| |
| |||||||
Log-Analyse und Auswertung: Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
23.02.2015, 21:12
| #1 |
| | ![Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe - Standard](images/icons/icon1.gif){kind=icon} Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe Hallo, meine Tante bat mich um Hilfe, weil ihr PC (Win 7) bei der Eingabe eines Suchbegriffs bei Chrome eine Trackid und den gesamten Google-Link googelt. Bei der Ausführung von Avast kamen dann auch 5 Meldungen. Dafür finde ich leider keine Log-Datei, da bräuchte ich schon Hilfe. Den Ordner C:\ProgramData\AVAST Software\Avast\log habe ich gefunden, aber ich weiß nicht, welche Datei an dieser Stelle relevant ist. Die Funde habe ich erstmal in den Container verschieben lassen. Bisher habe ich schon folgende Programme laufen lassen: AdwCleaner MBAM FRST (dann habe ich erst die Hinweise für alle Hilfesuchenden gelesen, ich hoffe, das ist nicht so schlimm) defogger nochmal FRST GMER AdwCleaner (davon gibt es 2logs...?) Code:
ATTFilter # AdwCleaner v4.111 - Bericht erstellt 23/02/2015 um 18:36:11
# Aktualisiert 18/02/2015 von Xplode
# Datenbank : 2015-02-18.3 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : theamzw - THEAMZW-PC
# Gestarted von : C:\Users\theamzw\Desktop\AdwCleaner_4.111.exe
# Option : Suchlauf
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gefunden : C:\Users\Public\Desktop\eBay.lnk
Datei Gefunden : C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pbjikboenpfhbbejgkoklgkhjpfogcam_0.localstorage
Datei Gefunden : C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_allin1convert.dl.tb.ask.com_0.localstorage
Datei Gefunden : C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_allin1convert.dl.tb.ask.com_0.localstorage-journal
Datei Gefunden : C:\Users\theamzw\AppData\Local\Temp\uninstaller.exe
Datei Gefunden : C:\Users\theamzw\AppData\LocalLow\SkwConfig.bin
Datei Gefunden : C:\Windows\System32\roboot64.exe
Ordner Gefunden : C:\Program Files (x86)\Amazon Browser Bar
Ordner Gefunden : C:\Program Files (x86)\Amazon\ABB
Ordner Gefunden : C:\Program Files (x86)\RegClean Pro
Ordner Gefunden : C:\ProgramData\apn
Ordner Gefunden : C:\ProgramData\Ask
Ordner Gefunden : C:\ProgramData\Partner
Ordner Gefunden : C:\Users\theamzw\AppData\Local\Amazon Browser Bar
Ordner Gefunden : C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam
Ordner Gefunden : C:\Users\theamzw\AppData\Local\Temp\apn
Ordner Gefunden : C:\Users\theamzw\AppData\Roaming\DealPly
Ordner Gefunden : C:\Users\theamzw\AppData\Roaming\Systweak
Ordner Gefunden : C:\Windows\System32\ljkb
Ordner Gefunden : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Systweak
***** [ Geplante Tasks ] *****
Task Gefunden : driverupdate startup
Task Gefunden : LaunchApp
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gefunden : HKCU\Software\Classes\iLivid.torrent
Schlüssel Gefunden : HKCU\Software\distromatic
Schlüssel Gefunden : HKCU\Software\Google\Chrome\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam
Schlüssel Gefunden : HKCU\Software\ilivid
Schlüssel Gefunden : HKCU\Software\IM
Schlüssel Gefunden : HKCU\Software\ImInstaller
Schlüssel Gefunden : HKCU\Software\InstallCore
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{094002AC-C202-431F-AB80-89F407417BDB}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKCU\Software\SweetIM
Schlüssel Gefunden : HKCU\Software\systweak
Schlüssel Gefunden : [x64] HKCU\Software\distromatic
Schlüssel Gefunden : [x64] HKCU\Software\ilivid
Schlüssel Gefunden : [x64] HKCU\Software\IM
Schlüssel Gefunden : [x64] HKCU\Software\ImInstaller
Schlüssel Gefunden : [x64] HKCU\Software\InstallCore
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{094002AC-C202-431F-AB80-89F407417BDB}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : [x64] HKCU\Software\SweetIM
Schlüssel Gefunden : [x64] HKCU\Software\systweak
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\iLivid.torrent
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Amazon Browser Settings
Schlüssel Gefunden : HKLM\SOFTWARE\SweetIM
Schlüssel Gefunden : HKLM\SOFTWARE\systweak
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [iLivid]
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17631
-\\ Google Chrome v40.0.2214.115
[C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Web data] - Gefunden [Search Provider] : hxxp://www.search.ask.com/web?tpid=ORJ-V7C&o=APN11412&l=dis&pf=V7&p2=%5EBBK%5EOSJ000%5EYY%5EDE&gct=&itbv=12.12.2.83&doi=2014-07-07&apn_uid=080436F7-EEC5-4199-9D3F-C6A49282B53F&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5EDE&apn_dbr=cr_35.0.1916.153&psv=&pt=tb&trgb=CR&q={searchTerms}
[C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Web data] - Gefunden [Search Provider] : hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={88054DCF-93CA-11E3-B790-685D438CE933}&&st=23&ptr=100
*************************
AdwCleaner[R0].txt - [6776 Bytes] - [23/02/2015 18:36:11]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [6835 Bytes] ##########
Code:
ATTFilter # AdwCleaner v4.111 - Bericht erstellt 23/02/2015 um 18:40:50
# Aktualisiert 18/02/2015 von Xplode
# Datenbank : 2015-02-18.3 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : theamzw - THEAMZW-PC
# Gestarted von : C:\Users\theamzw\Desktop\AdwCleaner_4.111.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Program Files (x86)\Amazon Browser Bar
Ordner Gelöscht : C:\Program Files (x86)\Amazon\ABB
Ordner Gelöscht : C:\Program Files (x86)\RegClean Pro
Ordner Gelöscht : C:\Users\theamzw\AppData\Local\Temp\apn
Ordner Gelöscht : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Windows\System32\ljkb
Ordner Gelöscht : C:\Users\theamzw\AppData\Local\Amazon Browser Bar
Ordner Gelöscht : C:\Users\theamzw\AppData\Roaming\DealPly
Ordner Gelöscht : C:\Users\theamzw\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Datei Gelöscht : C:\Users\theamzw\AppData\Local\Temp\uninstaller.exe
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\theamzw\AppData\LocalLow\SkwConfig.bin
Datei Gelöscht : C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pbjikboenpfhbbejgkoklgkhjpfogcam_0.localstorage
Datei Gelöscht : C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_allin1convert.dl.tb.ask.com_0.localstorage
Datei Gelöscht : C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_allin1convert.dl.tb.ask.com_0.localstorage-journal
***** [ Geplante Tasks ] *****
Task Gelöscht : driverupdate startup
Task Gelöscht : LaunchApp
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam
Schlüssel Gelöscht : HKCU\Software\Classes\iLivid.torrent
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [iLivid]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iLivid.torrent
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{094002AC-C202-431F-AB80-89F407417BDB}
Schlüssel Gelöscht : HKCU\Software\distromatic
Schlüssel Gelöscht : HKCU\Software\ilivid
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\SweetIM
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gelöscht : HKLM\SOFTWARE\SweetIM
Schlüssel Gelöscht : HKLM\SOFTWARE\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Amazon Browser Settings
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17631
-\\ Google Chrome v40.0.2214.115
[C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.search.ask.com/web?tpid=ORJ-V7C&o=APN11412&l=dis&pf=V7&p2=%5EBBK%5EOSJ000%5EYY%5EDE&gct=&itbv=12.12.2.83&doi=2014-07-07&apn_uid=080436F7-EEC5-4199-9D3F-C6A49282B53F&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5EDE&apn_dbr=cr_35.0.1916.153&psv=&pt=tb&trgb=CR&q={searchTerms}
[C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={88054DCF-93CA-11E3-B790-685D438CE933}&&st=23&ptr=100
*************************
AdwCleaner[R0].txt - [7010 Bytes] - [23/02/2015 18:36:11]
AdwCleaner[S0].txt - [6155 Bytes] - [23/02/2015 18:40:50]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6214 Bytes] ##########
Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 23.02.2015 Suchlauf-Zeit: 19:05:22 Logdatei: mbam.txt Administrator: Ja Version: 2.00.4.1028 Malware Datenbank: v2015.02.23.05 Rootkit Datenbank: v2015.02.22.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: theamzw Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 361441 Verstrichene Zeit: 32 Min, 58 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente erkannt) Module: 0 (Keine schädliche Elemente erkannt) Registrierungsschlüssel: 2 PUP.Optional.SweetIM.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SweetIM, In Quarantäne, [a33e3be65436c96db2679b05d330619f], PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT, In Quarantäne, [627fb8696327ab8b4d35e11df50fc43c], Registrierungswerte: 1 PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT|URL, MYSTART, In Quarantäne, [627fb8696327ab8b4d35e11df50fc43c] Registrierungsdaten: 0 (Keine schädliche Elemente erkannt) Ordner: 0 (Keine schädliche Elemente erkannt) Dateien: 13 PUP.Optional.RegCleanPro, C:\$RECYCLE.BIN\S-1-5-21-4164022602-3369482870-266661612-1000\$RP1U0KY.exe, In Quarantäne, [a63b1908c9c16ec8996cae87b54bef11], PUP.Optional.RegCleanPro, C:\$RECYCLE.BIN\S-1-5-21-4164022602-3369482870-266661612-1000\$RDI2JVB.exe, In Quarantäne, [578ad948503a360038cdb87dea16a060], PUP.Optional.RegCleanPro, C:\$RECYCLE.BIN\S-1-5-21-4164022602-3369482870-266661612-1000\$R2FE1PZ.exe, In Quarantäne, [dd04051c1377d95d48bd4bea9e62ae52], PUP.Optional.RegCleanPro, C:\$RECYCLE.BIN\S-1-5-21-4164022602-3369482870-266661612-1000\$RXC6S7L.exe, In Quarantäne, [59885fc227635fd7798c1a1bd927df21], PUP.Optional.Bandoo, C:\$RECYCLE.BIN\S-1-5-21-4164022602-3369482870-266661612-1000\$RY1RSBZ.exe, In Quarantäne, [657c8c95b0dacd69045eba78000148b8], PUP.Optional.SweetIM, C:\$RECYCLE.BIN\S-1-5-21-4164022602-3369482870-266661612-1000\$R7UEZE4.exe, In Quarantäne, [9e4342df1a70300654e7916035d0768a], PUP.Optional.Installcore, C:\Users\theamzw\AppData\Local\Temp\ICReinstall_Media-Player.exe, In Quarantäne, [d90835ec8efc60d62294d9a03ec7f709], PUP.Optional.SweetIM, C:\Users\theamzw\AppData\Local\Temp\mgsqlite3.7z, In Quarantäne, [24bdab767713d95d2714539e28dd847c], PUP.Optional.SweetIM, C:\Users\theamzw\AppData\Local\Temp\mgsqlite3.dll, In Quarantäne, [a8398d940387142256e5bc35f51020e0], PUP.Optional.MyPCBackup.A, C:\Users\theamzw\AppData\Local\Temp\BackupSetup.exe, In Quarantäne, [5a878c958cfe3501b44f85698978de22], PUP.Optional.SweetPacks.A, C:\Users\theamzw\AppData\Local\Temp\SweetIESetup.exe.7z, In Quarantäne, [fae7db4690fae84e01eb16140005fd03], PUP.Optional.Installcore, C:\Users\theamzw\Downloads\Media-Player.exe, In Quarantäne, [4899ea3778128ea88531db9e1beae917], PUP.Optional.LiveSoftAction.A, C:\Users\theamzw\Downloads\OPEL COMBO 1.6 CNG user guide provided through pdfretriever.com.exe, In Quarantäne, [726f958c2763e74fb16448fcf60b6997], Physische Sektoren: 0 (Keine schädliche Elemente erkannt) (end) Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2015
Ran by theamzw (administrator) on THEAMZW-PC on 23-02-2015 20:03:50
Running from C:\Users\theamzw\Desktop
Loaded Profiles: theamzw (Available profiles: theamzw)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
(TODO: <公司名稱>) C:\Program Files (x86)\PHotkey\GPMTray.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\PHotkey\Atouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\theamzw\Desktop\Defogger.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12452456 2012-02-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-08] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2870032 2012-02-10] (Synaptics Incorporated)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [177936 2012-02-17] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-21] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-03] (CyberLink)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-30] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-26] (AVAST Software)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\...\Run: [AshSnap] => C:\Program Files (x86)\Medion MediaPack 2\Ashampoo Snap\ashsnap.exe
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-12-15] (Google Inc.)
