201,376 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP)
DRV:64bit: - [2010.11.25 20:30:12 | 000,154,272 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP)
DRV:64bit: - [2010.11.25 20:30:12 | 000,055,456 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT)
DRV:64bit: - [2010.11.25 20:30:12 | 000,036,000 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort)
DRV:64bit: - [2010.11.25 20:30:12 | 000,028,832 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)
DRV:64bit: - [2010.11.25 20:30:10 | 000,298,144 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP)
DRV:64bit: - [2010.11.20 05:33:36 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 02:43:58 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2010.10.20 02:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2010.10.08 02:23:38 | 000,019,192 | ---- | M] (Intel(R) Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:64bit: - [2010.09.30 07:00:06 | 000,180,736 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2010.09.30 07:00:06 | 000,080,384 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2010.09.27 09:24:44 | 000,076,912 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:64bit: - [2010.09.14 04:24:26 | 000,437,272 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010.07.29 15:30:48 | 001,383,472 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2010.07.20 11:43:22 | 000,247,400 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:64bit: - [2010.07.09 05:51:50 | 000,017,408 | ---- | M] (NTI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper)
DRV:64bit: - [2010.05.11 12:11:38 | 002,229,608 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2010.05.05 23:21:46 | 000,125,456 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2010.04.20 04:35:14 | 000,018,432 | ---- | M] (NTI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NTIDrvr.sys -- (NTIDrvr)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV - [2013.06.20 19:42:44 | 000,019,952 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys -- (RivaTuner64)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://acer.msn.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://mystart.incredibar.com/mb178?a=6R8EA7oV5p&i=26
IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
IE - HKCU\..\SearchScopes\{5F970FDE-702B-4ef9-920C-5F2848A5AF26}: "URL" = hxxp://www.daemon-search.com/search/web?q={searchTerms}
IE - HKCU\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = hxxp://mystart.incredibar.com/mb178/?search={searchTerms}&loc=IB_DS&a=6R8EA7oV5p&i=26
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://news.google.de/nwshp?hl=de&tab=wn"
FF - prefs.js..extensions.enabledAddons: battlefieldheroespatcher%40ea.com:5.0.145.0
FF - prefs.js..extensions.enabledAddons: %7BD4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389%7D:0.9.10
FF - prefs.js..extensions.enabledAddons: %7B19503e42-ca3c-4c27-b1e2-9cdb2170ee34%7D:1.5.5.5
FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.17
FF - prefs.js..extensions.enabledAddons: %7B8E9E3331-D360-4f87-8803-52DE43566502%7D:2.0.0.604
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\RONsen\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX [2013.07.21 21:09:47 | 000,000,000 | ---D | M]
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{8E9E3331-D360-4f87-8803-52DE43566502}: C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX [2013.07.21 21:09:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files (x86)\McAfee\SiteAdvisor [2011.08.30 19:45:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{EB132DB0-A4CA-11DF-9732-0E29E0D72085}: C:\Program Files (x86)\Object\facetheme [2011.07.17 19:36:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmdownloader@gmail.com: C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ [2011.09.23 20:23:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Program Files\Web Assistant\Firefox [2013.07.21 21:09:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{8E9E3331-D360-4f87-8803-52DE43566502}: C:\Program Files\Web Assistant\Firefox [2013.07.21 21:09:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.06.27 21:11:40 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{EB132DB0-A4CA-11DF-9732-0E29E0D72085}: C:\Program Files (x86)\Object\facetheme [2011.07.17 19:36:09 | 000,000,000 | ---D | M]
 
[2011.07.09 23:41:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\RONsen\AppData\Roaming\mozilla\Extensions
[2013.07.31 22:36:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\RONsen\AppData\Roaming\mozilla\Firefox\Profiles\mjboubl6.default\extensions
[2013.07.20 12:28:43 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\RONsen\AppData\Roaming\mozilla\Firefox\Profiles\mjboubl6.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012.09.01 22:03:50 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- C:\Users\RONsen\AppData\Roaming\mozilla\Firefox\Profiles\mjboubl6.default\extensions\battlefieldheroespatcher@ea.com
[2013.06.12 16:39:01 | 000,350,663 | ---- | M] () (No name found) -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi
[2012.12.12 13:22:09 | 000,036,098 | ---- | M] () (No name found) -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
[2013.07.31 22:36:03 | 000,824,302 | ---- | M] () (No name found) -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2011.10.31 15:22:18 | 000,434,392 | ---- | M] () (No name found) -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
[2012.02.25 14:24:14 | 000,000,933 | ---- | M] () -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\11-suche.xml
[2011.12.30 17:17:10 | 000,002,059 | ---- | M] () -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\absearch-search.xml
[2012.02.25 14:24:14 | 000,002,419 | ---- | M] () -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\englische-ergebnisse.xml
[2012.02.25 14:24:14 | 000,010,525 | ---- | M] () -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\gmx-suche.xml
[2012.02.25 14:24:14 | 000,002,457 | ---- | M] () -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\lastminute.xml
[2012.09.08 23:02:43 | 000,002,203 | ---- | M] () -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\MyStart Search.xml
[2012.02.25 14:24:14 | 000,005,508 | ---- | M] () -- C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\webde-suche.xml
[2013.06.27 21:11:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2013.06.27 21:11:41 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013.06.27 21:11:41 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2013.06.27 21:11:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
[2013.07.28 15:23:13 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013.07.21 21:09:47 | 000,000,000 | ---D | M] (Web Assistant) -- C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension64.dll ()
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
O2 - BHO: (FGCatchUrl) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files (x86)\FlashGet\jccatch.dll (www.flashget.com)
O2 - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension32.dll ()
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (FlashGet GetFlash Class) - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files (x86)\FlashGet\getflash.dll (www.flashget.com)
O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} - No CLSID value found.
O4:64bit: - HKLM..\Run: [Acer ePower Management] C:\Programme\Acer\Acer ePower Management\ePowerTray.exe (Acer Incorporated)
O4:64bit: - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)
O4:64bit: - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications)
O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BackupManagerTray] C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: []  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: &Alles mit FlashGet laden - C:\Program Files (x86)\FlashGet\jc_all.htm ()
O8:64bit: - Extra context menu item: &Mit FlashGet laden - C:\Program Files (x86)\FlashGet\jc_link.htm ()
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\RONsen\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: &Alles mit FlashGet laden - C:\Program Files (x86)\FlashGet\jc_all.htm ()
O8 - Extra context menu item: &Mit FlashGet laden - C:\Program Files (x86)\FlashGet\jc_link.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\RONsen\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O9:64bit: - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\FlashGet.exe (FlashGet.com)
O9 - Extra 'Tools' menuitem : FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\FlashGet.exe (FlashGet.com)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A55D2BFF-7D12-45CF-B27D-745D6463F44B}: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Programme\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{8ee7ffb6-2a73-11e1-a407-1c7508fa5649}\Shell - "" = AutoRun
O33 - MountPoints2\{8ee7ffb6-2a73-11e1-a407-1c7508fa5649}\Shell\AutoRun\command - "" = E:\Launch.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.08.03 14:19:16 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{91E97676-05BB-4197-A7F4-47EE40124740}
[2013.08.02 22:23:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2013.08.02 10:39:10 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{142CBD56-86CB-4095-926A-F38D32B048AE}
[2013.08.01 08:18:49 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{93EE428A-19E7-46D5-8A21-61D1F390C7C8}
[2013.07.30 18:36:25 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{018B31CE-944A-45EF-930D-B104F4C79895}
[2013.07.29 10:48:29 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{CE86AC33-F835-4FAD-9D7F-FB3B64535FA6}
[2013.07.28 15:23:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2013.07.26 14:36:27 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{B73884E9-D300-41CD-904D-52D5C4B48684}
[2013.07.26 12:26:09 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{6FF61D0C-14E8-49B7-BEBA-07818A17B0E5}
[2013.07.25 12:06:01 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{B2408FFF-0E99-4C56-B3A7-9F938185C1ED}
[2013.07.24 12:44:11 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{4FF7389F-A09E-4A2D-9A66-A92AC49117AC}
[2013.07.23 11:58:19 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{180EC5BA-9383-433C-921C-CD80C2732B14}
[2013.07.22 20:55:56 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{FAF88EF3-F711-4257-AF0B-7E1E2EB16B94}
[2013.07.22 13:08:44 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{431EB91E-BD90-4DA8-B507-FC9438283B7A}
[2013.07.21 12:40:19 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{48E29D7D-BE33-4DC7-B62D-5F214B842CBC}
[2013.07.20 23:54:45 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{51425EB7-733A-41E0-B4E5-5F47E85A703D}
[2013.07.19 23:23:48 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{2A2A88F0-6E24-4675-9A07-368A92AE1E89}
[2013.07.18 20:16:39 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{8A9BB33D-3E3D-4857-8F97-9BD293DF8B7D}
[2013.07.18 17:15:34 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
[2013.07.18 12:24:44 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{48BF14E6-15CD-4BA6-933B-ABC231D4F3C3}
[2013.07.17 18:56:22 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013.07.17 18:56:22 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013.07.17 18:56:21 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013.07.17 18:56:21 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013.07.17 18:56:21 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013.07.17 18:56:21 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013.07.17 18:56:21 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013.07.17 18:56:21 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013.07.17 18:56:21 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013.07.17 18:56:21 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013.07.17 18:56:21 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013.07.17 18:56:20 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013.07.17 18:56:20 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013.07.17 18:56:20 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013.07.17 18:56:19 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013.07.17 18:50:01 | 001,887,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
[2013.07.17 18:50:01 | 001,620,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
[2013.07.17 18:50:00 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
[2013.07.17 18:50:00 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
[2013.07.17 18:49:08 | 001,643,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2013.07.17 12:32:37 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{32337F3C-7360-44BF-A016-24C090B70087}
[2013.07.16 13:13:20 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{AB7B7514-7163-4AF7-BF40-5F9817F8C5D7}
[2013.07.14 14:51:41 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{6368FE43-2110-46EF-B0B6-11EA7CA15B96}
[2013.07.12 19:31:23 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{67C05DEA-7AA3-4675-B643-3831D43F0BEA}
[2013.07.10 20:26:21 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{A82CA017-3CF3-4086-BE20-C9656D76D6F4}
[2013.07.07 14:08:04 | 000,000,000 | ---D | C] -- C:\Users\RONsen\AppData\Local\{68E57180-39E5-415B-90EE-3D0DAF96CCCB}
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.08.04 14:20:00 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.08.04 13:10:55 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.08.04 13:10:55 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.08.04 13:03:35 | 000,000,035 | ---- | M] () -- C:\Users\Public\Documents\AtherosServiceConfig.ini
[2013.08.04 13:03:30 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.08.04 13:03:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.08.04 13:03:09 | 2133,217,279 | -HS- | M] () -- C:\hiberfil.sys
[2013.08.03 14:13:54 | 000,016,153 | ---- | M] () -- C:\Users\RONsen\Desktop\Dienste Win 7.ods
[2013.08.03 13:50:41 | 000,000,126 | ---- | M] () -- C:\Users\RONsen\Desktop\prozessliste.bat
[2013.07.31 10:33:07 | 001,498,742 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.07.31 10:33:07 | 000,654,400 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.07.31 10:33:07 | 000,616,242 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.07.31 10:33:07 | 000,130,240 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.07.31 10:33:07 | 000,106,622 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.07.30 18:43:00 | 000,000,339 | ---- | M] () -- C:\Windows\Brownie.ini
[2013.07.28 15:13:17 | 000,120,272 | ---- | M] () -- C:\Users\RONsen\Desktop\bookmarks.html
[2013.07.28 15:12:44 | 000,100,680 | ---- | M] () -- C:\Users\RONsen\Desktop\bookmarks-2013-07-28.json
[2013.07.17 19:12:37 | 000,309,512 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.08.03 13:50:40 | 000,000,126 | ---- | C] () -- C:\Users\RONsen\Desktop\prozessliste.bat
[2013.08.03 13:42:52 | 000,016,153 | ---- | C] () -- C:\Users\RONsen\Desktop\Dienste Win 7.ods
[2013.07.28 15:23:15 | 000,001,167 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013.07.28 15:13:17 | 000,120,272 | ---- | C] () -- C:\Users\RONsen\Desktop\bookmarks.html
[2013.07.28 15:12:43 | 000,100,680 | ---- | C] () -- C:\Users\RONsen\Desktop\bookmarks-2013-07-28.json