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\...\Run: [SlimCleaner Plus] => "C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe" /minimize
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\...\RunOnce: [Adobe Speed Launcher] => 1424717198
AppInit_DLLs: C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL => C:\Program Files (x86)\Amazon\Amazon1ButtonApp\AmazonExtIE64.dll [157504 2014-02-22] (Amazon Inc.)
AppInit_DLLs-x32: C:\PROGRA~2\Amazon\AMAZON~1\\AMAZON~3.DLL => C:\Program Files (x86)\Amazon\Amazon1ButtonApp\\AmazonExtIE.dll [141120 2014-02-22] (Amazon Inc.)
Startup: C:\Users\theamzw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\JL Alpine Advent Calendar 2013.lnk
ShortcutTarget: JL Alpine Advent Calendar 2013.lnk -> C:\Program Files (x86)\JL Alpine Advent Calendar 2013\JL Alpine Advent Calendar 2013.exe (No File)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
CHR HKU\S-1-5-21-4164022602-3369482870-266661612-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-4164022602-3369482870-266661612-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-4164022602-3369482870-266661612-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-4164022602-3369482870-266661612-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-03-10]
Chrome:
=======
CHR StartupUrls: Default -> "https://www.google.com/?trackid=sp-006"
CHR DefaultSearchKeyword: Default -> google
CHR DefaultSearchURL: Default -> https://www.google.de/search?q={searchTerms}?trackid=sp-006https://www.google.de/search?q={searchTerms}?trackid=sp-006
CHR DefaultSuggestURL: Default -> https://www.google.com/complete/search?client=chrome&q={searchTerms}
CHR Profile: C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (Avast Online Security) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-05-19]
CHR Extension: (Google Wallet) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-21]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-18] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-21] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-21] (Avast Software)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-13] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-13] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-13] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-15] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-03-29] ()
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-03-29] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-21] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-01] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-21] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-21] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2015-02-22] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-21] (Avast Software)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-23 20:03 - 2015-02-23 20:03 - 00000476 _____ () C:\Users\theamzw\Desktop\defogger_disable.log
2015-02-23 20:03 - 2015-02-23 20:03 - 00000000 _____ () C:\Users\theamzw\defogger_reenable
2015-02-23 20:02 - 2015-02-23 20:02 - 00050477 _____ () C:\Users\theamzw\Desktop\Defogger.exe
2015-02-23 19:59 - 2015-02-23 20:00 - 00046723 _____ () C:\Users\theamzw\Desktop\Addition.txt
2015-02-23 19:57 - 2015-02-23 20:03 - 00020043 _____ () C:\Users\theamzw\Desktop\FRST.txt
2015-02-23 19:57 - 2015-02-23 20:03 - 00000000 ____D () C:\FRST
2015-02-23 19:56 - 2015-02-23 19:56 - 02087424 _____ (Farbar) C:\Users\theamzw\Desktop\FRST64.exe
2015-02-23 19:49 - 2015-02-23 19:49 - 00003446 _____ () C:\Users\theamzw\Desktop\mbam.txt
2015-02-23 19:48 - 2015-02-23 19:48 - 00000197 _____ () C:\Windows\system32\2015-02-23-18-48-13.068-AvastVBoxSVC.exe-4468.log
2015-02-23 19:00 - 2015-02-23 19:46 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-23 18:58 - 2015-02-23 18:58 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-23 18:58 - 2015-02-23 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-02-23 18:58 - 2015-02-23 18:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-23 18:58 - 2015-02-23 18:58 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-02-23 18:58 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-23 18:58 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-02-23 18:58 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-02-23 18:48 - 2015-02-23 18:50 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\theamzw\Desktop\mbam-setup-2.0.4.1028.exe
2015-02-23 18:47 - 2015-02-23 18:47 - 00000197 _____ () C:\Windows\system32\2015-02-23-17-47-20.073-AvastVBoxSVC.exe-5116.log
2015-02-23 18:36 - 2015-02-23 18:40 - 00000000 ____D () C:\AdwCleaner
2015-02-23 18:35 - 2015-02-23 18:35 - 02126848 _____ () C:\Users\theamzw\Desktop\AdwCleaner_4.111.exe
2015-02-23 11:33 - 2015-02-23 11:33 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{0CD8E3FA-C4E5-4280-A171-4DEB6BB896E2}
2015-02-22 23:33 - 2015-02-22 23:33 - 00000247 _____ () C:\Windows\system32\2015-02-22-22-33-25.002-aswFe.exe-7920.log
2015-02-22 23:24 - 2015-02-22 23:33 - 00000247 _____ () C:\Windows\system32\2015-02-22-22-24-48.048-aswFe.exe-6568.log
2015-02-22 23:24 - 2015-02-22 23:24 - 00000197 _____ () C:\Windows\system32\2015-02-22-22-24-42.028-AvastVBoxSVC.exe-5876.log
2015-02-22 22:38 - 2015-02-22 22:38 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{228F03DA-FA9D-4255-9E36-D6106966CA8D}
2015-02-22 10:23 - 2015-02-22 10:23 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{5AFCA629-1A1B-4339-944D-9FFB0EF75B68}
2015-02-21 19:35 - 2015-02-21 19:35 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{6DE7BBE1-4E04-496F-8DAE-F14B4B02708C}
2015-02-21 07:28 - 2015-02-21 07:28 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{2E1F3CDD-68A6-4BA0-871F-8BFEBCDC8783}
2015-02-20 10:34 - 2015-02-20 10:34 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{8478AE2B-3D5A-4CB2-B6A6-A85ACD5E1C5F}
2015-02-19 11:15 - 2015-02-19 11:15 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{6592DA73-FE77-4F9C-85E6-999E3A91B136}
2015-02-18 20:31 - 2015-02-18 20:31 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{4D2E7F86-C36F-4467-9D05-36109DE48D9C}
2015-02-18 08:30 - 2015-02-18 08:30 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{EE141D02-3221-418D-8285-6DFA687BF6E4}
2015-02-17 14:12 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-17 14:12 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-17 14:12 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-17 14:12 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-17 14:05 - 2015-02-17 14:05 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{96582E42-A760-4361-9724-E1CCA3C6C9F9}
2015-02-17 13:57 - 2015-02-17 13:57 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{5B947AF7-D2DC-456D-9FC9-CDD956279EA7}
2015-02-17 10:57 - 2015-02-17 10:57 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{8FA399DD-ECAB-4DA8-A92B-0DE6EA8E6ABB}
2015-02-16 23:30 - 2015-02-16 23:30 - 00000197 _____ () C:\Windows\system32\2015-02-16-22-30-27.047-AvastVBoxSVC.exe-4004.log
2015-02-16 18:13 - 2015-02-16 18:14 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{4180D08A-F854-4940-A8A8-CE5C93B38475}
2015-02-16 13:21 - 2015-02-16 13:21 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{CBECCFEF-B4DF-4B07-A011-1A3DAA1B176D}
2015-02-15 12:49 - 2015-02-15 12:49 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{02AC8711-1BB2-4E74-B19E-0E64E5CCB1BF}
2015-02-14 11:48 - 2015-02-14 11:49 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{CEB274AB-4820-4C82-8874-F89A845BF0D2}
2015-02-13 21:25 - 2015-02-13 21:25 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{A489F737-0277-477E-97D9-461B4690C0C1}
2015-02-13 11:10 - 2015-02-13 11:10 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{E3D6FF87-322A-40F0-9A17-E51478BA3BD5}
2015-02-12 16:55 - 2015-02-12 16:56 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{0C85BA0F-4395-4A7A-AB9A-D711B298DF1C}
2015-02-11 21:43 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 21:43 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 21:43 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 21:43 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 21:43 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 21:43 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 21:43 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 21:43 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 21:43 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 21:43 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 21:43 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 21:43 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 21:43 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 21:43 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 21:43 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 21:43 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 21:43 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 21:43 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 21:43 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 21:43 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 21:43 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 21:43 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 21:43 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 21:43 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 21:43 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 21:43 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 21:43 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 21:43 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 21:43 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 21:43 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 21:43 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 21:43 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 21:43 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 21:43 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 21:43 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 21:43 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 21:43 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 21:43 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 21:43 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 21:43 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 21:43 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 21:43 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 21:43 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 21:43 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 21:43 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 21:43 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 21:43 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 21:43 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 21:43 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 21:43 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 21:43 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 21:43 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 21:14 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 21:14 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 21:12 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 21:12 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 21:12 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 21:12 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 21:12 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 21:12 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 21:12 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 20:50 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 20:50 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 20:50 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 20:50 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 20:50 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 20:50 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 20:50 