[2013.06.29 23:56:45 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2013.06.07 22:45:23 | 000,000,624 | ---- | C] () -- C:\Users\RONsen\AppData\Roaming\All CPU MeterV3_Settings.ini
[2013.05.04 13:27:14 | 000,188,416 | RHS- | C] () -- C:\Windows\SysWow64\winDCE32.dll
[2013.05.04 13:27:14 | 000,107,520 | RHS- | C] () -- C:\Windows\SysWow64\TAKDSDecoder.dll
[2013.03.29 04:13:14 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe
[2013.03.29 04:13:12 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe
[2013.03.21 06:10:18 | 000,042,880 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll
[2012.11.27 01:18:46 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2012.11.18 15:11:40 | 000,002,722 | ---- | C] () -- C:\Users\RONsen\.recently-used.xbel
[2012.10.09 20:08:47 | 002,020,411 | ---- | C] () -- C:\Users\RONsen\Handbuch HL2000_UG_German_ver5.pdf
[2012.09.01 22:15:00 | 000,270,240 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.09.01 22:14:59 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012.07.28 03:39:50 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012.07.28 03:39:50 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012.07.09 19:01:30 | 000,000,684 | ---- | C] () -- C:\Windows\wininit.ini
[2011.11.07 21:53:25 | 000,103,016 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011.08.01 22:04:45 | 000,007,621 | ---- | C] () -- C:\Users\RONsen\AppData\Local\Resmon.ResmonCfg
[2010.12.10 21:09:56 | 000,131,984 | ---- | C] () -- C:\ProgramData\FullRemove.exe
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 04:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

< End of report >

--- --- ---

[/CODE]

RONsen · 04.08.2013, 14:48

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.3.2 (08.03.2013:1)
OS: Windows 7 Home Premium x64
Ran by RONsen on 04.08.2013 at 15:27:05,44
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] web assistant updater 
Successfully deleted: [Service] web assistant updater 



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-1955225510-3349160328-3692403937-1000\Software\Microsoft\Internet Explorer\Main\\Start Page



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\extension.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\im
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\iminent
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\iminstaller
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\pricegong
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
Successfully deleted: [Registry Key] "HKEY_CURRENT_USER\Software\Microsoft\internet explorer\internetregistry\registry\user\S-1-5-21-1955225510-3349160328-3692403937-1000\software\web assistant"
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\iminent
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\web assistant
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\extension.extensionhelperobject
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\extension.extensionhelperobject.1
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5F970FDE-702B-4ef9-920C-5F2848A5AF26}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"
Successfully deleted: [Folder] "C:\Users\RONsen\AppData\Roaming\dvdvideosoftiehelpers"
Successfully deleted: [Folder] "C:\Users\RONsen\appdata\locallow\boost_interprocess"
Successfully deleted: [Folder] "C:\Program Files (x86)\astroburn toolbar"
Successfully deleted: [Folder] "C:\Program Files (x86)\iminent"
Successfully deleted: [Folder] "C:\Program Files (x86)\object"
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{004953BF-7322-4977-8DB7-CBBC5820738E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0084AA12-0264-4ECF-846C-10484A205C38}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{017D20EC-1223-40C1-8DC7-D2BFA0F43C08}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{018B31CE-944A-45EF-930D-B104F4C79895}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{01AAB396-F6C3-4D48-AE38-85CCD34AB1A5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{01EBD008-FB23-41CB-8D9C-7407DE283A1C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{020E2AC9-3809-48D0-8096-D960B8863F79}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{024FFD46-5017-4CC8-B73B-DC277F2EDD24}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{02ABCBF2-40FD-4399-9669-5C5D49C8229A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{03658D96-3461-4E4F-8AF1-6C1887E9B396}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{03701C88-FC4D-4986-A065-4482F8F4BC15}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{03DF96D1-2E8C-4CF1-B0B2-38E67B7C0301}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{03FFF424-1DB8-491A-8FF3-15C5BB0CCFF0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{04584327-1F34-4BE1-A87D-AB63F43F7478}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{04E3A983-206E-4137-A87E-24AEC5B3373F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{05593608-2D76-497B-9427-F71828DE51EF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0590E28B-C390-43F4-80A7-46A6A13FD3F7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{06255A17-4CB7-4EC9-9831-D21AE0FCA0D7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{06A97881-864F-40E5-8A40-858096BF849C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{06B89027-8C4D-44C5-8E68-ED2455A5D6FE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{06C83B7F-3F1B-4295-B763-600DFA55E940}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{06F24969-2461-4EBD-8C3A-168C646A4DCC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{073A324F-2D71-4784-8EA1-B113E4D8EF0E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{075DAFDD-311F-46FA-812E-C4C175D679CA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{080D1EB4-94E6-4774-A2B5-8470D7F919C0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{08389CEA-0E79-4E54-B24F-E207FA0ADF52}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{087EA9FD-BACA-42F7-AE17-672487CA140D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{08DD9351-01EF-4338-A76F-C27DAF3DA086}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0902E279-5B24-4704-AD6B-F5FD95AAF394}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{09241574-5231-48C0-9E79-A00F0829A92F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{094B5189-5A71-4608-B1C9-0CDA8B81A456}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{09D480E8-2B0A-4297-BBB2-147DB05EBEAA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{09E00332-1941-41A5-BAFD-1480ACB166D7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0B2711F6-BD22-4355-8E07-9FF981C32297}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0B659D83-DD48-4784-BEE1-3AEA0F05DA33}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0B93A817-CCA7-4A99-BEA6-5F7D115B5387}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0BBC22F8-FD63-4593-9102-A214EA45611C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0C937DB7-CD37-461D-90FD-8ADF40A8D47F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0D4377CB-A318-4A70-A9B9-F4B1002F3172}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0E269ECC-9C16-43BA-BFAE-156E23FBF4A5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0E36FEF9-6238-4E05-9910-47102B9D9652}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0F26C120-C69D-4D23-9622-D31E9F5499ED}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0F7066AE-A8F2-4258-B462-E6088A5C0BFB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0FA6EA5D-E941-4810-8B30-408087018B01}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{0FA72846-5F16-4685-851B-FFE909D775D6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{108E46DF-7E87-44D0-83BB-E76F38326FCC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{10BE17AA-4360-41F2-8D20-B0F51311E774}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{10DF308C-55E0-4A10-B838-094DC52FC61F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{11C4B762-83CA-40B5-96FD-AB38742D7BB8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{11DED390-BBB2-4299-ADD1-C9679044B8C2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{123EEF80-5325-4AEB-8A94-1C62E7DC7CDB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{13F7AB2E-2FFA-43D5-86EC-BD48510FE00F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{142CBD56-86CB-4095-926A-F38D32B048AE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{143FD964-29B2-4ABC-8745-B5326A7B574F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1444AFE1-AE7D-4F3E-9633-F18A83D03A45}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1445CB79-8FDD-4137-AFF4-80B58E755FC6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{144A970B-3906-4DE0-9B79-21F480479A98}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{14E98FC3-C017-429E-9B72-0463DB8A8653}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{14FD27C6-DB61-4C83-843E-31D156874A67}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{15087911-55FF-4547-B64D-B33B52A64F02}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{152F2685-7F5A-4F33-A066-48DF60BA0554}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1569F095-EADC-4866-88B2-6AA0E7BB12CC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{15A4BA9A-E393-477D-89E7-1FCA3B1B3705}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{15AA7FE4-7AAB-43E7-BB96-832A2EB6ADA8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{15D16045-147B-489A-9575-654180E224C6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{16AC10DD-462E-4AB4-9989-38D247A98C30}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{17457AC1-4099-452F-B4F4-DF2205B5A118}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{17C52FC1-BE02-49B4-8FC4-8199A75CB201}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{180EC5BA-9383-433C-921C-CD80C2732B14}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{18BA208E-9E35-43D9-8127-94CBBCB7C65F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{19653881-1D52-43A5-8CD3-AC166435610F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1966ADD8-BA53-4037-8115-F0E438821D7B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1997EC25-2864-4ABB-9E30-F4497451D6B2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{19A41600-018E-4582-996C-B893E76BE484}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{19ADB159-6467-41E0-8B72-CACC2C7AD037}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{19EAA9F4-4CB2-467E-B7DC-EC825869FE19}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1A474A62-0C15-42FA-B5D8-73A2981FEDA2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1A61067F-5537-47EA-B0B4-6EE4A7505DB5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1A7B567C-EBB6-4C6E-A8D1-9B1674A9538F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1ABFD536-C02F-4075-9215-A046D437A7FF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1AED6A80-CEF2-4FD9-B2EB-31F112FB3B43}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1B5FFC20-CB57-4A6A-B02B-BFBCD8E4400C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1BBA385C-3C41-4440-B421-9936E6243BA7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1C4DBFB8-5AC2-4E62-B862-AC398FE7CBE7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1D402E63-71E4-4A9B-8680-2BE170D4139D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1E1CCCE3-AB90-4054-A864-FCDD34764DAB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1ED1B396-2D6A-4C41-A8C1-BC42A8837D7E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1EE2106D-2946-441D-AEAD-1A23FC8612E4}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1EEBF795-E4B7-4F43-843D-3E915CA58DF3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1F70667E-1AB8-4269-8250-87977A9A8F58}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1FAC7FB6-8BE9-434F-9CED-D840337ECCBE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1FB5F2BA-4BC1-4CC3-A0BC-93493DD719DD}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{1FE8AA6E-E879-42DF-9533-A71F5636E611}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2042A74C-D8F2-4A4E-8A2B-D060B9828AF6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{20DD8964-8B8F-4515-B76A-6BD5215EE4CB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{20E43B2D-BEE0-4D9A-879F-EA634214013E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{21013284-6277-42C0-83B8-F651C3A697E8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{21362CBD-94EF-4FD9-9981-61F1238F9BC1}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2166DCAC-023A-4E2D-8E22-D49A6969C170}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{218E65BE-C15A-40A3-A608-71DD489FDE87}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2199939C-2CE3-4F97-B5F7-6080D1F6B037}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{21C6F973-E981-4DCB-9A59-8C39606FB5D5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{22991684-9A24-4B9A-AF9D-E2B7A66BC1BC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{23265114-F682-49DC-9704-83D05F2CD378}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{24B46921-25F7-47D9-B8F7-A23E98B41E56}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{25266F57-71C3-4196-A1B8-DA1D74A4E06B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2557C344-C3AB-42D3-86D6-2E6BA9FFEEB8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{26144000-2B6A-4E35-8001-4B889B7E596D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{26AB5833-F838-44E9-8EAE-E2FBDD4B8CDB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{273DAF9A-373D-4326-9B53-9B610DE461FF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{273EA9CE-FBC5-4FC4-AB70-56D5A2A6E1D6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{27DDE52B-03CB-420A-BB0C-C42E94590BBA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2923F56A-88CD-4A64-8D09-B652A50A6213}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2949BA58-78F3-408D-A8A9-917454CD20E3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{29BD7DDA-159B-4F48-8E8C-3D834E1E710B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{29D29BD9-4EB6-4B08-87B1-C0FAED1347B7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2A2A88F0-6E24-4675-9A07-368A92AE1E89}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2A9AB376-212F-4F48-B611-A610A7D10972}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2AA23122-480A-481D-8D95-AA123DAEBA33}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2ADF9844-A479-4C10-BA9E-10E232EE5AE6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2B757088-7F72-4FF3-AFF2-34D59D8AA688}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2C1AA3CA-8795-43AE-9A9D-E85BB9DC4B1D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2C1D8433-4268-4149-AC82-4412BFCD0259}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2C6EA7DC-7C71-4637-BE21-A31961183D90}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2CBD1365-2356-4DC4-889F-CFFD2BDAA255}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2CE992AF-728C-402E-9855-B6A0E7DBEDA5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2D2DCDA3-A4BA-4B13-8D6F-472021F99A4F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2D8EB04C-3588-410F-958F-304AE3BE42C3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2DEC8BCD-0741-4367-9013-386EA28B163E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2E2DE817-1300-4616-AF06-54A121DD34AD}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2ECCE334-BE2A-4451-83BC-E82C705ADB0E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2EE4D98B-CE49-4C60-B68F-845D6AEB6217}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2EF5FD25-40B0-4891-96E0-12C31F4888A4}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2F0111C3-2C70-441E-8132-E69CD21AE59C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2F6D2149-B701-48A7-8F08-B3605BC93F68}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{2F93A081-8A4E-4E3F-86E1-A203307A087F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{300F79A0-5760-4FA6-99FC-170112EC6947}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{302102EE-9BDC-4ECD-9DFC-3349E6213121}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3053FC52-66FA-4697-AA2A-2DD1C982141B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{307809D6-26A0-4F53-8E82-95DBB8D22666}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{308E69C9-41D0-4AB1-9E5A-FBB97DB40A3F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{30AB48D0-BB25-455A-8274-B1E6F0435317}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{31F397D7-F2FF-45A4-99FE-D78C2B5A0E87}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{32337F3C-7360-44BF-A016-24C090B70087}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{32A6227D-DDFB-478C-BD9E-0686A5B394D8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{33413BF0-A0F9-4CEE-8D93-553EA0EC94FD}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3396742F-D52F-4289-9600-09D67C344F11}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{33A30358-6548-4B46-A339-818B4DE4187A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{33BED16F-5673-4C1C-B546-264EA389C124}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{33D5F300-9A09-4BCE-86C2-D158194F5D7A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{34389AA4-32D7-4CA9-BFA5-E9622DB5851A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{34672AB6-0E55-47C5-A45C-EDAF0509BE31}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3518899B-DD5D-43B6-AA74-9800CCE64484}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{352F9390-BA26-4550-A8B2-B7BC8ED62753}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{35549A47-96B9-4863-8952-CC029E55812A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{35F0F1CD-6815-46A1-8268-FFC57E755E8C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3617EDCA-C24F-42CA-A8CC-00CB417B9D31}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{371890D8-0E69-498D-AFB4-F805A02DC00D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3743A61E-55A2-4D8E-B236-200A07897EAD}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{37AAC2C6-102A-488D-B0C1-15D5A5A7CBCF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{38D5F675-C9FC-485E-8C83-EC24857EB2BF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{38E26FFD-0DDF-4393-8F05-4FA12086296D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3904660D-25DF-46EF-8778-B7F8216BC7AC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{393BD830-A4FC-4CE3-BADF-C44BFE6C731A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3963F5A0-8F08-4A44-A8B0-FCBBFCD7A2D5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{39EEB468-5C20-4FE2-A0BD-A5652F7F8F57}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3A14351F-3F2F-45A6-A767-4AD6B6BFE604}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3A91DED0-4EFF-49DC-918B-8BD88A862CCF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3AA81246-8BD4-41A6-A557-3CEA268D978E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3ADF3DF5-7E52-4629-81D1-8A07251ABFDC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3B648213-3622-4E6C-A45A-70C73AD9ABF3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3B6B4C43-97CF-4D87-930A-14E15376E24A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3BBD49B7-CCB1-416E-8CE8-84664784FB9F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3CE7287C-A0D3-43AD-A2C7-E7668AA08490}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3D8554E4-B5BE-41CD-925C-4A07ECB4B89F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3DF7AB0C-F4C0-4550-B96E-17D4C517F406}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3E63389D-F2B3-4C01-96D5-A6A063A6D72B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3EF6FE3F-96D6-49AC-93AD-3BC8DE1430C0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3F0A4EE2-356F-40BE-B559-33DD1114CEDA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3F1B03A0-5944-40CE-8C74-A076829CB742}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3F3F4C69-A188-4CD6-90F4-2E91DC47802D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3F6416F0-9903-4592-858D-58EE72F53ECE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3F80D600-E400-4065-BA50-0BF28045FD11}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{3FB4EC8B-5A46-4DB9-A348-8299F0351420}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{40ED4433-600E-4781-90BC-9ADA64D3B5F1}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{40F8BFEB-6500-4E11-8E1B-704C300ED518}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{410E4909-0D60-4A38-BF9C-3B97F0633CD7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{41BBF949-FC86-4BA2-92EC-D5DA62CD9D53}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{425C9F17-E79E-4B3D-8993-930DE12E074B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{426B8149-A2BC-44FB-9963-3D485E13E354}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{429046D6-A692-4A9A-B748-979C59615632}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{431EB91E-BD90-4DA8-B507-FC9438283B7A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4347E6F0-4D8E-4D2D-9327-23E95DAD842A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{43C6C8D7-7890-4227-9B18-33B599C78BA1}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4419FCE6-E8BE-4C3C-BC92-1DC7FF0C90C8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{448B2D04-638B-423B-853D-C7241D5B43E6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{448B8C33-B763-4116-AAC9-3857597EAB0C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{449BA7F9-57C5-4CEA-BD63-E42C464276DA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{44F52045-842B-4EBD-8F6A-72C3DA8D7BDC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{44FE3B93-2E88-45C4-AB9F-9A59172C37E2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{450A56E6-14E3-4FB2-82FE-5C63C5C49D37}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4514E89E-851E-4B36-9F0F-BFB16999C555}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{454F742C-5EFF-4DDF-BAF6-C7D53AAA7EDE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{45A3BBBB-892E-47F7-893C-06991242DA32}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{45D2D570-57E3-469F-BAC9-6794A6B33D9A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{465BBBFF-0AB5-425A-8A66-D04EFDDCF5BA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{46AC66F1-C7AC-4D40-A94F-900E693B44B7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{46AFD0F3-8D9D-410D-83CB-F9092F994A16}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{46FB2035-7B2D-4D2F-B7E8-18840FBB1A3B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{47479473-945A-4B8E-9F34-D321A6D0C1D1}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{479F3188-7BD7-4CBC-9EE3-79D3B0229CAB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{47C44F01-157D-4692-9F4C-098D539F5757}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{48052AB5-67DD-4183-9BF3-2D5C7AA43BCB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{484D8D27-C979-4EF8-8F6C-2C9C0578D385}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{484DB158-251B-4FF3-87F4-B5DFF560D5AA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{48BF14E6-15CD-4BA6-933B-ABC231D4F3C3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{48E29D7D-BE33-4DC7-B62D-5F214B842CBC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4A029217-7862-4D47-8CE7-4ED7D4A3DE95}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4A0AAD2A-6FF6-47C2-B040-30A23AC4A5DB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4B8ED9CA-04BB-4EBD-9A3F-59CB98FD79C2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4C67CFDF-31F4-4119-91ED-9956C0D4165D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4C718F1F-3077-4D27-B1EF-7BBFCC302089}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4D307F45-9C6B-46BC-B7EB-480D7C5638AE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4D5D6C39-6A61-40B7-B988-64A187C115D8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4D96396A-C567-4696-8295-B7972BFF6ED5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4D97BE15-2197-4155-84C5-08A9C25C3F89}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4E384E9A-B0F4-4210-B7AB-6D9FDB1D9822}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4E621C8C-AA91-44B5-9DE8-0F0E84D76BFF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4EA0FA26-3625-4E1E-940A-205BFD970D94}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4EFBD574-C656-41CF-A50F-D5C20EDB1705}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4F3A8030-0BEC-4BC1-99E9-B188588ECFF0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4F43C68E-B0CA-4A4D-BD6E-F4EE2C28F0D6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4FB276D1-1A62-4F94-A32A-30BF0D4E44EA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4FE16B78-54E9-4442-8CCE-37FEF9CB57FE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{4FF7389F-A09E-4A2D-9A66-A92AC49117AC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{503FBF75-EFF8-4A97-B892-219F651B6BDC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{50B9823F-B1B1-41F0-B41A-2D2015453472}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{50F9D1E2-1834-4455-B161-1AA5F055A3B3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{512DAB0F-8111-48E2-9E6D-828BE93A834B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{51425EB7-733A-41E0-B4E5-5F47E85A703D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{522BBEA3-AF00-445F-9046-3825955C0FB9}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{52A3EF7B-8B35-4769-A9A0-B3B1138FD99C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{52B0873C-215B-40E0-AFF3-ED3363A7A72B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{53501BD1-2575-4885-B1B0-45EC11148F74}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{53BDDB82-13A4-4719-8D52-C426CB98A26F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{540C49ED-47BD-49D8-8A14-DCD78E8CC8D4}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5417840F-9BA6-4906-A133-354B0737DA06}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{54420705-5065-4F80-89F0-A67064E94CDF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5555C91F-970B-4E76-B00C-74959AAFF4EC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{55728088-F8B1-4C24-AB4B-55516634B5AD}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{55A29D3C-93E8-414B-9894-FEC77630C1D1}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{563084FC-FB15-4D9A-9912-DE42C5E17B0A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{56A7596F-5F66-4F60-B9EB-3A20FE21E763}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{56B69ED7-8F23-4C89-86BA-476F4655D501}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{57380314-757E-4258-8651-502A86F83D80}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{573D6023-CE07-403E-9779-1995F39F6CD2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{574F325D-8B43-4411-A25B-736EFDEA9814}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{578B02E7-CA51-4A9F-BF9F-8DC248D9243F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{57BE2A04-E4EE-4FEA-AC90-FF56F0BEA5E8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{58FFAA34-09DC-4F24-8BA4-3492A3113E28}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{59B0F514-F333-4533-96FD-653963718C0A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5A0BE9FC-BE44-4D6C-8D93-505E83171E7B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5A4977E3-37A1-47E0-931A-BA5C35982565}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5A570506-3B05-45E3-BF63-A84838FE2240}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5A5E76B4-CCA4-4EF9-8C6F-A4E3EE1C1765}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5A824727-BAFA-478D-9CE7-4015AF6ADF5B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5AA7E251-A7BA-4BFF-8466-C9830AAC6ECE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5B231B98-EAA4-424D-A50F-5A8E4CCE656B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5B330E25-0FBE-4446-A01F-3E338C963EC1}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5B704656-E2D6-4290-B40E-B3C5E04AD434}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5B7092B1-9C50-4A1C-A8D2-3568B7A66D39}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5B7A2A23-D9FA-4045-9749-5639F690E624}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5BA9D150-9B70-40D6-AB0F-741B47BF6311}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5BB8477C-44EA-43DD-8A65-9A0DC208F6F3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5BC90F0E-CB54-4ED9-BB08-527658D9ACE9}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5BE73E1D-36BB-4A4A-95A8-1F26A3D0807B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5BEA4D06-F527-45E5-BF00-6BCFC01C2854}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5BF06980-8529-4019-AF78-749DC33EECD0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5C1E2E58-7C34-470A-8771-4D05AA181AF3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5C1EF5D4-C164-45B4-A368-19B20E161770}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5C6A3D05-C05F-476D-BBD1-7BE0CCA678D3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5C6F4D15-12AB-4DD9-A499-91472CA734DF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5CB2C166-7786-4219-8FAF-16B2DC8482B7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5CEB6182-0D86-4B7B-A3A1-831F72FF75AE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5D335D66-1600-4C25-8242-933F42BCD2CE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5D58D3E0-233D-4F47-90D5-519F435D5A8C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5D751C33-85FC-4901-8DF9-D87E14B4160B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5E68D3E9-6D37-4528-B7C7-83176839A003}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5E9FD579-5781-440A-9382-87DB0D525F9A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{5F9B1CC0-07E8-43C7-B820-670E35691486}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{603C7E4B-E4E6-4B70-8C17-E7C88660FB1D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{606E9D52-C310-47F9-844E-0C58668E3F6A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{60A2B13F-BC78-4D68-86C9-CD62D693F5A8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{60F8320B-6CBA-430C-88F0-07FAC185E885}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{61E46DE3-D904-4FF6-858F-6F76C4A02EFB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{61FEB00C-8143-4ACF-8A94-78F53713D44E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{622161A5-5AB0-4F54-9537-4F70666F2175}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{624BA809-D844-453F-9E0F-171AAA1EDB6A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{635A4B55-D3D6-436F-9E5C-07F8D2AAAF14}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6368FE43-2110-46EF-B0B6-11EA7CA15B96}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{63B2454C-DCC4-48ED-8A05-FC0383CFED33}