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 20:50 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 20:50 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 20:50 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 20:50 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 20:50 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 20:50 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 20:50 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 20:50 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 20:50 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 20:50 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 20:50 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 20:50 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 20:50 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 20:49 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 20:49 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 20:49 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 20:49 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 20:49 - 2014-10-04 03:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-11 20:49 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-02-11 20:49 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-02-11 20:49 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 20:49 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 20:49 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-11 20:49 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-11 20:48 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 20:48 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 20:47 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 20:31 - 2015-02-11 20:31 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{C3700BEE-7484-4709-A19C-907E7BE2B1D6}
2015-02-11 18:51 - 2015-02-11 18:51 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{430CF071-D93C-4349-87D7-ED11164F1194}
2015-02-10 22:22 - 2015-02-10 22:22 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{5F512B02-F202-4B24-BA22-4C7EAA6E154E}
2015-02-10 22:22 - 2015-02-10 22:22 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{36F65815-7AB4-4738-A641-B867B5F94D83}
2015-02-10 20:01 - 2015-02-10 20:01 - 00000197 _____ () C:\Windows\system32\2015-02-10-19-01-09.009-AvastVBoxSVC.exe-6120.log
2015-02-10 15:43 - 2015-02-10 15:43 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{0516F2C0-2A74-4E15-AA03-6E6368935A98}
2015-02-10 08:44 - 2015-02-10 08:44 - 00000197 _____ () C:\Windows\system32\2015-02-10-07-44-22.022-AvastVBoxSVC.exe-2964.log
2015-02-09 21:26 - 2015-02-09 21:26 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{CA351061-517E-4504-B970-B3E92AB102D2}
2015-02-09 20:55 - 2015-02-09 20:55 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{D3741EB2-3970-45AF-8B52-C9CA1704DCB0}
2015-02-09 20:49 - 2015-02-09 20:49 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{1BD89475-1236-4F25-900C-2D443425A785}
2015-02-09 20:46 - 2015-02-09 20:46 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{AC5AD703-2C89-4DC5-BD1B-7334F22F57D8}
2015-02-09 20:44 - 2015-02-09 20:44 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{8B1C3F47-331F-441D-9C3C-63EFC5AE9E0D}
2015-02-08 23:01 - 2015-02-08 23:01 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{086C43D3-7F4F-422C-A28D-04B840C7AA83}
2015-02-08 11:00 - 2015-02-08 11:01 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{50A63009-ED1E-4643-998A-EBEF6D96E342}
2015-02-07 21:09 - 2015-02-07 21:10 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{36FBDB0D-A402-49F8-BDA2-B027F305E52E}
2015-02-06 21:06 - 2015-02-06 21:06 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{C9C11C7A-7EFC-4ECB-9699-58E016F62F8F}
2015-02-06 00:42 - 2015-02-06 00:43 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{822534D9-5C2B-4476-B5E3-52CD5DF886E0}
2015-02-05 12:41 - 2015-02-05 12:41 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{FDD34A1A-0CF0-473C-A306-197E6EFC8602}
2015-02-04 22:27 - 2015-02-04 22:28 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{720BF5AD-4A54-4599-9997-198B8795F7FD}
2015-02-04 10:27 - 2015-02-04 10:27 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{E7BB0691-5AA4-4CDB-A05E-8B4F7646EA0A}
2015-02-03 22:10 - 2015-02-03 22:11 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{BD684F0C-B9CE-4ECD-B8DC-3951F6B0E540}
2015-02-03 10:09 - 2015-02-03 10:09 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{13F69959-D8C5-48DF-B162-F6F3DD0BBCA9}
2015-02-02 11:12 - 2015-02-02 11:12 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{2F39C7B7-E4BD-4890-BE70-C320F95A1067}
2015-02-01 23:11 - 2015-02-01 23:11 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{77979A1D-88BC-4BBE-9CE8-C3165F2888B4}
2015-02-01 22:53 - 2015-02-01 22:53 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{E0E7FBAF-7EE6-4E0E-BBB1-1F19A3143D95}
2015-02-01 10:30 - 2015-02-01 10:30 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{CB4780C0-59AF-4B8A-A635-2A2B8572AFF7}
2015-01-31 22:11 - 2015-01-31 22:11 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{608716B3-6391-4D43-A856-287C0E87D517}
2015-01-31 10:10 - 2015-01-31 10:10 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{1425479D-8D46-43F9-802A-E584C2FDDB96}
2015-01-30 19:27 - 2015-01-30 19:27 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{3DF538BF-FACF-4FA8-B348-BF0BECDD0D38}
2015-01-30 13:43 - 2015-01-30 13:44 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{55E0B803-50E7-463E-944A-4E7D2683418D}
2015-01-29 11:50 - 2015-01-29 11:50 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{8D8069B0-F420-4EFF-9CD2-7F42A43F8B01}
2015-01-28 23:06 - 2015-01-28 23:06 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{CD7F2887-A784-472B-808A-B130815B7501}
2015-01-28 11:03 - 2015-01-28 11:03 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{60EA37EB-B1C5-438C-9D03-057C551FD38C}
2015-01-28 07:53 - 2015-01-28 07:53 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{401C321B-E3B9-4FF5-B0D4-A3F6C0A733E9}
2015-01-27 18:56 - 2015-01-27 18:56 - 00000197 _____ () C:\Windows\system32\2015-01-27-17-56-14.085-AvastVBoxSVC.exe-5688.log
2015-01-27 16:04 - 2015-01-27 16:04 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{F0DFEDA7-D73D-4290-8C93-D6EFF06A6D27}
2015-01-26 20:18 - 2015-01-26 20:18 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{E1FC018D-038C-4195-8691-7325238D9A29}
2015-01-25 16:52 - 2015-01-25 16:52 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{14054033-6261-49A7-8338-2C27387C627C}
2015-01-25 16:48 - 2015-01-25 16:48 - 00000197 _____ () C:\Windows\system32\2015-01-25-15-48-00.037-AvastVBoxSVC.exe-5760.log
2015-01-24 23:57 - 2015-01-24 23:57 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{13F98CFC-7454-4EF7-807C-628E4261D90D}
2015-01-24 22:52 - 2015-01-24 22:52 - 00000197 _____ () C:\Windows\system32\2015-01-24-21-52-46.095-AvastVBoxSVC.exe-3428.log
2015-01-24 17:56 - 2015-01-24 17:56 - 00000197 _____ () C:\Windows\system32\2015-01-24-16-56-04.066-AvastVBoxSVC.exe-5008.log
2015-01-24 09:31 - 2015-01-24 09:31 - 00000000 ____D () C:\Users\theamzw\AppData\Local\{E1ED6ABE-CB06-4002-A02F-69E67CF9664A}
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-23 20:03 - 2012-12-15 12:51 - 00000000 ____D () C:\Users\theamzw
2015-02-23 20:00 - 2009-07-14 05:45 - 00024912 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-23 20:00 - 2009-07-14 05:45 - 00024912 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-23 19:57 - 2012-12-15 12:45 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-23 19:50 - 2012-12-15 12:15 - 01721799 _____ () C:\Windows\WindowsUpdate.log
2015-02-23 19:46 - 2014-05-08 08:11 - 00000000 ____D () C:\Users\theamzw\Documents\Youcam
2015-02-23 19:43 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-23 19:43 - 2009-07-14 05:51 - 00181993 _____ () C:\Windows\setupact.log
2015-02-23 19:42 - 2010-11-21 04:47 - 00253442 _____ () C:\Windows\PFRO.log
2015-02-23 19:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\IME
2015-02-23 19:13 - 2013-03-13 10:34 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-23 18:40 - 2012-12-23 18:37 - 00000000 ____D () C:\Program Files (x86)\Amazon
2015-02-23 09:52 - 2014-10-20 08:28 - 00173568 ___SH () C:\Users\theamzw\Documents\Thumbs.db
2015-02-22 21:53 - 2014-08-19 09:21 - 00000370 _____ () C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - theamzw).job
2015-02-22 10:48 - 2014-08-18 19:13 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2015-02-21 07:32 - 2012-12-15 12:45 - 00002179 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-17 13:56 - 2013-03-10 12:20 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-02-16 23:26 - 2009-07-14 05:45 - 00366888 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-16 23:23 - 2014-12-11 11:34 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-16 23:23 - 2014-05-07 08:19 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-16 23:15 - 2013-08-15 19:13 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-16 23:00 - 2011-07-18 21:31 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-16 22:57 - 2014-08-18 19:13 - 00000496 _____ () C:\Windows\Tasks\DriverUpdate Scan.job
2015-02-10 19:54 - 2012-12-15 12:55 - 00000000 ____D () C:\Users\theamzw\AppData\Roaming\SoftGrid Client
2015-02-04 19:52 - 2012-12-15 12:45 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 19:52 - 2012-12-15 12:45 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-04 19:52 - 2012-12-15 12:45 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-04 19:51 - 2013-03-13 10:34 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-04 19:51 - 2013-03-13 10:34 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-04 19:51 - 2011-12-01 22:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-29 20:40 - 2013-03-10 12:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-01-29 20:34 - 2012-12-15 12:52 - 00093224 _____ () C:\Users\theamzw\AppData\Local\GDIPFONTCACHEV1.DAT
==================== Files in the root of some directories =======
2014-02-15 11:22 - 2014-03-27 21:13 - 0000069 _____ () C:\Users\theamzw\AppData\Roaming\WB.CFG
2013-04-06 12:19 - 2013-04-06 12:19 - 0003584 _____ () C:\Users\theamzw\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-01-08 09:39 - 2013-01-08 09:39 - 0017408 _____ () C:\Users\theamzw\AppData\Local\WebpageIcons.db
Some content of TEMP:
====================
C:\Users\theamzw\AppData\Local\Temp\APNSetup.exe
C:\Users\theamzw\AppData\Local\Temp\APNStub.exe
C:\Users\theamzw\AppData\Local\Temp\BrokerMediumIntegrity.exe
C:\Users\theamzw\AppData\Local\Temp\COMAP.EXE
C:\Users\theamzw\AppData\Local\Temp\DealPlyUpdateVer.exe
C:\Users\theamzw\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp6dnktd.dll
C:\Users\theamzw\AppData\Local\Temp\GenericUninstall.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\MSETUP4.EXE
C:\Users\theamzw\AppData\Local\Temp\Quarantine.exe
C:\Users\theamzw\AppData\Local\Temp\scp791.tmp.exe
C:\Users\theamzw\AppData\Local\Temp\SlimCleanerPlus.x64.exe
C:\Users\theamzw\AppData\Local\Temp\sqlite3.dll
C:\Users\theamzw\AppData\Local\Temp\WSSetup.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-01-18 20:49
==================== End Of Log ============================
FRST Additions(FRST habe ich ja einmal vor Defogger und einmal danach ausgeführt, habe aber jeweils nur eine Datei dazu, hoffe, das macht nix) Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-02-2015
Ran by theamzw at 2015-02-23 19:59:21
Running from C:\Users\theamzw\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
3D RealityMaps Viewer 1.6.8.0 (HKLM-x32\...\AlpenOnlineViewer_is1) (Version: 1.6.8.0 - 3D RealityMaps GmbH)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Amazon 1Button App (x32 Version: 1.0.6 - Amazon) Hidden
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
AMI VR-pulse OS Switcher (HKLM\...\{EC1369CF-15BD-4FAF-BA84-65E4788C682E}) (Version: 1.1 - American Megatrends Inc.)
Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.0.2208 - AVAST Software)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG5400 series Benutzerregistrierung (HKLM-x32\...\Canon MG5400 series Benutzerregistrierung) (Version: - Canon Inc.)
Canon MG5400 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5400_series) (Version: 1.00 - Canon Inc.)
Canon MG5400 series On-screen Manual (HKLM-x32\...\Canon MG5400 series On-screen Manual) (Version: 7.5.0 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.0 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.0.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.0.0 - Canon Inc.)
Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation)
Corel Graphics - Windows Shell Extension (HKLM-x32\...\_{B6BFCD02-BA0E-41A9-9C9C-6624C4BB475F}) (Version: 15.2.0.686 - Corel Corporation)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Common (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Connect (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Custom Data (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - DE (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Draw (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - EN (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - ES (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Extra Content (HKLM-x32\...\_{5A10CFDA-FA2B-453C-B561-AE864E62EAC8}) (Version: - Corel Corporation)
CorelDRAW Essentials X5 - Extra Content (x32 Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Filters (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - FR (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - IPM (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - IT (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - PHOTO-PAINT (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Redist (x32 Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Setup Files (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - WT (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 (HKLM-x32\...\_{EDBEBF07-F880-48FB-9AA5-0E8E71E02D83}) (Version: 15.2.0.686 - Corel Corporation)
CorelDRAW Essentials X5 (x32 Version: 15.3 - Corel Corporation) Hidden
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3624 - CyberLink Corp.)
CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1508_36229 - CyberLink Corp.)
CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.1.2414a - CyberLink Corp.)
CyberLink PhotoDirector 2011 (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.2430 - CyberLink Corp.)
CyberLink PhotoNow (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.7717 - CyberLink Corp.)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 7.0.0.1327 - CyberLink Corp.)
CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 9.0.0.3621 - CyberLink Corp.)
CyberLink PowerDirector (Version: 9.0.0.3621 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.3622.02 - CyberLink Corp.)
CyberLink PowerDVD Copy (HKLM-x32\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.)
CyberLink WaveEditor (HKLM-x32\...\InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 1.0.1.3320 - CyberLink Corp.)
CyberLink YouCam 5 (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.1402 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.11 - Dolby Laboratories Inc)
DriverUpdate (HKLM-x32\...\{575EFF33-FD08-49C6-ADD1-6FE9C849853E}) (Version: 2.2.40266 - SlimWare Utilities, Inc.)
Dropbox (HKU\S-1-5-21-4164022602-3369482870-266661612-1000\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.115 - Google Inc.)
Google Drive (HKLM-x32\...\{65EACBB4-B0B8-4A5B-AE46-22DBE15C70B5}) (Version: 1.19.8406.6504 - Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.4.1441 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (HKLM\...\{37EC048A-81A2-452A-8D1F-3BE2018E767D}) (Version: 15.1.0.0096 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{520C4DD4-2BC7-409B-BA48-E1A4F832662D}) (Version: 2.1.0.0140 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{4E4282C3-F66E-4852-837A-7675527178C2}) (Version: 3.1.26.0 - Intel Corporation)
Intel(R) Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version: - )
Intel® PROSet/Wireless WiFi Software (HKLM\...\{54EB8041-1115-4406-AA4B-44D236E84B3B}) (Version: 15.01.1000.0927 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
JavaScript Tools (HKLM-x32\...\HSJS) (Version: - )
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (HKLM-x32\...\{CA227A9D-09BE-4BFB-9764-48FED2DA5454}) (Version: 15.4.5722.2 - Microsoft Corporation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Medion Home Cinema (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.3216 - CyberLink Corp.)
Medion Home Cinema (x32 Version: 8.0.3216 - CyberLink Corp.) Hidden
Memeo Instant Backup (HKLM-x32\...\{8E666407-AC41-46a2-9692-6C7BFCBFDD37}) (Version: 4.60.0.7943 - Memeo Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Mathematics (64-Bit) (HKLM\...\{E57B7E0A-8BE5-42E2-BE60-C07ED680A063}) (Version: 4.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
PCSUITE SHREDDER (HKLM-x32\...\PCSUITE_SHREDDER_PRO_is1) (Version: - Markement GmbH)
PHotkey (HKLM-x32\...\{E50C224A-BBF2-428D-9DCF-DBF9DF85C40E}) (Version: 1.00.0059 - Pegatron Corporation)
Photo Transport (HKLM-x32\...\{CDC7F188-3A08-45C3-8C3C-99BE32911949}) (Version: 1.0.2 - CASIO COMPUTER CO., LTD.)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6586 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30127 - Realtek Semiconductor Corp.)
Sausage Software Common Files Package (HKLM-x32\...\HSCF) (Version: - )
Softwarenetz Terminkalender3 (HKLM-x32\...\Terminkalender3) (Version: - Softwarenetz)
Spelling Dictionaries Support For Adobe Reader X (HKLM-x32\...\{AC76BA86-7AD7-5464-3428-A00000000004}) (Version: 10.0.0 - Adobe Systems Incorporated)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.45.0 - Synaptics Incorporated)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (HKLM-x32\...\{57220148-3B2B-412A-A2E0-82B9DF423696}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (HKLM-x32\...\{6E29C4F7-C2C2-4B18-A15C-E09B92065F15}) (Version: 15.4.5722.2 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-4164022602-3369482870-266661612-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\theamzw\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4164022602-3369482870-266661612-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\theamzw\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4164022602-3369482870-266661612-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\theamzw\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4164022602-3369482870-266661612-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\theamzw\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
==================== Restore Points =========================
09-11-2014 22:11:01 Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi wird entfernt
09-11-2014 22:12:22 Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις wird entfernt
09-11-2014 22:14:23 Removed watchmi.
14-11-2014 10:54:40 Windows Update
19-11-2014 03:51:04 Windows Update
21-11-2014 22:41:39 avast! antivirus system restore point
11-12-2014 10:19:40 Windows Update
14-12-2014 20:16:38 Windows Update
20-12-2014 22:41:11 Windows Update
21-12-2014 12:07:14 avast! antivirus system restore point
21-12-2014 21:13:08 Removed Java 7 Update 17 (64-bit)
21-12-2014 21:17:30 Removed Java 7 Update 60
17-01-2015 16:03:47 Windows Update
16-02-2015 22:57:38 Windows Update
22-02-2015 10:23:01 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {08F0C117-B37C-4054-8048-1EB079ABEFE5} - System32\Tasks\{3298D62D-D3F5-41E3-B07A-628572698D3A} => pcalua.exe -a C:\Users\theamzw\Downloads\sweetim_21780.exe -d C:\Users\theamzw\Downloads
Task: {21F1003A-CCA4-4D28-BC97-EB6E74A43D9B} - System32\Tasks\{C046F80E-B7EA-4A28-85B1-0A690C4AC160} => C:\Program Files (x86)\Windows Live\Mail\wlmail.exe [2011-05-14] (Microsoft Corporation)
Task: {3314F724-5BFC-487E-A5D2-CD5294482EFF} - System32\Tasks\DriverUpdate Scan => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe [2014-08-05] (SlimWare Utilities, Inc.)
Task: {445F6706-8262-4421-97EC-BE7FB35F862A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)
Task: {5BFF459A-98CD-4B7A-93F7-E3EE49065CA2} - System32\Tasks\SlimCleaner Plus (Scheduled Scan - theamzw) => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
Task: {5BFF8D94-CA16-4D81-A266-092AF78BA2C8} - System32\Tasks\{0E7DB0BD-1FCD-4845-9ED0-2B4BCF7F14F5} => pcalua.exe -a C:\Users\theamzw\Downloads\termin3.exe -d C:\Users\theamzw\Downloads
Task: {629E23AB-8505-4348-B2A5-EEE5DDA19435} - System32\Tasks\{769B898F-0DA0-42B3-8BBE-D10458DD20B7} => C:\Program Files (x86)\Windows Live\Mail\wlmail.exe [2011-05-14] (Microsoft Corporation)
Task: {78667352-E154-4C5D-B1E8-C465F082D1CD} - System32\Tasks\{2A1A32F6-0108-46B9-B02F-5804C14BF844} => C:\Program Files (x86)\Windows Live\Mail\wlmail.exe [2011-05-14] (Microsoft Corporation)
Task: {87C2A86F-631B-4738-B5F9-A1BC948BC090} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-11-21] (AVAST Software)
Task: {8DB94DB5-1934-484F-AE1D-395DDFA10C35} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2012-02-02] (CyberLink Corp.)
Task: {9F2D2D31-A14B-4BE7-B7FD-BBFEE3235D21} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-25] (Google Inc.)