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{63B6C2F8-6914-4376-BFCB-492F3ACE26E0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{63CCD3A2-EF02-4E69-B227-FFEE677E299F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{63F63C31-350F-4D31-B5CC-B2FB8F8E6AE7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{64A904CF-8E9F-438B-BC68-15B98FDD4424}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{64E1B130-3F8A-476B-BF44-CEA0B766A915}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{650A0AF7-660A-45CC-96FA-05B3B395721E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{653F3456-4FA8-4C6F-BA80-7947F366B019}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6540DAED-6CFF-476D-A06B-4729D5EE9316}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{654AEC31-4A7E-4B9F-962A-03F922422E91}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6552532E-A0C1-45B9-8DFE-26C7205A6CE9}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{65D5CCF2-C9E4-4720-9E7A-52A1DE34E741}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{65F6AA8E-E391-4D8A-B307-9C62B298201B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{669C75B9-AF12-4958-B030-D6A080453D30}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{66F51839-C34C-41B3-9AA0-4739AE20BC50}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6703A6DD-EA7F-4BC3-B116-DA2CDE40EACA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{676ACC81-4368-4BD8-B3F4-21A39CB83E69}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{679E570A-C9DD-464E-9841-75647A87F4C8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{67C05DEA-7AA3-4675-B643-3831D43F0BEA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{67FC7FED-B0BB-4B2F-A869-562F039675B5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{684E52FC-F854-4062-AB04-54C28FD4BCB0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{68889C9A-DAB9-45B8-B322-8612E8069AD8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{68A3FD32-A6B7-4F42-852F-68EECBD75EF4}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{68E57180-39E5-415B-90EE-3D0DAF96CCCB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6901E233-F290-47A1-A441-4B1C4892374D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{69049222-F91D-460D-A215-38E4EB8EC900}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6A06C385-920E-4B75-8E9D-D87CE4D24BDD}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6A37BA2A-8401-4A63-9F9B-EF07AA9DE7F0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6B8D4275-A09F-4072-BF3F-8F1A678524E0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6BB054E7-3C1F-47A1-9E50-149C16ABC849}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6C77CC22-7735-48EC-8A03-E3258831849D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6CD26937-2C4B-43AE-A280-F8D578909BF0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6DE699AD-586E-41A6-B70C-9F7F503DB018}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6E004200-9132-45B9-9F4F-58E96E395360}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6E4E529B-D94D-4317-A6D4-2BB56E1F45E2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6EC77ECA-25C9-4F0E-8FD9-35DE91B90F74}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6ED220A9-C54C-456A-A4B2-312EC7ED2A17}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6F16545A-6236-4E28-B053-D99E934B17DF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6F628D79-1AF5-4ECA-B764-ECFF6809AF34}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{6FF61D0C-14E8-49B7-BEBA-07818A17B0E5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{702DF132-006E-41FA-9B83-DFED28C0DCF5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{70C8933A-CA78-4C23-B5B7-6A2577C17825}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{719FB745-2BCD-4FA1-8E4D-3EF115C2ABA1}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{71A7AB93-F91E-45FB-B350-2F3299421B51}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{71B5B25C-89FF-4CEA-906C-571C814A45C6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{71F2ADDD-8034-469A-98FF-F5D1EA34B2ED}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{72A742A1-5D0B-47E3-B9D8-ED7106F4D87A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{72D09D2A-8AA3-4573-B8E8-5470195CDF13}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{74568610-90E9-48DA-BE7D-B475A06A305E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{74AA7509-E645-49E8-9437-FC43697B9977}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{74DB0E5B-E3C4-4910-B298-7C1F7AFF7F40}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{74F1F9E8-BB7D-4C8B-9B5D-FB12874DC483}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{75181EA5-DB50-4E56-9DEB-7CF5A0DC34A8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7519C275-8191-4E2A-9315-C471F14734F7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{753A65C7-8E04-4EF2-990F-5F3BB6C8E297}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7552884B-24AD-41DD-996F-A21B23B5AAE9}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{75B807DB-37C2-4E1F-B4A2-0CCC69C46227}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{75E75908-CEAB-49E1-8B50-3A7BE02BC5F2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{762BC1EB-93E1-4912-A73E-AEB60502F5CF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{768179AA-B48B-4FA4-8630-9C750F665545}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{76BDB79E-B632-41C4-B745-A0A9E405CCDC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{77451B4F-B83A-408A-8400-7F0C012B537E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{777A2C2E-822B-48FE-834C-3DC32FD146E5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7831905E-683B-42D8-942D-1E480C9A36B2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{78504B08-5FDF-4FDE-9089-D51D7F452614}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{788EEE09-0B69-46AA-96C2-BCD79946F677}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{78A3A3B7-C170-48EB-B306-63AB43FDCFCE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{78A5F45D-43AA-4D76-B81B-C2D1DF2F15E5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{78A6B7F8-C8ED-4B4D-BA55-53AF3FC670BA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{78B78426-ADAD-476C-877B-C537630C80FE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{79696E1D-751A-4483-B14E-0D4CA03C3112}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{79B36095-A05D-4B18-95DD-273DA8EF3386}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7A5D3F6B-2881-4522-9376-1222B3A0EC1A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7AACC582-0CB6-4E39-A2E2-7345A89A6D39}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7B140388-EFA9-4222-B228-F466752E4889}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7B229509-5C56-48AA-9ABF-6E3B410D96CE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7B6DA710-DB78-4737-AF7D-993C76DAFCD2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7BFC7CB7-45F6-4108-904C-E03320EF428D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7C11AD55-B24D-4F39-86BB-39346B1AA612}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7C36D254-9895-4BE6-AC29-1360DC55D09D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7C958551-C4B1-41FA-BB96-6BA5AEA6ED9F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7D9B35B1-0100-4F21-98EE-D955001729B7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7E03E16C-3DA0-419B-85BB-2687CED4968F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7E364E27-1907-44E8-8DAD-212054C83C07}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7E7A530E-868B-4947-871C-937CFE3F9044}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7E9D93A6-B0B2-4380-A5CE-BD27268AF94F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7EAE56EA-DF21-4404-BCB0-CD155460A2B5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{7FB6CFE5-DB5F-4A4B-A70F-1778D86151BE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8034179A-D812-44E5-90EB-FAF5B5D9D5E7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{80447BF5-A740-4F80-A79E-736EA1370BB3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{80A24A3D-241B-4619-92DF-3E0A4893E6A0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{81011676-5AA7-428C-9627-C8DD43F4E54E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{81845E2E-C8F5-469B-869A-7ED18BDFB86F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{81942923-FE74-497C-B0F4-2A319986E6B1}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{81BD58A9-C851-4489-AED2-6690B4211951}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{81F9EFF4-E251-4EDF-9B6E-25C20DB42A49}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{82081B8B-C18C-4C16-9BAA-C32B1B9C21FE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{82990278-43AD-4946-95C3-0726358D601A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{82B71B54-6B56-4DAF-BDC5-85FB79CFE351}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{836B1047-FA44-4630-89F1-8C505EADB4BE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{83ACFC54-F97D-4420-8E12-51F1791F0DBA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{83ADD1DB-A8FE-4C07-B42F-185E246ED774}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{83D91036-D2DF-4F98-9E8E-4EDB0C670327}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{843F7F57-4914-4F43-A95A-E9AAED9B8FB2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{85032D56-56C6-455A-A6B0-870FEC2B9BFA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{86002285-2406-486D-B7AD-F24875453A97}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{860FCBFD-C5C2-4999-BF9E-D21E5D60D5B3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8656C052-4FDB-4F29-B497-A28F4081C437}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{871DD385-1A5D-46E5-A846-6BCD03FD6E04}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{87CB2627-D8EC-4ADB-82DA-63A17C02533D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{88E1F9A2-81C4-465F-AC41-30A9AE6630E5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{89317FFF-118D-4557-BA4A-AE3DA3D4A3B6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8A06B32C-14C9-4048-82E7-39CE2C80A6B2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8A38F259-695D-4A02-B403-6E8BBB6E2ACE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8A9BB33D-3E3D-4857-8F97-9BD293DF8B7D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8AC70885-D5EA-4D46-812E-B9887716C851}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8B1FCEA4-B519-4875-A9D2-50987BB8E79B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8B480A29-5811-472B-92A1-90C20D11C2B0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8B7B7F2B-7E74-48F6-AD58-CC7597648C74}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8BC8DDB2-828A-4F31-8538-AF5A0FDFCABA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8BCBD1F2-C364-4A3A-9363-AA907E9D82B9}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8BDEA533-CDC1-4949-B0E1-E30078D49840}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8C5C22C0-AF60-4515-943B-7B794B6221F8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8CB292E6-DBC1-4AEF-B928-AF68380FF71D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8D39F7F4-6D03-4043-9EA8-8A03930DEEFB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8DC2E8C5-AA6D-4ADC-BDB1-E3239D40D0D9}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8DC4B4C2-70D6-4F3A-AAC0-5F31B3253812}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8DE8AE39-AAC9-413C-A39C-7EE84BB119B3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8E4CC9D3-2232-4375-AC26-A210F5DE20BE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8EE9FE50-22FF-4CD8-BF24-89C1E5934B63}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8EF13789-D4A5-4340-96BF-3586B34F3E0D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{8FB2DDAE-E163-41DF-ADA0-419E0AECCE3C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{902AA100-F9A3-45BF-8280-8D2ACF3314FB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{91E97676-05BB-4197-A7F4-47EE40124740}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{922D8EAC-3D6D-4035-B050-CEC7DCB096E7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{922E96F7-14BE-4734-AB21-082A8538FC36}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{92350A74-FE2A-485A-AE55-413E7E8F2417}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{924FB264-F1B1-4199-BF69-D7C2C65B26B8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{92C27D3C-110B-47DA-820C-645397CDF8AF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{92C91001-958F-456F-AE71-282A1958B7AF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{92FB041D-57DD-480C-AC8B-7C9807C2B7BA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{93093305-D1C5-42CA-BFB4-ADAA30F57225}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{93508F1D-E9CA-4720-9534-FCDA79891BBB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{93D32E22-2AD8-4C93-A278-C481F209EFDD}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{93D67150-0688-46E8-B126-5A472F48DE82}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{93EE428A-19E7-46D5-8A21-61D1F390C7C8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{93F8F2F6-B6E2-4BDE-933B-8F828C7D235F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{940A58A5-F197-49CD-A852-B4A58D9B3096}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9499A692-8001-4AA6-BDDE-C9D4ED114FEF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9526C7E1-ED9D-47A0-AB60-73FC088E0946}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{953B3351-282B-4352-955D-E6A2F7CA56B9}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{958D3E36-F42C-4313-BD60-927CF368EC5F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{96010CE4-3D68-44B4-BB70-61EF579BF3E4}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{966DAD6E-F4E0-4A25-BC95-FAF6E8EC3D14}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{96B64168-6D5C-4A5B-B8D1-D89B0E24DC43}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{96CFADAD-C558-47C1-958F-595005448F4F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{96D4B618-676D-4108-9D0A-6431C315846B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{97148E7C-4DA3-4821-9584-614DC2EF5CB9}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{975ED215-2CD2-4EB7-AC49-0B0E7287D1C2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{97A5C481-D659-4A14-83DF-B247684ABD43}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{97A66E6F-EE19-47D9-8C2B-A4CEF53B0FDA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{97BCE8CF-BE15-4375-94C0-B3742451E972}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{97D9C281-2BC0-4B7C-918F-5C70CF3E3AD0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{97F37940-47D1-468C-B35E-4256642D9342}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{97F4A649-9B0E-4BCC-AB88-9E92F2E6921E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{989CD2A6-FEAB-40E7-96C4-ABD8D12D76BB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{98AF67FE-BA12-4488-B7E5-9FDB734F1CB8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{98DA54E0-D0A0-4BC6-B562-9FA2D6C7B224}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{99236309-BA7B-4751-BB9B-9DE4AC3D9E0B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{99393F42-F369-4050-8F2A-A6FA8DA19763}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9979FE32-1E57-4183-A815-805D34FCB4D7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9999B9C8-BCBC-4612-A475-215AE459B5BB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{99F3A8F9-8B8A-45CD-8EB2-9044F235071E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9A385AE7-BC2A-4B19-B022-F5E1C16BB6D2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9A748EB4-2AC8-454C-B6AF-2E15B5167222}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9B59A01F-7FE5-4CB8-9826-8D2A0AEA1319}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9C1A7A83-B8D0-4C4F-A747-38F6A1360983}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9CA25BC7-FCEC-4B20-9079-E6ED52F35DAF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9CB3C5D1-BBF8-4E26-A4EB-C0A34E44FC22}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9CF9B41F-099B-4617-A2FC-C0B4A81FB29E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9CFC8BDC-9683-4E34-B73F-FB8D63649B8A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9D17ABBC-4791-48BD-B76D-8CD5FCFBFE1E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9D350AAC-CD2B-49A9-B5D4-FFFA399429F5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9DE86CE1-2516-4B19-9E6E-49F351685929}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9F3EA08D-0805-4DC3-828F-C37CE09A0A09}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{9F493692-86D5-4916-AD14-0FDE81ECD517}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A0523B3F-BFF6-4A0C-8323-C04F142B3F0F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A09F4BE1-E667-4EF4-ACEE-E153B667184E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A0EAB2BD-573B-4289-9BB7-E4AD9429BAE5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A1751387-3E25-43D9-A332-0D91AE52D60E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A1EAACEF-597A-4A4A-A648-7DC82AB32C25}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A2CAC831-E10A-4B39-8054-F32E57EF66B7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A2D6881A-5467-4538-8CE4-EEFE1317DDF6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A2D7A12E-911A-4F56-B34B-6CC0872AC982}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A2E8B350-ECE4-48DD-98E3-35E448B7A0A6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A2ED0F71-09C7-4702-B96D-E085893173E2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A363B4A2-DEFC-44B1-BE99-2E74B89CA852}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A39609FC-D51B-4E04-BAE9-D5F5F3AA24ED}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A3DDEDD6-9572-4BA1-AD75-AA7374A1FC77}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A3E3819F-D104-4A8F-96C3-6E98B3B5726B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A3F0A010-5D08-4E67-9D4A-97DE70951D62}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A40E316D-0098-4780-B276-65FC3C31B37A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A4FF15A2-04EB-49C5-A65F-B620EB2AD275}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A500CF02-C233-40A1-8FD2-BADE6B325F92}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A52EF246-49A5-4138-875D-F84EAD7B8BC9}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A557CB54-BD22-4ED3-9CE9-DE5313611103}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A55F7919-4418-43D5-90D5-BDA8658B0089}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A58542B4-2661-4839-89AF-3C0E0B9B0F0E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A5A054AA-6B3B-4C23-9E6F-3ADD390045D3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A5E36184-B059-4BD6-8D9A-F7830DE91A3E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A676529F-2609-47E2-8E00-926529A29282}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A738D699-D3EA-4E4C-AB26-FD4F9A0DFE47}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A73F4270-B95E-46E4-985B-9F613E6DD2A7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A75204D2-BD2E-4F1D-BE34-75D2D21C91A9}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A76F176F-95BC-428D-B991-EFD5B0BADC46}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A786913D-D1E8-4F98-B260-6D59A29A1E96}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A7C80E4F-6A98-4286-A204-E818AC8271B1}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A7C9EE53-8B52-4A06-84E0-85595027D22B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A817AE51-4F2C-47BF-91AA-0F52F51A22C6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A82AD59B-B039-43EB-BA0E-A30EB7709115}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A82CA017-3CF3-4086-BE20-C9656D76D6F4}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A8CE7A50-6D4B-415C-A098-950FEA0EB83F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A8DEC139-B0F5-431A-8F7D-B300380AAF3E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A956D455-393F-438E-A7DC-1CFA9AA3E3B3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A9C12948-35B1-473F-B2EA-EB674A079ABA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{A9D93CDD-DF74-4B24-B7C8-0D9D614455FE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AA17C727-6EFA-4FDC-81D0-3FC0D04F9F88}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AA213BB9-17EF-403C-8DDA-1359BDB3F26D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AA7A43B9-F4EE-4B17-BD47-48B31BA5F07A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AA7A8BAF-C961-4072-9318-0B1B455E51FF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AAC582DA-609B-4928-806E-6F00E2BF5E92}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AADFC1B3-43FA-495E-890D-8FC939C81374}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AB078729-F923-41C6-8613-2F22675F562C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AB20ABF1-BF19-49CC-851D-6835DAF73E05}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AB7B7514-7163-4AF7-BF40-5F9817F8C5D7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AB9E3D66-5797-44FA-9E41-D01E95D88F31}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AC17AECF-0E7E-4F47-8EB3-424CC29244D8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AC69278F-6FDF-4852-9C0C-600F584A0838}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ACDC2C72-2C82-47C7-B00E-FF9DE3106630}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AD01DFC2-557E-459D-9B56-0BD27D4143F3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ADC3C1D7-FF20-44DE-B3CB-6DF188CE5FDF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ADDD8135-87F6-4F5A-B6DA-8AC13A2E15E5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ADDDE647-9DBD-4B66-9E61-C512D323C7C3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AE196E6F-2019-422E-9222-69E8EFB34CEF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AE52A84B-1AA9-4E3D-A340-39F05CDB9186}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AE9FE668-DEF7-4FD5-A1E1-4EBE46486F55}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AEF49AE7-834C-4CA7-886A-470EE565969D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AF86BBC6-245E-4F9F-8CC9-BDFF6E7F535A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{AF9A6F0F-2136-4E6A-909D-98B46F9B8446}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B06D38F3-CF23-432B-BEBF-843F9A1A44CB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B1D4E16F-46B4-4FCE-A05C-EABE1C979413}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B1F5A8FF-8297-4429-B7A1-2E660F9BC84D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B1F6D9D8-7679-4626-BBA4-56C44148A28D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B21A57BA-D467-4F5B-97D7-0A175BA3C54E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B2408FFF-0E99-4C56-B3A7-9F938185C1ED}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B28EFFA8-19AC-4F02-A31C-8EC79313AB66}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B2DF7775-02EE-489C-88C0-C8408AAA457E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B3BA8CD5-D641-4E25-AB64-84F275555D8A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B425EDB5-4C92-4D45-BF82-C85BFC0D6D7D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B6148FBF-192B-4335-9034-DD80DBCF4FC6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B648C935-6CA7-4A03-A7B9-622E629A909F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B6A30134-3B45-4F7D-B4C8-BA94306CE307}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B6A64E55-F2F3-4614-AAC2-E8D626064D53}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B6E0A03C-03EB-477C-8314-EDB38A8B8DB6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B6E2023B-FA9A-47D0-A718-7343C2192F96}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B73341DE-0236-46AC-A127-B5C5D07DC6BC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B73884E9-D300-41CD-904D-52D5C4B48684}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B73BC9C6-FFFE-4D59-99E3-F40F9B003AAE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B7414990-73C9-4C5E-880A-83B8E5F2DCF7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B746E003-3AA6-451A-93A0-D595ED55C910}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B81420DF-4721-4C0C-93A2-0B64B6D4FFA7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B90C43D5-FF6A-44F9-BEB3-B01FFD071B81}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B91C69BA-40D5-40DF-B8E3-E2ED3267A188}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B9913525-D5DD-4BA6-8CB3-8CDB61D8E8CB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B9C8FE31-561D-4433-B830-9EAD0846C7CA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{B9E4231F-E492-49B3-8762-6C6910CCEA5A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BA6159FD-7841-4117-B158-AA008D2F7385}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BA8929F3-2C31-47C5-AB85-95BE514896AC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BAAD64A9-FC77-4AB0-9F19-A5DB22AC9E55}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BBA5D786-2190-4B0E-9CC5-2C59A6717FB5}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BC0745E9-5F99-482D-9588-CAA50D90EBD4}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BC23146D-123B-4A82-862A-CB9465CF95EE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BC9F3314-3EE3-4495-B28F-9D664AC1F5D1}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BD26738A-FC1D-4452-8D3F-9E9564228B56}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BD2E0034-1F26-4E72-B870-28C217E8403D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BD33C1F6-BA22-41E2-8554-6BAA4AB50D2D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BD700FD2-BDCA-4397-86FD-810251897250}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BE8830C4-6A0E-49A1-B410-C0F28B3CF123}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BEA89EA6-8310-4759-897C-D7C930FF12A0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BECF1329-A007-4728-A847-6792D1690916}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BEEF8418-4378-41E0-A823-13EFAA823C41}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{BF9F72FC-7983-4D2E-9380-9F8D9366A896}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C05D80BD-4CD2-4D78-A947-C6312560CC4A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C0925E23-8C71-424F-BBE6-7F17AFD01DD7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C0A3B434-3A76-49B6-BCF1-6B3A4847849F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C190747E-4438-49C3-AA31-24CC1CEBCA41}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C1B62229-3580-41D2-8DF4-D994F0317DF2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C1D5A5FB-44A6-47F2-AF94-9E907DB1C01D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C1EA9872-AD19-4E4F-903D-148636FE241D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C21211CE-2171-44C0-9E94-B07181D6B90F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C22594AC-FA12-4E28-A4BF-E3E43AD65C2C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C29B2874-D766-4414-A0C9-EEFAFA3D36B1}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C30BD27C-D574-47BF-B0EB-E2BE4357C3E6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C34EBB1A-7E32-492C-9503-BF2CA0A6A907}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C49E7F0B-33AC-4629-89F7-BA917D834EDD}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C4D5FA7C-FD90-4537-AD0C-3FCD63A6EDF1}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C519094E-5DF3-47D8-8D02-9B713D8AE6FD}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C541374E-B1C2-4686-9D7F-E15CBFEDE207}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C551E2E5-37AD-4AAB-A00E-AF97F530605E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C63834A0-C9AA-43A9-BFFD-74C9E6527AF4}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C653148C-0E9B-4ABE-8D45-B299BE4EDFAC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C6CDBC1D-011A-42A9-91EA-D72329307A5D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C72AA314-61A8-42A3-97EC-5A3BC79342D9}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C74B96DE-B7B3-4FBF-AF19-77F75085C6A8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C7ACB997-B52A-481C-A2EF-30E20C5C4ACD}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C7B53A1E-A72B-4BEE-85F0-0609BAA138B8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C800939E-5C84-429C-8AA6-E1272333F74C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C8EFADE1-A543-4B4B-BCD9-1E446FC47B2D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C927937B-0679-4C35-9469-723139D81310}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C99B076D-3F67-41E3-8F49-DF7776C02A0E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{C9A493AB-0439-47EB-B63E-82456DD06EAB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CAF24976-1BE7-44A3-8C41-955970B86B7D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CB18C83E-4057-412A-8E9B-193C37543A3D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CB306B39-E133-49DA-83F1-4292044FF83B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CC200A71-132C-4736-8AB3-57D5BC41D104}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CD737318-E4F3-4CA3-8425-4E825B7AE227}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CD7511E4-2156-4566-942D-1E6441C74C52}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CE21DD86-B8A8-46F3-A3F8-82FE81AB588D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CE86AC33-F835-4FAD-9D7F-FB3B64535FA6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CE8B6677-A313-4BDF-8644-9B050A55FC6E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CEC798BC-38DD-4A2A-A583-521BC2936131}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CF67A585-D53D-4A02-B7C5-90774AD38F25}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CF9840BA-1C33-418B-8DE5-D7DA32ECE561}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{CFB91CA7-C12A-4088-A360-02AFB45F67F8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D02094E4-B5A4-49D7-9E33-78834B7D4276}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D028262C-8F88-4683-BB17-935880A542C7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D03FC334-7ACA-4BB0-BD78-6E33453DAA52}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D0A72BE7-88FF-4DA8-BDE8-E25A31581733}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D11156AF-1451-42E3-86E7-B44A4D36A3C2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D1374783-E8DB-4282-B46F-4916B1ED7D72}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D1CCA893-2467-47E0-9588-5BA8FE0ED20F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D2EB1D25-3909-4B7D-8E21-31626544E07