Task: {B2851D00-21FA-4BBC-9CD1-EF0B9A983389} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {CD255716-34D3-4219-8E0F-48629CDA4287} - System32\Tasks\{13DB5985-56DD-4C05-A2D7-62E96DD0511D} => C:\Program Files (x86)\Windows Live\Mail\wlmail.exe [2011-05-14] (Microsoft Corporation)
Task: {D47B5945-6D90-4DF1-9F8F-7C8198416A29} - System32\Tasks\avastBCLRestartS-1-5-21-4164022602-3369482870-266661612-1000 => Chrome.exe
Task: {E1AEFCA3-B68D-4566-9475-7C2D032D52C5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-25] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DriverUpdate Scan.job => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - theamzw).job => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
==================== Loaded Modules (whitelisted) ==============
2012-04-11 10:57 - 2009-12-18 23:40 - 00104968 _____ () C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
2012-04-11 10:57 - 2011-10-13 22:38 - 00156672 _____ () C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
2012-04-11 10:57 - 2012-03-27 22:19 - 00826880 _____ () C:\Program Files (x86)\PHotkey\PHotkey.exe
2012-04-11 10:57 - 2010-01-13 01:36 - 00117256 _____ () C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
2012-04-11 10:57 - 2010-01-13 01:36 - 00121864 _____ () C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
2012-04-11 06:19 - 2010-08-19 17:43 - 00386344 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2012-04-11 10:57 - 2010-12-17 22:04 - 00449032 _____ () C:\Program Files (x86)\PHotkey\ATouch64.exe
2012-04-11 10:57 - 2012-01-13 01:58 - 00552960 _____ () C:\Program Files (x86)\PHotkey\PVDesktop.exe
2012-04-11 10:57 - 2012-01-13 01:58 - 00477696 _____ () C:\Program Files (x86)\PHotkey\PVDAgent.exe
2012-04-11 10:57 - 2012-02-24 22:13 - 03458560 _____ () C:\Program Files (x86)\PHotkey\POSD.exe
2014-11-21 22:46 - 2014-11-21 22:46 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2014-11-21 22:46 - 2014-11-21 22:46 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2012-04-11 08:57 - 2012-03-27 01:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2015-02-23 18:47 - 2015-02-23 18:47 - 02911232 _____ () C:\Program Files\AVAST Software\Avast\defs\15022301\algo.dll
2014-11-21 22:46 - 2014-11-21 22:46 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll
2012-04-11 10:57 - 2009-12-18 23:36 - 00973432 _____ () C:\Program Files (x86)\PHotkey\acAuth.dll
2012-04-11 10:57 - 2009-12-18 23:41 - 00129544 _____ () C:\Program Files (x86)\PHotkey\GFNEX.dll
2010-08-03 23:39 - 2010-08-03 23:39 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2010-08-03 23:39 - 2010-08-03 23:39 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2014-11-21 22:46 - 2014-11-21 22:46 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-10-18 22:09 - 2014-10-18 22:09 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\92a1650dbe9fad5f46633b835420e1a8\IsdiInterop.ni.dll
2012-04-11 09:39 - 2011-11-30 04:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-04-11 09:31 - 2012-03-06 14:27 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\theamzw\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-4164022602-3369482870-266661612-500 - Administrator - Disabled)
Gast (S-1-5-21-4164022602-3369482870-266661612-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4164022602-3369482870-266661612-1002 - Limited - Enabled)
theamzw (S-1-5-21-4164022602-3369482870-266661612-1000 - Administrator - Enabled) => C:\Users\theamzw
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/23/2015 07:44:29 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
Error: (02/22/2015 10:43:56 AM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
Error: (02/21/2015 07:27:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_p2pimsvc, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000053290
ID des fehlerhaften Prozesses: 0x1474
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_p2pimsvc0
Pfad der fehlerhaften Anwendung: svchost.exe_p2pimsvc1
Pfad des fehlerhaften Moduls: svchost.exe_p2pimsvc2
Berichtskennung: svchost.exe_p2pimsvc3
Error: (02/17/2015 07:47:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DriverUpdate.exe, Version: 2.2.40266.20784, Zeitstempel: 0x53e12049
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002d225
ID des fehlerhaften Prozesses: 0x120c
Startzeit der fehlerhaften Anwendung: 0xDriverUpdate.exe0
Pfad der fehlerhaften Anwendung: DriverUpdate.exe1
Pfad des fehlerhaften Moduls: DriverUpdate.exe2
Berichtskennung: DriverUpdate.exe3
Error: (02/16/2015 11:26:58 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
Error: (02/14/2015 11:33:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DriverUpdate.exe, Version: 2.2.40266.20784, Zeitstempel: 0x53e12049
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x96c
Startzeit der fehlerhaften Anwendung: 0xDriverUpdate.exe0
Pfad der fehlerhaften Anwendung: DriverUpdate.exe1
Pfad des fehlerhaften Moduls: DriverUpdate.exe2
Berichtskennung: DriverUpdate.exe3
Error: (02/10/2015 07:54:40 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.
Vorgang:
Für die Sicherung initialisieren
Error: (02/10/2015 07:54:40 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.
Vorgang:
Für die Sicherung initialisieren
Error: (02/04/2015 10:25:23 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DriverUpdate.exe, Version: 2.2.40266.20784, Zeitstempel: 0x53e12049
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002d225
ID des fehlerhaften Prozesses: 0x1cac
Startzeit der fehlerhaften Anwendung: 0xDriverUpdate.exe0
Pfad der fehlerhaften Anwendung: DriverUpdate.exe1
Pfad des fehlerhaften Moduls: DriverUpdate.exe2
Berichtskennung: DriverUpdate.exe3
Error: (01/29/2015 09:29:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DriverUpdate.exe, Version: 2.2.40266.20784, Zeitstempel: 0x53e12049
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002d225
ID des fehlerhaften Prozesses: 0x978
Startzeit der fehlerhaften Anwendung: 0xDriverUpdate.exe0
Pfad der fehlerhaften Anwendung: DriverUpdate.exe1
Pfad des fehlerhaften Moduls: DriverUpdate.exe2
Berichtskennung: DriverUpdate.exe3
System errors:
=============
Error: (02/23/2015 07:42:35 PM) (Source: Application Popup) (EventID: 56) (User: )
Description: Treiber ACPI hat eine ungültige ID für das untergeordnete Gerät (1) zurückgegeben.
Error: (02/23/2015 06:44:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MemeoBackgroundService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (02/23/2015 06:44:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst MemeoBackgroundService erreicht.
Error: (02/23/2015 06:42:30 PM) (Source: Application Popup) (EventID: 56) (User: )
Description: Treiber ACPI hat eine ungültige ID für das untergeordnete Gerät (1) zurückgegeben.
Error: (02/23/2015 06:42:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel® Centrino® Wireless Bluetooth® + High Speed Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%109
Error: (02/23/2015 06:42:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Druckwarteschlange" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (02/23/2015 06:42:00 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "Spooler" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%50
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (02/23/2015 06:42:00 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\System32\IWMSSvc.dll
Error: (02/23/2015 06:42:00 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\System32\IWMSSvc.dll
Error: (02/23/2015 06:41:59 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\System32\IWMSSvc.dll
Microsoft Office Sessions:
=========================
Error: (02/23/2015 07:44:29 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
Error: (02/22/2015 10:43:56 AM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
Error: (02/21/2015 07:27:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: svchost.exe_p2pimsvc6.1.7600.163854a5bc3c1ntdll.dll6.1.7601.18247521eaf24c00000050000000000053290147401d04a3821fa2fbfC:\Windows\System32\svchost.exeC:\Windows\SYSTEM32\ntdll.dllb9a9d4e4-b992-11e4-bbee-685d438ce933
Error: (02/17/2015 07:47:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: DriverUpdate.exe2.2.40266.2078453e12049ole32.dll6.1.7601.175144ce7b96fc00000050002d225120c01d04a37fec8eb3aC:\Program Files (x86)\DriverUpdate\DriverUpdate.exeC:\Windows\syswow64\ole32.dll7cb87e0c-b6d5-11e4-bbee-685d438ce933
Error: (02/16/2015 11:26:58 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
Error: (02/14/2015 11:33:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: DriverUpdate.exe2.2.40266.2078453e12049unknown0.0.0.000000000c00000050000000096c01d0456364cae338C:\Program Files (x86)\DriverUpdate\DriverUpdate.exeunknown77bc73ba-b499-11e4-bb10-685d438ce933
Error: (02/10/2015 07:54:40 PM) (Source: VSS) (EventID: 8193) (User: )
Description: OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)0x8007045b, Der Computer wird heruntergefahren.
Vorgang:
Für die Sicherung initialisieren
Error: (02/10/2015 07:54:40 PM) (Source: VSS) (EventID: 8193) (User: )
Description: OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)0x8007045b, Der Computer wird heruntergefahren.
Vorgang:
Für die Sicherung initialisieren
Error: (02/04/2015 10:25:23 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: DriverUpdate.exe2.2.40266.2078453e12049ole32.dll6.1.7601.175144ce7b96fc00000050002d2251cac01d03f1e1a61483bC:\Program Files (x86)\DriverUpdate\DriverUpdate.exeC:\Windows\syswow64\ole32.dllbe85f20d-ac4f-11e4-9e1e-685d438ce933
Error: (01/29/2015 09:29:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: DriverUpdate.exe2.2.40266.2078453e12049ole32.dll6.1.7601.175144ce7b96fc00000050002d22597801d03a5a03bec268C:\Program Files (x86)\DriverUpdate\DriverUpdate.exeC:\Windows\syswow64\ole32.dllfceadaef-a790-11e4-9e1e-685d438ce933
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-2370M CPU @ 2.40GHz
Percentage of memory in use: 39%
Total physical RAM: 3990.83 MB
Available physical RAM: 2420.57 MB
Total Pagefile: 7979.85 MB
Available Pagefile: 6064.46 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (Boot) (Fixed) (Total:647.54 GB) (Free:531.66 GB) NTFS
Drive d: (Recover) (Fixed) (Total:50 GB) (Free:15.57 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=647.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=50 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
==================== End Of Log ============================
Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:03 on 23/02/2015 (theamzw)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Während des Durchlaufs bei Gmer öffnete sich plötzlich "DriverUpdate", was auch immer das ist, ich glaube nicht, dass es dazu gehörte, oder? Defogger ist weiterhin geöffnet und ich kann auf Disable oder Re-enable klicken, ist das so richtig? Ich hoffe, ihr könnt damit was anfangen und mir helfen, wahrscheinlich fehlt jetzt noch der ursprüngliche Avast Report. Auf jeden Fall schonmal vielen Dank! Gruß Lea EDIT: der Beitrag ist zu lang, ich werde, sobald ich eine Rückmeldung erhalte, den fehlenden Log von GMER posten. |
|
24.02.2015, 06:13
| #2 |
| /// the machine /// TB-Ausbilder    | Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe hi,
__________________Revo Uninstaller - Download - Filepony damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Dann: https://support.google.com/chrome/answer/3296214?hl=de Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
24.02.2015, 09:23
| #3 |
| | Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe Guten Morgen
__________________ Chrome habe ich wie beschrieben komplett gelöscht, neuinstalliert und die Einstellungen zurückgesetzt. Hier der JRT log(gesplittet): Code:
ATTFilter Version: 6.4.2 (02.02.2015:1)
OS: Windows 7 Home Premium x64
Ran by theamzw on 24.02.2015 at 8:53:41,03
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
~~~ Registry Keys
~~~ Files
Successfully deleted: [File] C:\Windows\Tasks\DriverUpdate Scan.job
Successfully deleted: [File] C:\Windows\Tasks\DriverUpdate Startup.job
Successfully deleted: [File] C:\Windows\prefetch\GOOGLETOOLBARNOTIFIER.EXE-7AE0A20E.pf
~~~ Folders