F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D30A3C05-4D64-454E-B055-8B75DB6EF631}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D312346C-2608-431E-A9DF-DFDD02C6DA77}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D354B9D3-3F2C-4E81-888E-2BE24C46E81F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D364EF0E-93A4-4A28-87C3-34FEE8185C58}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D418C0ED-B3E4-49A6-A8F3-7846C1AC19B2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D47995F9-9E5D-4530-A70A-66F406787F82}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D504C510-615F-4625-B640-004D5CCE091E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D53BD33F-D214-4B02-87BF-024BFC903825}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D60222BC-9674-4BD5-A37A-EBD3C28B2382}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D67115A5-DE40-4B11-9108-4D624D5776D7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D6B7E824-EC13-414C-A0C7-2D81A22932AE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D7A8567C-EA46-44C6-887B-4BCA5AC99863}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D7CAE3B4-3036-4495-A004-A9D5A6B2CD88}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D7F3ED17-D726-4D75-920A-1F59DD687C7D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D8B4DFAA-BAC2-460D-B16E-BE0E193037C6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D8E791B7-E7B1-4287-83D2-079C1E86F8DA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D960F0ED-AD0D-491B-AE37-7F8CFCA9251F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{D96D1233-4FC4-441F-895C-5EDDE63223BD}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DA6B49C8-C5BC-42FB-911F-9BE6CA298A92}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DA9AB34B-58FA-41A2-AB36-29ED92A2FF87}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DA9E17B8-B138-4234-B5C3-8E7620A39DF1}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DB1C285D-BBEA-448F-9557-52525C3DA687}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DB2D365D-72AB-4A18-8924-D1E2BF1C40EE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DC7313AB-EB12-4DC4-AD90-87B77710517E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DCCA0F23-E21F-4ADA-AC12-47A65053C9C0}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DCF3F19F-04D2-48F8-801C-A7F45E6C1626}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DD716F14-CBFC-4562-996E-089D7B3666C8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DD877D2F-793E-4CF9-AD61-C52A35C5A19F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DDBED2DF-692E-48D8-833D-C374238C8D75}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DE059DC7-5041-4619-A975-EF6B34AADE45}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DF5BE3F9-CFC6-4641-8859-F1CE5B545FDE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DFBE29A7-4791-4E9A-BB93-6759D399801A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{DFBFE0D4-3E23-42E8-9211-0CAA607C703C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E018A0A4-F548-4ECA-A9D6-89DBC24142A2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E124FA11-BF87-4D67-9A95-51F5975C340A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E159E9EA-8874-46C1-8930-CB16DBB80BFA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E15E323A-C210-4BC7-9D06-2FB09CC6F3BC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E18A0E21-DEC0-48DF-97A2-BDA8919A3E18}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E1F77A92-6D42-4C26-A652-2E460C38C93C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E2202B91-D82F-49EE-B464-AB35EFC93DDD}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E22F37D4-B586-40EE-9C53-94B3694BD04F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E25AA408-6517-496D-97D1-892DCD756DF2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E29D4942-9977-4A4F-9864-A9DBB31AF442}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E2D317DC-CE8A-46C3-A8DE-67D7AE9C8CB8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E3A7D74B-7030-48C6-B192-62E551B7D131}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E3B43809-65B3-4C3D-B8F3-28FF6CB8A03F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E3EEAAC5-4344-4FCE-BB67-5FE5836DDCA8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E471D2C9-EBF9-43D0-BD81-0C269A52CF69}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E58B1F63-4867-4D4D-8E2A-1C5E816E9F6D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E5B67732-E7D5-4175-8A85-B0003794EA80}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E6CD753C-8AF0-4553-8A75-FD60C92C0F9F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E6FE0911-F08B-4F2C-A0B3-970E6AB952D8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E71A1A07-BF09-476F-8664-4E59B68741A6}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E7DB87C4-13BF-447A-A425-3C23E8EF52C9}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E83FDDAB-5C5E-4D4E-A480-73F528F040AF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E840F97E-15A5-4B00-B3A1-055F3A1A8862}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E874A3C6-6269-48AF-8BE2-F4C64F45F9E9}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E897A685-FDF8-4821-952B-BE2C6D9C8C81}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E9171442-6BFF-4328-BF88-303604B5CD89}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E92296D2-41BB-40CB-BD6D-B05280AD508F}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E96A5A53-0093-43B3-9C90-8544DB830702}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{E9ECEBBE-2CE6-40E4-A039-03F72DE9E25E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EA2746B1-9783-416D-B1EB-00444E4A4D3D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EA9FF48A-FB92-4B62-82A8-77E4D5DAE006}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EAC16186-D340-429A-B027-7943F28F7686}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EB0EC4B5-7F5D-4A2D-9F42-5417A0C13A0C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EB1DD25A-B858-4C25-985A-A0E68D01958E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EBA11941-C719-4898-AC44-D0A56360C770}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ECA55507-4D07-4CC0-977A-69ADD59981F9}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ED0ECB05-BE84-46A7-A77A-C517A32DA982}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ED15CAFF-6740-4D49-B54E-91EB49A752DF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ED3F2151-C00B-4647-963C-43AFE46A81D2}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{ED5AFA37-DD8F-4C4C-BCE9-DFE330265495}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EDD78C99-2DFC-4BA0-BAB1-BDD8EFFC310B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EDD82B5D-B6F1-47E1-BDE4-26A77DEE916A}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EDDEAC86-9823-40BB-B4B7-A48078367E80}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EE47E8E0-7E51-4D4D-AC53-32C5FA3C83EB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EE739F8F-F919-49F8-9D5B-657A66BD7191}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EE88836C-7DC7-4E4B-81FF-95A3BBF0D731}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EE942974-D939-4336-87AA-35A78B07C0E3}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{EED670DB-8C76-4D4B-BCED-0B277831FDFC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F012EBB8-E743-4E70-BB10-76C04528DC40}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F0219C15-5382-4326-A6CB-9404DD5DB8EA}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F109A7B7-3D7A-4FE4-9E95-A55D12792C5B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F1220105-38C9-4A11-973E-FA57735C07B8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F14F4D2B-2EF5-481B-9D47-A4E737F33CFE}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F179F1F0-BDF2-478A-8B50-260BDFDB2E45}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F19670CA-85C7-4223-88E4-9DBBBCAB1AEC}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F1A76079-FF62-429A-BB20-8E2DA5339750}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F1D5A83F-27E1-4079-BE31-9A68097D5857}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F311A9AD-0586-419F-8114-D5F4BC5050BB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F345FCE2-92E7-4B2A-945E-4148C37694BB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F3E7FEC7-10CA-452B-82B3-969576FA05DF}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F559570F-15B1-4CEC-8F09-37EA1EE6D50B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F59216BF-DCDF-4150-8E05-CEF8AA41E59D}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F5AAF0C0-702E-4A27-981C-8FDD1A3EC0DB}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F5C0D45B-D2E7-46D5-99BD-A601D09EC5D8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F6F6EAD4-04E3-473F-8250-A9F5D550A621}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F72A6ACF-B76A-48B3-A099-1AFB8B302514}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F77AD006-6A6A-4F9E-8FDF-FC40943A5685}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F77CE535-9AAE-48E8-917F-8ABA75404F0B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F79C98C4-6104-4419-8C30-890ABDD90A51}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F7A1CDBE-7C70-40E8-87C5-30E11CC0F704}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F7FFA8B0-9CFF-44B4-954B-408BBEE4DC2E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F86B0A65-35C9-4E0A-AA6E-D0E0EA80E436}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F8BB5590-16A2-4A4A-8FB2-26420810605E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{F8C55678-D22E-45D6-832E-456C56A04EC8}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FAF88EF3-F711-4257-AF0B-7E1E2EB16B94}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FB985F5E-0A8B-4038-8F68-6D70A8319325}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FC1895B1-8CA8-49EB-8BFE-A55BD40F595B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FC6E4762-4391-4B2C-9361-2463E38D608E}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FC9ECC0A-3AC7-48EE-928E-5E1E633196C4}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FD91F030-9419-4168-B79B-474CD47DEA9C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FDA9A20A-11A2-483B-8A5B-826ADCE8BB34}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FE1FECF7-E74D-4CCB-A6E6-5D0CEA6E9E7C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FF1C4A53-A503-4869-8680-759C931F34F1}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FF2334F2-D9A6-4856-BCFE-42EC82C8FCC7}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FF662C31-B623-435D-9488-8345A5FF412C}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FF9AE6C2-514F-4F6F-ABEE-C3D28C9D3E2B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FFA354F6-F97D-4B46-86DC-3FE525568304}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FFE6A54E-06B3-4A33-A3D2-1D9BBB834E0B}
Successfully deleted: [Empty Folder] C:\Users\RONsen\appdata\local\{FFF54299-5B2A-4E2D-B515-A117AAC20246}



~~~ FireFox

Successfully deleted: [File] C:\user.js
Successfully deleted: [File] C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\user.js
Successfully deleted: [File] C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\absearch-search.xml
Successfully deleted: [File] C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\searchplugins\mystart search.xml
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\{336d0c35-8a85-403a-b9d2-65c292c39087}
Successfully deleted the following from C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\prefs.js

user_pref("browser.search.defaultenginename", "MyStart Search");
user_pref("extensions.incredibar.admin", false);
user_pref("extensions.incredibar.aflt", "orgnl");
user_pref("extensions.incredibar.cntry", "DE");
user_pref("extensions.incredibar.dfltLng", "");
user_pref("extensions.incredibar.dfltSrch", false);
user_pref("extensions.incredibar.did", "10643");
user_pref("extensions.incredibar.envrmnt", "production");
user_pref("extensions.incredibar.excTlbr", false);
user_pref("extensions.incredibar.hdrMd5", "E89491401B3D0A5FD2DA735C7FB5FC77");
user_pref("extensions.incredibar.hmpg", false);
user_pref("extensions.incredibar.id", "c4a391ed000000000000f655f975d47d");
user_pref("extensions.incredibar.installerproductid", "26");
user_pref("extensions.incredibar.instlDay", "15591");
user_pref("extensions.incredibar.instlRef", "");
user_pref("extensions.incredibar.isDcmntCmplt", true);
user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1423:02:49");
user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
user_pref("extensions.incredibar.newTab", false);
user_pref("extensions.incredibar.noFFXTlbr", false);
user_pref("extensions.incredibar.ppd", "6666647011");
user_pref("extensions.incredibar.prdct", "incredibar");
user_pref("extensions.incredibar.productid", "26");
user_pref("extensions.incredibar.prtnrId", "Incredibar");
user_pref("extensions.incredibar.sg", "none");
user_pref("extensions.incredibar.smplGrp", "none");
user_pref("extensions.incredibar.tlbrId", "base");
user_pref("extensions.incredibar.upn2", "6R8EA7oV5p");
user_pref("extensions.incredibar.upn2n", "92825022890009443");
user_pref("extensions.incredibar.vrsn", "1.5.11.14");
user_pref("extensions.incredibar.vrsnTs", "1.5.11.1423:02:49");
user_pref("extensions.incredibar.vrsni", "1.5.11.14");
user_pref("extensions.incredibar_i.aflt", "orgnl");
user_pref("extensions.incredibar_i.dfltLng", "");
user_pref("extensions.incredibar_i.did", "10643");
user_pref("extensions.incredibar_i.excTlbr", false);
user_pref("extensions.incredibar_i.id", "c4a391ed000000000000f655f975d47d");
user_pref("extensions.incredibar_i.installerproductid", "26");
user_pref("extensions.incredibar_i.instlDay", "15591");
user_pref("extensions.incredibar_i.instlRef", "");
user_pref("extensions.incredibar_i.ms_url_id", "");
user_pref("extensions.incredibar_i.newTab", false);
user_pref("extensions.incredibar_i.ppd", "6666647011");
user_pref("extensions.incredibar_i.prdct", "incredibar");
user_pref("extensions.incredibar_i.productid", "26");
user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
user_pref("extensions.incredibar_i.smplGrp", "none");
user_pref("extensions.incredibar_i.tlbrId", "base");
user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8EA7oV5p&loc=IB_TB&i=26&search=");
user_pref("extensions.incredibar_i.upn2", "6R8EA7oV5p");
user_pref("extensions.incredibar_i.upn2n", "92825022890009443");
user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1423:02:49");
user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_referrer", "hxxp://us.yhs4.search.yahoo.com/yhs/search?fr=altavista&itag=ody&q=hxxp://www.meningitis.d/|||8641
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_temp_referer", "hxxp://us.yhs4.search.yahoo.com/yhs/search?fr=altavista&itag=ody&q=hxxp://www.meningitis.d/|#|
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\":\"q\",\"search.sweetim.com\":\"q\",\"search.imesh.net\":\"q\",\"www.searc
user_pref("{8E9E3331-D360-4f87-8803-52DE43566502}.ScriptData_WSG_blackList", "form=CONTLB|babsrc=toolbar|babsrc=tb_ss|invocationType=tb50-ie-aolsoftonic-tbsbox-en-us|invocatio
user_pref("{8E9E3331-D360-4f87-8803-52DE43566502}.ScriptData_WSG_whiteList", "{\"search.babylon.com\":\"q\",\"search.imesh.net\":\"q\",\"www.search-results.com\":\"q\",\"home.