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0023C005-FF35-4C67-9EA2-98C3DC27FFA5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{006A1303-84CF-429D-8A45-4167C41EC895}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{006F3EAC-F271-41AC-8BC6-82AB76FAD40A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{00729F91-0445-4F5F-9594-09BB344640FB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{00759390-51BD-4442-9061-2632B508E814}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{007C3716-6148-4A9D-B0E1-354A8DE1C4ED}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{009A6557-E7FC-4316-AD3B-E588F41D0217}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{00B6B5A3-07E6-4ED6-A731-AACCEE91050E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{00FDFC06-1473-4C06-B1EB-DA9CF73B2814}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0160C92A-DA04-40A4-B115-D76665A19CAC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{017860E7-FED5-446A-B37D-24A5E942A90B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{017A10F8-FD8C-438F-ABE2-6DEEFAC8901C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{028CAF06-B900-4888-8703-B8AE3457A96A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{02AC8711-1BB2-4E74-B19E-0E64E5CCB1BF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{031B05D5-6EE9-4332-90EF-53E32844C1A2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0324B5B9-D28D-4CFA-9F96-C974E91F26D4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{03F71004-7B64-4CA6-8A2B-83992E4A61F0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0445E0EB-FEB2-4D48-82CD-88AC79C077CD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{04BF8215-293D-42F1-9F36-CD0114BB4A92}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{04F155C6-FA69-4716-AAEB-DFB10C00D2CB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0516F2C0-2A74-4E15-AA03-6E6368935A98}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{05657945-107D-4040-9056-A3B0722D9E16}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{05A5B648-4B53-47A2-BC71-CF69272AB973}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{05BD3AF5-BC77-4EF8-8F5D-BB11976EE2B8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{061D5B1D-4266-4F59-A0A8-E523E2550C3E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{063C97D3-93CF-4D45-8052-7B3D7F26D0CD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{06829C34-B0FA-4C4D-AF7A-1D2BF4CCBB7D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{06D00F3A-3B08-4F65-87F6-747B5BCA6CF9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0704385B-2306-46B4-9851-54DF7E80FB35}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{07DBB4C2-6F3F-488E-A1B1-8D9DAE811C02}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{08128D6A-3343-430E-973A-D1F11617FB35}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{085231AA-7B82-49E8-91E4-27FC45684673}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{086C43D3-7F4F-422C-A28D-04B840C7AA83}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{08B9A97A-C682-4781-BA87-53AE83F00F99}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{09029DFE-6581-4D3E-B87B-75B359EB2804}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0946ADF9-DF37-45B2-AF6F-D440F01312B1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{094BDA8D-BC2B-41FE-916A-BB61A2E0A6BC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0977E78C-34C3-4EF1-9DBC-573CE407DE81}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{09E01B2D-C8C3-4E34-B248-F6D06D4D382A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0A3FD307-EE1C-4E19-A411-10C4C906ACFE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0B2140AE-4137-47AC-BB0F-D62963F1E60D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0B2A18E3-1852-41B0-ABAB-8ED8AF2B28C7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0B46C70B-6986-468C-81BB-857958ABD5AE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0B59964E-B343-41FD-ACF9-76A93B668948}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0B70924E-9DEA-4B95-98FC-59A967EC4CD9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0B73F309-D7FF-4E3F-96BE-F86CB625BC24}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0B9CB0E1-7848-40F4-AFBA-ACFB6B76E2E4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0BAD452D-992C-4122-8886-3F003BA7BD6B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0BD56B54-63EC-47EB-ABF1-E38E92BF060A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0BF5CA73-AA71-47EA-9029-95A4F7FF2BDF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0BFE553A-8242-4F56-BE1B-C7BC86C83191}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0C6E01D4-FE08-4DFE-8C54-F5D3F8CB5156}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0C85BA0F-4395-4A7A-AB9A-D711B298DF1C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0CAC0B4C-3C05-498F-B0AE-725173921F01}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0CB502D8-B9FA-4032-A9A8-F8676F3132F9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0CC2CB23-CC14-4B12-B082-064B443568E7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0CD8E3FA-C4E5-4280-A171-4DEB6BB896E2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0D88C3A8-045C-493F-9EBD-AA6B2B83846C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0DB56E14-D0A0-4A6E-9983-A0C263947862}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0E29F2A2-BB22-4E08-9EBD-71B608B6A5DA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0E5CF3CF-6C92-4BDF-B19D-BDD5835C871E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0EBF270B-D1AF-4429-BBF9-7CB01E92A914}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0EC1B1B7-19A7-4A1F-87C0-415367AAA704}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0EF16BDB-4E64-446D-B0B6-C1446DDBF7A4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0F32007C-5FA0-4AC6-8BDA-D6D19DB0053D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0FB0529A-9141-436C-84B4-571DEA218714}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{0FD3D740-0A3A-4DF8-BC9A-BE314685DA82}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{108372AD-EE6E-4C55-AD0D-C7C7FC7AB299}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1084071E-57BD-4312-BEAE-BE83BF015C77}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{108DDD3D-6C42-41A3-B5F5-6593B0CB44B3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{10D9A100-A097-4592-BC31-312A07737A1B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{10DFE354-3413-47A7-894E-44A20DA216BB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1105DB78-3BAC-4206-94E2-84445EAFD33C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{111D83B0-D5EA-4DDE-810F-7EBA9ECE60F0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{112BB0F9-DD81-472B-97E3-672B43699E4D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{11474EE6-22F7-4ED7-B239-41B8BFC09096}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1173AC01-E08E-4765-91B8-8F377134868B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{11D2CAE3-5137-4482-A497-F16C6BF9FD78}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{12B85A8C-EEFD-4A4F-8184-DE19898E98F9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{131AEBD5-7040-4017-BA10-C2BBC032B171}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{13A91522-5742-46A7-8651-0D4988068C40}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{13F69959-D8C5-48DF-B162-F6F3DD0BBCA9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{13F98CFC-7454-4EF7-807C-628E4261D90D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{14041A4E-4B69-4FC8-8649-0A59C8F837DD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{14054033-6261-49A7-8338-2C27387C627C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1425479D-8D46-43F9-802A-E584C2FDDB96}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{142CD0D3-FA91-4955-8B9A-DEA70C3AC31D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{143C3098-5BF6-46EF-8B3D-BD7B78440E48}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{144454FE-1142-4B2B-A731-8A864480A024}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{146E430F-34FB-4FE7-84C5-90CAA5890F4E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{148D4465-427D-4C5F-8F93-490C5E2C4020}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{151A316F-C5C6-4E65-9445-D3E47C460E9E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{15454998-E177-4514-8E50-BC45A6913FE8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{15598CFF-3A24-4E25-9294-0FED16915152}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{15D04F01-FFAA-482E-A1C3-7B21D335F153}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{15F87EF2-CA4D-4DF9-BE07-F0A153DC7989}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{16274952-3EB3-4226-8111-0FFC45A85FD8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{16373AA4-FF9E-44AE-BC1B-3E5B23478F13}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{167E6F97-1C53-4512-80A1-E7AD2A6D147A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{16886399-6D15-4AFD-A693-77086BA3B411}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{169C7FE2-6059-46C9-87FA-CF867B10F7B2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{16ABD53C-8B46-485B-8D35-CE2486AEFFBD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1711E67F-9D6B-45DD-8FFF-FEAE25213B62}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1797AD17-1E78-48B3-8FA1-9A447FB30607}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{17EA873B-58F4-471D-980E-499983EE43AB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{186213CB-99DB-4315-8120-C482EA3B1071}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{18CBE133-F13B-4002-9DF6-39C64E77649C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{18D5F92B-DF87-4EE2-A888-050CF694F372}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{193ABB3C-FC13-4ED9-8E64-D1FCCEAC8191}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{196C967C-7B63-4A56-8162-AEA26E2C7052}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{19C637A0-E1EE-4823-92A5-346F919A39E5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{19E00332-2A1B-44CD-B1ED-CF7D97E2E874}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{19EB62DE-F663-497B-A993-71D4DC5597A8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1A91A538-86D4-4007-BB52-6CE87CBEF7B7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1B0F0653-EAA3-4A27-9392-D3DAC9F2069D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1B16657A-19F5-4183-B5B8-727E028D22A5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1B897616-A3A1-4E44-911B-F3092D85A42B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1BA7103B-A763-47FB-9B55-05CB4CD98070}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1BD89475-1236-4F25-900C-2D443425A785}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1C7C3F17-F388-4629-8906-EAC875A28FB0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1CF536F6-22C6-45F2-A687-27CB225AD88E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1DEB0CA6-4B05-48B0-A68F-3F8BF8275253}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1E041DE8-FB47-4320-AE46-7602E532A78F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1E355219-E3F2-495A-AEED-4C1AFBB80FED}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1E3D43C4-0046-432A-A53C-F63EF15EF3EC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1E73EAF1-E878-4414-9DF9-256808A13E7B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1E772957-1094-49C6-906D-26B4C876877B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1EBD09C9-F0E8-4CCE-9BD0-611070095E37}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1EC1CEEC-B66E-46A9-A1C8-37A7AAA0AB41}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1ED068E7-8304-49A3-9701-0C78C809E7D5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1EEEA9F0-8EFB-401D-BD96-238D9A497CA0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1F05D22F-96A7-476A-A4F6-CBBDE8D11E09}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1FBF492D-8FF5-40BA-AF53-0324674A5B55}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1FC48929-58A7-472B-8A8B-1EEDC0D58D53}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{1FCEDD23-D735-49B5-B789-6CEBC04B8CA2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{200AAB6C-A705-4264-B614-A9374E9EB4B2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2103A030-7917-4E8A-9B57-6C1909853270}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{21065273-A1DD-4C56-B5E0-ED7352EC2FD5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{21122FF4-7716-4BC8-B8CF-81B93A7CED0A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{213D06F3-3FED-4212-8CAD-54DD7C263C13}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{214D3C6F-4B29-4055-AB1B-77C5028125EC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{215CB715-1FF5-4997-A65C-DBAB7946D88A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{21C77E2B-FCBD-4BE0-9A45-47B387E84780}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{21EE606C-231A-433E-AF3A-E1E6581AD4D5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2217A79B-F696-4BAB-B4AC-CD047986D95A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{223AE29E-7B18-4C9E-B701-129FC1131838}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{228F03DA-FA9D-4255-9E36-D6106966CA8D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{22969B48-9146-48C0-9578-D25B67039FFF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{23388807-CD03-4B01-AB87-6425486EEC97}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{235DA75C-2EA5-4F8A-A87C-7BEA212A7D50}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{23A424CF-4945-47F9-97AE-274B3FE7EFA5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{23B06B85-A0A0-4053-9F26-42FD438C85BD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{23BB945E-3ECE-43D5-A55C-910876712EF0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{23DA5BFD-133A-481A-8C2D-1A7DA71622CC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{23F74366-B1F1-46BC-ADE0-4D7406C6D8C1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{24371159-E11E-4471-B103-99947DB853FB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2441491C-F464-40CF-9946-0A877D5D811B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{246074C9-82BE-48EE-93F1-5658DA255714}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{248B940D-23A5-4C88-8D5A-C20980BEF387}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{24CFDFB3-BFFB-4E69-8001-D7C76BEDB547}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{257EC555-909C-4B50-8F12-5B0AB1AC45D5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{25A63D95-D570-4514-BDDF-E2B82BF98F48}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