Emptied folder: C:\Users\RONsen\AppData\Roaming\mozilla\firefox\profiles\mjboubl6.default\minidumps [301 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.08.2013 at 15:31:22,28
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-08-2013
Ran by RONsen (administrator) on 04-08-2013 15:36:38
Running from C:\Users\RONsen\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [860040 2010-10-29] (Acer Incorporated)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-10-08] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Run: [] -  [x]
MountPoints2: {8ee7ffb6-2a73-11e1-a407-1c7508fa5649} - E:\Launch.exe
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-14] (Intel Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1025616 2010-12-09] (Dritek System Inc.)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296768 2010-11-12] (NTI Corporation)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [348664 2012-08-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://acer.msn.com
URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
BHO-x32: FGCatchUrl - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files (x86)\FlashGet\jccatch.dll (www.flashget.com)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files (x86)\FlashGet\getflash.dll (www.flashget.com)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Toolbar: HKLM - No Name - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} -  No File
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Toolbar: HKCU - No Name - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} -  No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://news.google.de/nwshp?hl=de&tab=wn
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\RONsen\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\searchplugins\webde-suche.xml
FF Extension: Battlefield Heroes Updater - C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\Extensions\battlefieldheroespatcher@ea.com
FF Extension: DownloadHelper - C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: No Name - C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi
FF Extension: No Name - C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\RONsen\AppData\Roaming\Mozilla\Firefox\Profiles\mjboubl6.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
FF Extension: Skype extension - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\Web Assistant\Firefox
FF HKLM\...\Firefox\Extensions: [{8E9E3331-D360-4f87-8803-52DE43566502}] C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{B7082FAA-CB62-4872-9106-E42DD88EDE45}] C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\
FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\
FF HKLM-x32\...\Firefox\Extensions: [{8E9E3331-D360-4f87-8803-52DE43566502}] C:\Program Files\Web Assistant\Firefox

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86224 2012-05-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110032 2012-05-08] (Avira Operations GmbH & Co. KG)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [257344 2010-11-12] (NTI Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2012-09-01] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98848 2012-05-08] (Avira GmbH)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132832 2012-05-08] (Avira GmbH)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [27760 2011-09-16] (Avira GmbH)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-12-19] (DT Soft Ltd)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31136 2013-06-08] (REALiX(tm))
S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [19952 2013-06-20] ()
S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [19952 2013-06-20] ()
S3 cpuz130; \??\C:\Users\RONsen\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 GPU-Z; \??\C:\Users\RONsen\AppData\Local\Temp\GPU-Z.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-04 15:36 - 2013-08-04 15:36 - 00000000 ____D C:\FRST
2013-08-04 15:35 - 2013-08-04 15:36 - 01781485 _____ (Farbar) C:\Users\RONsen\Downloads\FRST64.exe
2013-08-04 15:34 - 2013-08-04 15:34 - 00014329 _____ C:\Users\RONsen\Desktop\AdwCleaner[S1].txt
2013-08-04 15:34 - 2013-08-04 15:34 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-08-04 15:32 - 2013-08-04 15:32 - 00666633 _____ C:\Users\RONsen\Downloads\adwcleaner(1).exe
2013-08-04 15:32 - 2013-08-04 15:32 - 00014329 _____ C:\AdwCleaner[S1].txt
2013-08-04 15:31 - 2013-08-04 15:31 - 00090549 _____ C:\Users\RONsen\Desktop\JRT.txt
2013-08-04 15:27 - 2013-08-04 15:27 - 00666633 _____ C:\Users\RONsen\Downloads\adwcleaner.exe
2013-08-04 15:27 - 2013-08-04 15:27 - 00000000 ____D C:\Windows\ERUNT
2013-08-04 15:26 - 2013-08-04 15:26 - 00561889 _____ (Oleg N. Scherbakov) C:\Users\RONsen\Downloads\JRT.exe
2013-08-04 15:05 - 2013-08-04 15:05 - 00111024 _____ C:\Users\RONsen\Desktop\OTL.Txt
2013-08-04 14:53 - 2013-08-04 14:53 - 00602112 _____ (OldTimer Tools) C:\Users\RONsen\Downloads\OTL.exe
2013-08-04 14:45 - 2013-08-04 14:45 - 00003733 _____ C:\Users\RONsen\Desktop\gmer.log
2013-08-04 13:12 - 2013-08-04 14:09 - 00000000 ____D C:\Users\RONsen\Downloads\Petterson und Findus
2013-08-03 13:53 - 2013-08-03 13:53 - 00377856 _____ C:\Users\RONsen\Downloads\r0fxw2wg.exe
2013-08-03 13:51 - 2013-08-03 13:51 - 00008218 _____ C:\Users\RONsen\Desktop\prozessliste.txt
2013-08-03 13:50 - 2013-08-03 13:50 - 00000126 _____ C:\Users\RONsen\Desktop\prozessliste.bat
2013-08-03 13:42 - 2013-08-03 14:13 - 00016153 _____ C:\Users\RONsen\Desktop\Dienste Win 7.ods
2013-08-03 13:10 - 2013-08-04 15:33 - 00000336 _____ C:\Windows\setupact.log
2013-08-03 13:10 - 2013-08-03 13:10 - 00000000 _____ C:\Windows\setuperr.log
2013-07-31 22:35 - 2013-07-31 22:35 - 00013876 _____ C:\Users\RONsen\Desktop\hijackthis.log
2013-07-31 22:34 - 2013-07-31 22:34 - 00388608 _____ (Trend Micro Inc.) C:\Users\RONsen\Downloads\HiJackThis204(1).exe
2013-07-28 15:23 - 2013-07-28 15:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-28 15:14 - 2013-07-28 15:14 - 21703480 _____ (Mozilla) C:\Users\RONsen\Downloads\Firefox Setup 22.0.exe
2013-07-28 15:13 - 2013-07-28 15:13 - 00120272 _____ C:\Users\RONsen\Desktop\bookmarks.html
2013-07-28 15:12 - 2013-07-28 15:12 - 00100680 _____ C:\Users\RONsen\Desktop\bookmarks-2013-07-28.json
2013-07-28 00:40 - 2013-08-04 15:33 - 00133247 _____ C:\Windows\WindowsUpdate.log
2013-07-21 21:57 - 2013-03-05 20:28 - 00001929 _____ C:\Users\RONsen\Desktop\gamemodes_server.txt
2013-07-18 17:15 - 2013-07-18 17:19 - 00000000 ____D C:\Windows\system32\MRT
2013-07-17 18:56 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-17 18:56 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-17 18:56 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-17 18:56 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-17 18:56 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-17 18:56 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-17 18:56 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-17 18:56 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-17 18:56 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-17 18:56 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-17 18:56 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-17 18:56 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-17 18:56 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-17 18:56 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-17 18:56 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-17 18:56 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-17 18:56 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-17 18:56 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-17 18:56 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-17 18:56 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-17 18:56 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-17 18:56 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-17 18:56 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-17 18:56 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-17 18:56 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-17 18:56 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-17 18:56 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-17 18:56 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-17 18:56 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-17 18:56 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-17 18:56 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-17 18:50 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-17 18:50 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-17 18:50 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-17 18:50 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-17 18:50 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-17 18:49 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-17 18:49 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

==================== One Month Modified Files and Folders =======

2013-08-04 15:37 - 2013-07-28 00:40 - 00133247 _____ C:\Windows\WindowsUpdate.log
2013-08-04 15:36 - 2013-08-04 15:36 - 00000000 ____D C:\FRST
2013-08-04 15:36 - 2013-08-04 15:35 - 01781485 _____ (Farbar) C:\Users\RONsen\Downloads\FRST64.exe
2013-08-04 15:34 - 2013-08-04 15:34 - 00014329 _____ C:\Users\RONsen\Desktop\AdwCleaner[S1].txt
2013-08-04 15:34 - 2013-08-04 15:34 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-08-04 15:34 - 2011-07-09 22:17 - 00000000 ____D C:\ProgramData\clear.fi
2013-08-04 15:33 - 2013-08-03 13:10 - 00000336 _____ C:\Windows\setupact.log
2013-08-04 15:33 - 2012-01-21 14:29 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-04 15:33 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-04 15:32 - 2013-08-04 15:32 - 00666633 _____ C:\Users\RONsen\Downloads\adwcleaner(1).exe
2013-08-04 15:32 - 2013-08-04 15:32 - 00014329 _____ C:\AdwCleaner[S1].txt
2013-08-04 15:31 - 2013-08-04 15:31 - 00090549 _____ C:\Users\RONsen\Desktop\JRT.txt
2013-08-04 15:27 - 2013-08-04 15:27 - 00666633 _____ C:\Users\RONsen\Downloads\adwcleaner.exe
2013-08-04 15:27 - 2013-08-04 15:27 - 00000000 ____D C:\Windows\ERUNT
2013-08-04 15:27 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-04 15:27 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-04 15:26 - 2013-08-04 15:26 - 00561889 _____ (Oleg N. Scherbakov) C:\Users\RONsen\Downloads\JRT.exe
2013-08-04 15:05 - 2013-08-04 15:05 - 00111024 _____ C:\Users\RONsen\Desktop\OTL.Txt
2013-08-04 15:03 - 2012-10-24 14:20 - 00111024 _____ C:\Users\RONsen\Downloads\OTL.Txt
2013-08-04 14:53 - 2013-08-04 14:53 - 00602112 _____ (OldTimer Tools) C:\Users\RONsen\Downloads\OTL.exe
2013-08-04 14:45 - 2013-08-04 14:45 - 00003733 _____ C:\Users\RONsen\Desktop\gmer.log
2013-08-04 14:20 - 2012-01-21 14:29 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-04 14:09 - 2013-08-04 13:12 - 00000000 ____D C:\Users\RONsen\Downloads\Petterson und Findus
2013-08-04 14:04 - 2012-03-05 20:59 - 00000000 ____D C:\ProgramData\DVD Shrink
2013-08-04 13:18 - 2012-05-03 09:54 - 00569344 ___SH C:\Users\RONsen\Desktop\Thumbs.db
2013-08-04 13:03 - 2011-07-09 14:37 - 00000035 _____ C:\Users\Public\Documents\AtherosServiceConfig.ini
2013-08-03 14:13 - 2013-08-03 13:42 - 00016153 _____ C:\Users\RONsen\Desktop\Dienste Win 7.ods
2013-08-03 13:55 - 2011-07-17 01:17 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-08-03 13:53 - 2013-08-03 13:53 - 00377856 _____ C:\Users\RONsen\Downloads\r0fxw2wg.exe
2013-08-03 13:51 - 2013-08-03 13:51 - 00008218 _____ C:\Users\RONsen\Desktop\prozessliste.txt
2013-08-03 13:50 - 2013-08-03 13:50 - 00000126 _____ C:\Users\RONsen\Desktop\prozessliste.bat
2013-08-03 13:10 - 2013-08-03 13:10 - 00000000 _____ C:\Windows\setuperr.log
2013-08-02 23:17 - 2012-12-14 22:20 - 00000000 ____D C:\Program Files (x86)\Steam
2013-08-02 22:23 - 2012-01-21 14:29 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-01 20:09 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-31 22:48 - 2011-07-10 00:53 - 00000000 ____D C:\Users\RONsen\AppData\Roaming\Skype
2013-07-31 22:40 - 2012-10-24 14:06 - 00000000 ____D C:\Users\RONsen\Downloads\backups
2013-07-31 22:35 - 2013-07-31 22:35 - 00013876 _____ C:\Users\RONsen\Desktop\hijackthis.log
2013-07-31 22:34 - 2013-07-31 22:34 - 00388608 _____ (Trend Micro Inc.) C:\Users\RONsen\Downloads\HiJackThis204(1).exe
2013-07-31 22:34 - 2012-01-15 14:33 - 02569216 ___SH C:\Users\RONsen\Downloads\Thumbs.db
2013-07-31 12:18 - 2011-07-10 00:04 - 00000000 ____D C:\Users\RONsen\AppData\Roaming\vlc
2013-07-31 10:33 - 2011-07-10 00:00 - 00654400 _____ C:\Windows\system32\perfh007.dat
2013-07-31 10:33 - 2011-07-10 00:00 - 00130240 _____ C:\Windows\system32\perfc007.dat
2013-07-31 10:33 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-30 18:43 - 2011-08-01 16:45 - 00000339 _____ C:\Windows\Brownie.ini
2013-07-28 15:23 - 2013-07-28 15:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-28 15:23 - 2013-06-27 21:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-28 15:21 - 2011-07-10 00:38 - 00000000 ____D C:\Users\RONsen\Documents\CCleaner
2013-07-28 15:16 - 2011-07-10 00:33 - 00000000 ____D C:\Users\RONsen\Downloads\Systemprogramme
2013-07-28 15:14 - 2013-07-28 15:14 - 21703480 _____ (Mozilla) C:\Users\RONsen\Downloads\Firefox Setup 22.0.exe
2013-07-28 15:13 - 2013-07-28 15:13 - 00120272 _____ C:\Users\RONsen\Desktop\bookmarks.html
2013-07-28 15:12 - 2013-07-28 15:12 - 00100680 _____ C:\Users\RONsen\Desktop\bookmarks-2013-07-28.json
2013-07-25 22:36 - 2011-10-01 14:48 - 00000000 ____D C:\Users\RONsen\AppData\Local\CrashDumps
2013-07-18 17:19 - 2013-07-18 17:15 - 00000000 ____D C:\Windows\system32\MRT
2013-07-18 17:13 - 2007-07-12 03:49 - 00000000 ____D C:\Windows\Panther
2013-07-17 19:12 - 2009-07-14 06:45 - 00309512 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-17 19:10 - 2012-10-11 13:03 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-17 19:10 - 2012-10-11 13:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-17 19:09 - 2009-07-14 09:45 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-17 19:09 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-17 19:09 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-14 15:15 - 2012-01-21 14:29 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-14 15:15 - 2012-01-21 14:29 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-23 09:31

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

[/CODE]

RONsen · 04.08.2013, 14:49

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-08-2013
Ran by RONsen at 2013-08-04 15:38:04
Running from C:\Users\RONsen\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Acer Backup Manager (x32 Version: 3.0.0.69)
Acer Crystal Eye Webcam (x32 Version: 1.0.1216)
Acer ePower Management (x32 Version: 6.00.3000)
Acer eRecovery Management (x32 Version: 5.00.3002)
Acer GameZone Console (x32 Version: 6.1.0.9)
Acer Registration (x32 Version: 1.03.3003)
Acer ScreenSaver (x32 Version: 1.1.1206.2010)
Acer Updater (x32 Version: 1.02.3001)
Acrobat.com (x32 Version: 1.6.65)
Adobe AIR (x32 Version: 1.5.0.7220)
Adobe Flash Player 10 ActiveX (x32 Version: 10.1.102.64)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.7.637)
AirMech (x32)
Amazon MP3-Downloader 1.0.9 (x32)
AMD Accelerated Video Transcoding (Version: 12.10.100.30328)
AMD APP SDK Runtime (Version: 10.0.938.2)
AMD Catalyst Install Manager (Version: 8.0.911.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Media Foundation Decoders (Version: 1.0.80328.2204)
Apple Application Support (x32 Version: 2.1.7)
Apple Mobile Device Support (Version: 5.1.1.4)
Apple Software Update (x32 Version: 2.1.3.127)
applicationupdater (HKCU)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.36)
Avira Free Antivirus (x32 Version: 12.1.9.2400)
Backup Manager V3 (x32 Version: 3.0.0.69)
Bluetooth Win7 Suite (64) (Version: 7.2.0.45)
Bonjour (Version: 3.0.0.10)
Brother HL-2030 (x32 Version: 1.00)
Cake Mania (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225)
CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225)
CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225)
CCC Help Czech (x32 Version: 2013.0328.2217.38225)
CCC Help Danish (x32 Version: 2013.0328.2217.38225)
CCC Help Dutch (x32 Version: 2013.0328.2217.38225)
CCC Help English (x32 Version: 2013.0328.2217.38225)
CCC Help Finnish (x32 Version: 2013.0328.2217.38225)
CCC Help French (x32 Version: 2013.0328.2217.38225)
CCC Help German (x32 Version: 2013.0328.2217.38225)
CCC Help Greek (x32 Version: 2013.0328.2217.38225)
CCC Help Hungarian (x32 Version: 2013.0328.2217.38225)
CCC Help Italian (x32 Version: 2013.0328.2217.38225)
CCC Help Japanese (x32 Version: 2013.0328.2217.38225)
CCC Help Korean (x32 Version: 2013.0328.2217.38225)
CCC Help Norwegian (x32 Version: 2013.0328.2217.38225)
CCC Help Polish (x32 Version: 2013.0328.2217.38225)
CCC Help Portuguese (x32 Version: 2013.0328.2217.38225)
CCC Help Russian (x32 Version: 2013.0328.2217.38225)
CCC Help Spanish (x32 Version: 2013.0328.2217.38225)
CCC Help Swedish (x32 Version: 2013.0328.2217.38225)
CCC Help Thai (x32 Version: 2013.0328.2217.38225)
CCC Help Turkish (x32 Version: 2013.0328.2217.38225)
ccc-utility64 (Version: 2013.0328.2218.38225)
CCleaner (Version: 3.28)
CDBurnerXP (x32 Version: 4.4.1.3243)
CDex - Open Source Digital Audio CD Extractor (x32 Version: 1.70.4.2009)
clear.fi (x32 Version: 1.0.1223.00)
clear.fi (x32 Version: 9.0.7209)
clear.fi Client (x32 Version: 1.00.3008)
Command & Conquer Die ersten 10 Jahre (x32 Version: 1.00.0000)
Counter-Strike: Global Offensive (x32)
D3DX10 (x32 Version: 15.4.2368.0902)
DAEMON Tools Lite (x32 Version: 4.45.1.0236)
DC Universe Online Live (HKCU)
Diablo III (x32 Version: 1.0.6.13644)
Dota 2 (x32)
dows-Treiberpaket - Nokia Modem  (02/25/2011 7.01.0.9) (Version: 02/25/2011 7.01.0.9)
Dream Day First Home (x32)
Dropbox (HKCU Version: 1.6.18)
DVD Shrink 3.2 (x32)
DVDFab 8.1.3.8 (09/12/2011) Qt (x32)
DVDx 4.0 Open Edition (x32 Version: 4.0 (Open Edition))
eBay Worldwide (x32 Version: 2.1.0901)
eReg (x32 Version: 1.20.138.34)
eSobi v2 (x32 Version: 2.0.4.000274)
Farm Frenzy 2 (x32)
FlashGet 1.9.6.1073 (x32 Version: 1.9.6.1073)
Free Screen Video Recorder version 2.5.815 (x32)
Free YouTube Download 3 version 3.0.5.712 (x32)
Free YouTube Download version 3.0.20.1228 (x32)
Freemake Video Downloader (x32 Version: 2.1.9)
Galapago (x32)
gamelauncher-ps2-psg (HKCU)
GIMP 2.6.11 (x32 Version: 2.6.11)
Google Earth Plug-in (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.153)
Heroes of Hellas (x32)
HWiNFO64 Version 4.20 (Version: 4.20)
Identity Card (x32 Version: 1.00.3003)
Image Resizer Powertoy Clone for Windows (64 bit) (Version: 2.1.1)
ImgBurn (x32 Version: 2.5.6.0)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Rapid Storage Technology (x32 Version: 10.0.0.1046)
iTunes (Version: 10.6.1.7)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Launch Manager (x32 Version: 5.0.3)
League of Legends (x32 Version: 1.02.0000)
Logitech SetPoint 6.32 (Version: 6.32.20)
MediaEspresso (x32 Version: 1.0.1210_33255)
Merriam Websters Spell Jam (x32)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
Mp3tag v2.56 (x32 Version: v2.56)
MSVC80_x64_v2 (Version: 1.0.3.0)
MSVC80_x86_v2 (x32 Version: 1.0.3.0)
MSVC90_x64 (Version: 1.0.1.2)
MSVC90_x86 (x32 Version: 1.0.1.2)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyWinLocker (Version: 4.0.14.11)
MyWinLocker 4 (x32 Version: 4.0.14.11)
MyWinLocker Suite (x32 Version: 4.0.14.11)
Nokia Connectivity Cable Driver (x32 Version: 7.1.78.0)
Nokia PC Suite (x32 Version: 7.1.180.64)
Nokia Suite (x32 Version: 3.4.49.0)
Norton Online Backup (x32 Version: 2.1.17869)
NTI Media Maker 9 (x32 Version: 9.0.2.8939)
OpenAL (x32)
OpenOffice.org 3.3 (x32 Version: 3.3.9567)
Pando Media Booster (x32 Version: 2.3.6.0)
PC Connectivity Solution (x32 Version: 12.0.17.0)
Pixum Fotobuch (x32)
Poker Pop (x32)
PunkBuster Services (x32 Version: 0.990)
PX Profile Update (x32 Version: 1.00.1.)
QuickTime (x32 Version: 7.72.80.56)
Ravensburger tiptoi (x32)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6254)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30123)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0)
RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition (x32 Version: v2.24 MSI Master Overclocking Arena 2009 edition)
Shredder (Version: 2.0.8.7)
Shredder (x32 Version: 2.0.8.7)
Skype Toolbars (x32 Version: 5.3.7555)
Skype™ 6.5 (x32 Version: 6.5.158)
SpeedFan (remove only) (x32)
Spin & Win (x32)
StarCraft II (x32 Version: 1.4.1.19776)
Steam (x32 Version: 1.0.0.0)
SUPER © +Recorder.2013.55 (Mar 7, 2013) Version +Recorder.2013. (x32 Version: +Recorder.2013.55)
swMSM (x32 Version: 12.0.0.1)
Synaptics Pointing Device Driver (Version: 15.1.6.0)
TeamSpeak 3 Client (Version: 3.0.10.1)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (Version: 2.0.82.0)
Unity Web Player (HKCU Version: )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Veetle TV (x32 Version: 0.9.18)
VLC media player 2.0.2 (x32 Version: 2.0.2)
Welcome Center (x32 Version: 1.02.3007)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows-Treiberpaket - Nokia Modem  (02/25/2011 4.7) (Version: 02/25/2011 4.7)
Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0) (Version: 08/22/2008 7.0.0.0)
Xfire (remove only) (x32)
Xiph.Org Open Codecs 0.85.17777 (x32 Version: 0.85.17777)

==================== Restore Points  =========================

31-07-2013 20:49:06 Windows Update
04-08-2013 12:22:07 O&O DiskRecovery wurde entfernt.
04-08-2013 12:22:56 O&O MediaRecovery wird entfernt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {128508DA-FC87-4303-949C-DFEB8B05EF4C} - System32\Tasks\{27C6A3D1-A51E-4051-81C0-A16B186D2289} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-06-03] (Skype Technologies S.A.)
Task: {15703B21-B9B5-4DBF-8DF5-11EE7528573A} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {20691750-CA35-4522-B49C-B3F796AE5D54} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {361E7E64-4E9E-4E37-B17E-7C36A772A5D5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-02-25] (Piriform Ltd)
Task: {40BDD85D-F835-4A39-836A-6611A18E2C2D} - System32\Tasks\{E4B5AFA0-5D1D-442A-A616-4727389504A5} => c:\program files (x86)\mozilla firefox\firefox.exe [2013-06-18] (Mozilla Corporation)
Task: {43DB22AC-7FB7-4AF6-9BA0-BBA9DB2D4483} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2010-12-23] (CyberLink Corp.)
Task: {71DC58EB-80CF-419E-BC63-6FCA6075829E} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2010-12-23] (CyberLink)
Task: {BCEE935B-5C4B-428E-B0CC-30E10A260000} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-21] (Google Inc.)
Task: {BF1F58A1-2650-4A7B-B0F7-67C348A36460} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-21] (Google Inc.)
Task: {C786449A-B4AF-4177-BD76-83F0A1781783} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {D793B829-BAB7-4C50-BFA7-4FB0A648AD40} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {DC308570-978F-49A1-A61B-2EDFC5246A71} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2010-12-23] (Acer Incorporated)
Task: {E5A463B3-B70E-495B-BCC8-A275F2E16568} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-06-20 19:42:44.441
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-20 19:42:44.323
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-20 19:42:43.163
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-20 19:42:43.062
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-20 19:42:41.934
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-20 19:42:41.823
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-20 19:42:40.688
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-20 19:42:40.582
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-20 19:42:36.565
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-20 19:42:36.465
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 23%
Total physical RAM: 8173.86 MB
Available physical RAM: 6289.93 MB
Total Pagefile: 16345.9 MB
Available Pagefile: 14350.47 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:450.66 GB) (Free:188.18 GB) NTFS (Disk=0 Partition=3)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 75066CBA)
Partition 1: (Not Active) - (Size=15 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=451 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Code:

ATTFilter

GMER Logfile:

	Code: 

 ATTFilter

  
	GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-08-04 14:45:13
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 ST950032 rev.0001 465,76GB
Running: r0fxw2wg.exe; Driver: C:\Users\RONsen\AppData\Local\Temp\kgdiqpoc.sys


---- User code sections - GMER 2.1 ----

.text   C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe[524] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69         0000000075701465 2 bytes [70, 75]
.text   C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe[524] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155        00000000757014bb 2 bytes [70, 75]
.text   ...                                                                                                                                  * 2
.text   C:\Windows\SysWOW64\PnkBstrA.exe[1880] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322                                              0000000073021a22 2 bytes [02, 73]
.text   C:\Windows\SysWOW64\PnkBstrA.exe[1880] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496                                              0000000073021ad0 2 bytes [02, 73]
.text   C:\Windows\SysWOW64\PnkBstrA.exe[1880] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552                                              0000000073021b08 2 bytes [02, 73]
.text   C:\Windows\SysWOW64\PnkBstrA.exe[1880] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730                                              0000000073021bba 2 bytes [02, 73]
.text   C:\Windows\SysWOW64\PnkBstrA.exe[1880] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762                                              0000000073021bda 2 bytes [02, 73]
.text   C:\Program Files (x86)\Launch Manager\LManager.exe[3252] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                     0000000075701465 2 bytes [70, 75]
.text   C:\Program Files (x86)\Launch Manager\LManager.exe[3252] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                    00000000757014bb 2 bytes [70, 75]
.text   ...                                                                                                                                  * 2
.text   C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe[3268] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                       0000000075701465 2 bytes [70, 75]
.text   C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe[3268] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                      00000000757014bb 2 bytes [70, 75]
.text   ...                                                                                                                                  * 2
.text   C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe[3284] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000075701465 2 bytes [70, 75]
.text   C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe[3284] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000757014bb 2 bytes [70, 75]
.text   ...                                                                                                                                  * 2

---- Threads - GMER 2.1 ----

Thread  C:\Windows\System32\svchost.exe [4900:1292]                                                                                          000007fef5529688

---- Registry - GMER 2.1 ----

Reg     HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\ec55f98dd007                                                          
Reg     HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\ec55f98dd007 (not active ControlSet)                                      

---- EOF - GMER 2.1 ----
         
 --- --- ---

cosinus · 04.08.2013, 16:38

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

RONsen · 04.08.2013, 19:40

Erstmal danke für die Hilfe.

Der Quickscan mit Malwarebytes Anti-Malware (MBAM) ergab nix.

Den ESET Test mache ich morgen. Hoffe das dort was gefunden wird.

cosinus · 04.08.2013, 21:57

Zitat:

Der Quickscan mit Malwarebytes Anti-Malware (MBAM) ergab nix.

Bitte trotzdem das Log posten

Zitat:

Hoffe das dort was gefunden wird.

Bitte

du hoffst dass dein Rechner noch verseucht ist?

RONsen · 05.08.2013, 19:58

Hallo,

habe heute festgestellt das "Ads not by this Site Problem " verschwunden ist.

Anscheinend hat irgend ein der probierten Programm Wunder gewirkt.

Vielen Danke für die vor Allem SCHNELLE Hilfe.

MFG
RONsen

cosinus · 05.08.2013, 23:14

Ich vermisse immer noch beide Logs

RONsen · 07.08.2013, 19:59

ok, mache ich noch.

RONsen · 10.08.2013, 18:41

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=fa7daf2dc14384438222dab908d061a3
# engine=14722
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-10 05:10:23
# local_time=2013-08-10 07:10:23 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 94 28311 121921243 21089 0
# compatibility_mode=5893 16776574 100 94 28341 127784473 0 0
# scanned=294517
# found=0
# cleaned=0
# scan_time=15416

Code:

ATTFilter

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.08.04.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16635
RONsen :: RONSEN-PC [Administrator]

04.08.2013 20:06:59
mbam-log-2013-08-04 (20-06-59).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 217841
Laufzeit: 5 Minute(n), 23 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

cosinus · 11.08.2013, 15:58

Sieht soweit ok aus

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

05.08.2013, 23:14	#10
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Ads not by this Site Problem Ich vermisse immer noch beide Logs __________________ Logfiles bitte immer in CODE-Tags posten

Ads not by this Site Problem

Plagegeister aller Art und deren Bekämpfung: Ads not by this Site Problem