{26103E05-DD38-46A9-89E9-F953DA69D612}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{26E77451-3BB6-4FEC-9CAE-67B2DAF64F43}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{27728176-AA0D-4B3A-8079-A9917F8AD63E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{27823D42-67CB-4CC0-82DB-186502DA91BF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{27CA8E4F-8DC1-4743-971F-D30A4D3C8349}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{27D2E863-26CC-4B12-8CF6-CCDF2077B102}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{27E28E2C-ED9C-4584-8A98-17183B2129BE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{286F2961-CA33-4010-92C3-73873E778861}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2870F9F4-15E2-4759-AADC-319D0F73E691}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{28D92FDE-03B7-484C-A4B2-AA014C7D4EAC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{29129712-41CA-48B2-8A62-EBDE909E1EC2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{293D3C25-3D35-48A2-8A7A-AB41A23E3119}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2969DC74-F5D6-4DAC-BB9F-FC6BFA403BFF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{29B01912-8E6C-40E2-8F17-77FC77704644}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{29D09AA7-23F8-4F60-A61F-1373593175CD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{29DCF388-60D4-4A64-87A6-C8828CF59D93}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2A131CC9-6A36-453B-8FD1-DD0EAF5A8513}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2AAAF585-7F73-4A9C-B642-BE4F5AACBAD7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2AB21D10-5859-4705-9B02-729FC0D839B5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2ACDADB2-9DF6-43B9-88F2-833B1F067252}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2B17187E-9800-4C79-9E54-C4FE99D5FEB7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2B1CCED2-36D7-4851-B85C-E5C5A9E16DBD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2B3F008F-F6DA-41D5-8ACD-E974A46246F0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2B576D1F-34CF-460A-AD69-7794C3637CCC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2BA1CC0F-0253-490E-A518-6C1D7ADBEBF6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2BBB6974-8FB7-4079-AF04-58B15A74CA38}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2BBD285C-E585-49E1-8C23-3B40C561BBA1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2C74E151-D473-4AA8-8394-4A6BBE1674C2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2CC815E3-B4D2-4695-9328-1201DB19DCE4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2D4BCC16-FE5B-40A3-919F-A79770FD8E49}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2D824234-C011-40CE-B9FF-A0DA3237EC54}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2D9B32D1-6549-45EA-B83C-CD7756BE37D4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2DAB0D1B-8712-43AD-8929-435FA9FB190C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2DAD38CC-A783-4A48-9E5C-89A713153CCB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2DC494D4-79E6-4F36-BCEB-F66E1B6AE2C2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2DED0FBE-863C-435A-9DDE-F0FC31EA6CCD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2E0CD571-E415-4140-8C74-1E8AD5AC1857}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2E0FCAB5-B7BE-418A-91E1-C3BB4034BED5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2E1F3CDD-68A6-4BA0-871F-8BFEBCDC8783}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2E4AC780-E153-4BF3-BD2A-BE42DFC7A417}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2E4F3904-2EF5-44EA-A472-7D523F40647A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2E589D7C-E186-4EDB-8F6B-C3C5CF7E7D8E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2E91914C-020B-4C37-8FDF-7E8E957E314A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2F34F4E8-79D1-438C-BFF9-41A2358475B4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2F39C7B7-E4BD-4890-BE70-C320F95A1067}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{2FD81734-1D96-482D-BBEB-D71997B1C8D1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{302DFE84-FA4C-4AB2-8EE0-EF0DFC9BC653}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3030B299-B81B-41C6-BC18-15F7108811D6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{304DEB41-8CF3-439F-9DE5-10B25E21E651}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{306619CB-47D2-4C74-9EC4-983A158B8EDB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{30DD82BC-82B8-47EE-9C57-25DE1B110509}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3114F547-0831-436E-B41A-5C9B42AA0771}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{316FBA80-A104-4CF7-8890-56E4213A3CF8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3173D493-CBB3-4F3F-BD26-835AF1B309F5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{318B04B0-0808-4146-95BD-FBF759FE7360}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{31980FB8-29A4-4218-9EB1-208B803A6DFC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{31A1656B-5D49-41C7-9637-329CC41E12FF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{31D10683-7A85-4BDE-A0A1-D99D7F3F6D07}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{321C5BF7-1531-479E-8B19-07FEA202E2A5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{32E7653F-FE85-4279-9E9B-AB6FDF64813F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{333969FF-B8C4-4668-88D0-F16F53802C13}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3348991F-72DE-4E4C-82B7-AA1858B37288}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3382E9E3-0678-4EBD-9636-35674395260A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{33B552B5-2070-4CA0-AAB5-A196680F9C8C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3403F6DC-4855-4AEB-B305-3B2CF87A31A6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{340F80E3-D12F-4BFC-AF6A-C8F3DE2FE512}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{345B9DDC-8498-4030-9B63-73EF5C433DF1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{345D382C-AE89-4E22-A8F5-96ECFE8B3ECB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{348C33EE-DB80-4E94-8B36-70B46F843638}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{349EE032-6110-4B87-BFEB-5A92949E8CEA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{34AEE0F8-0C32-4BD9-94B0-8C9D8CF82F09}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{350250A2-5CC3-4C9E-8DE2-763E5BF49EF6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{350E74DC-6275-478D-98BD-FF4F304D23F1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3554C056-1448-41E4-BC27-E4D4BE02977A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{356A9373-6C0C-4286-99B9-AD5AE44AB100}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3585B6A4-4AF1-48E0-8201-5F346700ECDA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{35894A2A-F0F9-492C-A803-94A28866C91F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{361459F5-422B-49BF-B7AD-178EA5CF8C93}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{36AC3161-FADA-4953-BC1F-045F932AD7A8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{36F65815-7AB4-4738-A641-B867B5F94D83}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{36FBDB0D-A402-49F8-BDA2-B027F305E52E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{370B2390-32D2-497F-B300-75E0EB40AF42}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{37115C5F-0430-4200-A280-ED06D40718F9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{37260B7F-D4B7-4869-814F-41936685A212}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{37702042-422D-4656-A924-CC37579BEB36}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{37750820-86C2-4AED-956E-2D50C9E8BEEA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{378BF214-F63B-4A49-BBCE-6000B6F59487}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3807D804-67DF-4B0F-BE42-208D7EDA990D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{382F63B2-CF92-489F-BF0F-2DEDBC588641}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{38BF3DD7-CCB6-48AE-A8DA-F5DFFD33D593}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{391AA554-A338-4AEE-9234-BEA67DEBDC08}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{393A4EB9-93A9-44FD-8DF4-AD38AB4073A0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{395B3419-0818-4732-B404-BCB0E4A1BC82}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{39861154-9F5D-4CB1-97E4-F7DBF53967AB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{39DE8ED6-3561-45EA-A7B3-D8685947D86D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3A1C67C4-109A-4BC2-90EF-AB93BA71DE2A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3A453C67-DEC5-496A-B828-9EEB12D0EC2C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3A492412-3E68-4D7E-A2B4-A498C397960C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3A798280-A1AB-429D-A177-2D9BC624F460}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3A8A7ADE-E400-406F-966E-31253B61531E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3B1CD004-D2E1-4C0B-A465-979334C4D5E7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3B228502-02DF-414E-AE54-C33E05B9183D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3B84FF62-7025-4055-A32A-1A7246358E71}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3BEBAE4E-05AF-4B6D-AA06-BFF396E1AC4B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3C220EDA-3A10-448C-A583-2FCE0DEEA08F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3C63C230-BDF5-4943-B679-FCBFCEAD03A0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3C676EF7-E793-4246-A08F-69470E912CE4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3C89FFF1-836A-45D8-B916-FE0BEEF7E3E0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3C94FB62-0D07-4BE7-98EB-BB4584AF621E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3CAA5319-EFE2-4EC1-A7DA-FCCA59C96FB9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3D38A04D-2865-429B-ACD5-45AF2CADD596}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3D3AB0E9-54E0-4F43-BA74-5F55A6A6F8AD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3DF538BF-FACF-4FA8-B348-BF0BECDD0D38}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3E552FFC-5EA3-4CB2-9188-6651FFF04CE3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3ED3AEFB-41DC-4EA2-8853-A1FDFD97179F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3F04BC1F-3A4A-4CA9-809B-599AE9E44C1C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3F29DB89-434D-4141-BE3B-6F012A5AB67E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3F582A71-7294-4146-B55A-4694253AEC7A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3F8AD795-B94F-4524-A079-7BC353277A12}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{3FB0E8B0-9585-4EB6-87F6-02B90CEBCABB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{401C321B-E3B9-4FF5-B0D4-A3F6C0A733E9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{407FBF89-8606-4C85-AD08-B4F21FB15AF2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{40F55A80-4F23-4B30-803C-600D948B6443}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{40FD838B-3DB6-4BA3-A034-A2B4DB189705}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{41471B46-1AFD-4DA3-8A58-2CF34771296C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{414AF329-4892-49B3-9D1A-C6191FC051E9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4180D08A-F854-4940-A8A8-CE5C93B38475}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{419C8A57-E5B4-465F-B523-837BF6512263}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{41D61946-6984-4035-BB5A-075B5351FD15}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{41D756B9-1299-4E79-A493-93544C4587F2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{41F31AA8-5FEA-404C-BC82-7120F523CE8E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{41FDC3F4-5759-43F0-926C-41AFE56679E3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{424EE564-825C-4189-A0CD-A541310CCB1D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{42589D58-96D7-41F8-99A7-3D0060C164D4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{430CF071-D93C-4349-87D7-ED11164F1194}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{43333AB4-7F95-4069-81AA-6D55616B0DDE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4337EA75-93B9-4E16-BC50-4CD4A8F8C6EC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4350F04C-E26B-43ED-9A21-A6E5EE1BFBF9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{43660BC3-C337-4AD9-8C5C-EF6F8854D5DC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4380673D-2FF5-46C8-834E-A6CC94E06688}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{44035389-6C73-4AEA-8A2C-571EB4EBF056}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{440D87F3-B3CF-42BA-A744-FBE526DB4A26}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{443E5537-A029-4F76-B119-7D980C7FAAE4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4459814F-9BF3-4316-B4CF-5248C1437A6F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{449930DE-BE5F-49D9-A95F-51EF0F06D223}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{44C4738E-DC64-4354-B676-F11688056C40}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{44D5A199-FC52-4B3A-8A48-C09585451197}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{44F41AA3-AC01-47E1-B5E9-685F089E8FAB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{450E32C8-8C5F-4AB5-989E-E457912FB17E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{458F88BD-C86B-45BE-AABA-84D4B19B3C53}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{45D75A91-A921-4B6F-8F20-D6F9EF9609D3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4669E83A-716F-4F10-A305-E006572CBA4D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{466FE9FD-1A54-4B50-9EAD-A3004B2B3C1E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4689C6A1-C6FD-421E-9191-2EBE96A9A973}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4694350B-632B-4467-AFA7-A08EE6E7D1A7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{46BF0C2A-ABA5-45AB-8D5B-F57DF6CE3612}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{470974A5-0354-4836-9358-26811B01A5B2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4711E642-0423-4C9F-B9CB-0544F081D125}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4725FE46-F508-4431-91F5-3FDC9A596A48}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4815ABDB-E971-41A6-B682-9F878C9407FB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{498342F2-6F98-4F8E-9A41-E45CD2768544}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{498A391B-8737-4268-9BB0-C422C7C30AF5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{49B14DFE-E34F-4FE8-BDF5-38F5CB2C5044}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4A050D9C-EE04-4B68-A51E-DB231193D94A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4A0896A6-5B29-4FF5-873A-2B3CCF104CF8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4A56F658-0FD5-4E31-800B-3C9164A05995}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4B26254F-D668-4898-8DDD-F15A1E60CB91}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4B4E2396-C77A-481B-8287-03ED92AF08B5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4C09593C-B930-4A52-9D93-8591387AF6C8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4C180C38-1E1A-447E-A5F9-5C75EECDE526}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4C214625-B7B4-45B1-A482-972F6B551F05}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4C5B973F-CD5A-4D28-B660-2353147D83CA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4C5FD463-AF53-44E5-A183-83D7B158A833}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4C656BE4-C867-4DDC-93C0-ED3B0D73AFFD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4CAC507F-10BB-4FE0-97B9-72F0A426CEE2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4CC81677-F06A-408C-8D42-B82FCA9524EC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4CE40090-6151-4469-8CBC-AB4915121607}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4D2E7F86-C36F-4467-9D05-36109DE48D9C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4D9331CA-B98E-4159-8073-1A04B5DE9609}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4DACB982-A68C-490E-8489-EB95B10E6745}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4DB39616-EDE9-4FD9-81AA-B9AC4FB2BE7A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4DB8A3BD-0A57-46B2-BD05-359FF6A5C4C6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4EA07A01-4FF3-478A-BF66-2E7E1DCA0CF2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4EAB428D-9D8E-4AE4-9330-1A0CB571D63A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4EB14045-8E91-4790-BF2C-045F1FF61BB6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4EE5CBF3-AC69-4469-B06E-D703DD327F98}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4FCB09E4-3B15-45C9-B18D-5BDFD8AB50ED}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{4FD95D3A-9813-4D8A-B13A-4A1EFCC0EA1E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{501147B1-27C5-4E51-B7DC-D692D08A5CD6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{50454DB5-83B9-4AC7-B8F3-5367709D0263}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5052085F-58EE-4DBB-A96C-EE5AC055DDB1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{506EA9C8-686D-4046-9904-A8CB13F3558D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{50A63009-ED1E-4643-998A-EBEF6D96E342}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{50FFA67C-6F2C-48FF-88B1-815039E85C95}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{51667B38-F6FA-4461-8D2A-CDF17F5918BC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{51C2021A-DEB6-4B2D-BC7B-BFAD50237094}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{51EE64F9-2C55-4268-A40A-4685407A6A78}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5264ED17-7830-41CE-871F-1D61FC16E967}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{52A6A8B6-A516-4592-827B-F2941DC42B5D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{52B85CA0-BBD8-4EA2-8A32-3D1CC45C119F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{535239B4-14C9-4A62-990D-BEBC458764A9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{53D3FED2-47B5-4356-A3B6-551F1EF71126}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{54A1A5DC-E1FA-4700-B185-6274C3B7595C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{54CEA797-FCB1-4C4E-9716-C8473AE6F5F6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{54D5CD0B-42DF-4D55-839A-89C4773BC8A9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{54DC4D94-7210-4E3F-AC1C-971F47C64737}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{54EA5AA7-C802-4B8F-8717-BAF114004FBD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{553E187F-3F51-4AF6-A84B-CEB3ED08FC1D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{555194A7-5D26-4E2D-B2CA-7E18C28F61E1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{55E0B803-50E7-463E-944A-4E7D2683418D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{562379E6-2960-478C-935D-1CD5F5A788EE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5625298D-198E-4C56-948B-20478697EC95}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{563A98BC-45F8-4E96-B939-AB5163D8318B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{570F4451-DE6C-4071-A3A8-C3400E00B71A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5793DAAB-1C2F-495F-9339-D41E3B1A43E9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{57D7B56C-1F6E-4599-8376-3D15E02DA8CA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{58006DA7-AE69-4A52-A035-CDCE6470FBE0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{580CF805-68F7-4A1B-AA55-9C0E7336AD00}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5818AAA4-A370-409C-AD78-F31DBD5E1ED4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5839C11A-5104-4503-B3ED-2A0BE281F863}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5851F551-FA82-4F27-8C98-166CC7FC4731}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{587E3C90-BFFF-4532-9235-B2B00D40E1F4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5890649E-1142-4F71-93F5-7E64142226B9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{58B9EDB4-C186-41A3-8CEA-761310BDECB1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{58E68BB2-8E45-4420-AC37-50C320C7EAB1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{58FBE20A-F86C-4FEC-A5BC-DD3916B6EB60}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{597E1670-C975-4ACB-8BB7-5114C0F1F71F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{59996111-180F-48A3-BE39-77CF17B68BDE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{59ECDEB6-1D28-4CDD-8AB3-9734F0B8C599}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{59FC8DA7-4729-4A1C-A062-A74A555BF877}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{59FDB480-7B97-414E-9232-AD9D82F0D909}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5A28E037-0B87-4FE6-A081-076C57C328FF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5A3BFCDD-2F60-4FE2-BCE2-EE3F26782DE4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5A630E7C-3B11-4959-B605-60E35FCE404E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5A99E945-04CB-4595-8ECB-1039AE140FAA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5AFCA629-1A1B-4339-944D-9FFB0EF75B68}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5B01BCE3-E8C6-43F6-B185-6F6D707CBB25}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5B1D8825-77AD-4F04-8C96-59C406BE6E35}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5B6B34FE-8474-404F-BAA0-0B80E1FBE649}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5B947AF7-D2DC-456D-9FC9-CDD956279EA7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5BC408ED-66D8-44C3-98A0-7C90CBB4A81D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5D4550F5-2C7A-4581-9915-0FC2FA38486D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5DD194A7-BFC3-4263-9569-472155296FF1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5E14122E-1853-44B1-8FA8-AE63B4B0EF6A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5E3EE29A-A02A-4216-A31F-4B14313CD8C0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5E5A6C44-3DA8-4AF7-B42D-867215429B86}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5E784D46-36B9-4BED-90E7-55B115EE9C73}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5F3F2D0B-5637-4DB4-BDA1-35BD4CA5166C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5F512B02-F202-4B24-BA22-4C7EAA6E154E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5FB4B612-CB57-4AA4-A35B-4B2DADD3642F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{5FC38964-CF1D-40EA-9933-31F2E0E4D2F3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{600FA92D-5DA9-4523-8D45-6F52F3AC7202}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{608716B3-6391-4D43-A856-287C0E87D517}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{609B1FBE-7C82-4090-A976-3DAD2F640F87}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{60AC06BD-97DF-47F5-B6D2-15D25EE9A068}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{60C1CB37-5792-4197-94F7-FDB175E7B81E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{60DB757B-0F99-4AA6-9B2F-1741A99504C3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{60EA37EB-B1C5-438C-9D03-057C551FD38C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{61B4ABCB-2379-460C-AB11-67825DD09B6A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{61C9E578-6EB3-4154-BF7A-8C3596661114}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{62159B93-F70D-4AC5-ACE4-8BE552EECACD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6251F506-F94A-4B0A-8F07-5F0C08AA6B38}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{626F2628-E582-4F72-A348-BAD7DFE2F011}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6272FD11-F0BD-41A7-9D43-6904866D314A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{62B12243-5339-45F4-9995-10485AC034DF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{62DD96A6-6356-466F-B53B-A8D978AE7D6C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{62FA585B-FE55-4E08-8C01-E539C118710C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{633B1852-ADF6-4293-8BB0-E60587F80B74}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{636075A2-2DFC-44B1-8BCD-C3603A60E9E2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{644D9D26-FB41-4715-A162-F78546E8629E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{647775FD-F66A-4F3A-952C-290360AB38C8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{647B4C33-0831-4010-B60E-F83663E7D9C0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{64BA215C-80E3-413F-928A-D655A6D37607}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{65057C71-D1BB-47CC-AF0F-717F408E7079}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{650CB509-3F26-4722-B1F3-C8E8F3483945}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6556A730-C2F1-4694-91BB-BDCF4206C232}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{658FFED2-D023-4E22-A669-A06C57E787CE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6592DA73-FE77-4F9C-85E6-999E3A91B136}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{65E33212-8807-4FD4-AC11-439CCBC5C94C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{66021504-3E88-4DB9-858D-3C97F5879DD2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{661969A6-05C9-43CC-B81D-BEF4697F5780}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{663795BE-E821-477F-8EBB-08967BA2927E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{66A06208-C6E0-49F6-90CE-012740E9E644}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6704936F-79DE-4001-9B9D-7B1D8B11B102}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{67050599-7D4D-4F56-A1D4-CCCF2EA5BEB4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{67051319-93B5-47E4-BC93-BBAF29023AC2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{678AA26A-4A1E-4C8A-BFEB-4A9D463D7933}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{67DC3362-70E7-4E3E-B1E9-E2A769C7F606}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{67FCB53B-773F-4150-A15F-209E2C504BF0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{682A7C74-06EA-49D4-9C9A-E756C8BD8891}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6843412B-D8C5-4EA4-8BC5-C23CD4427D0A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{684F7D61-75B0-4D68-B124-E7C4C90C04AE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{686F60CB-B718-470F-B13B-810611E422BC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6882BF2E-7553-40D3-AB32-CE5B600BC25B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{689CC5BA-92C9-4438-8974-A61560D792F5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{68AE16AD-371E-4303-A984-F20639A053CA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{68BA9C6A-910C-415B-A2C3-41160412DDB8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6936E283-11C1-4F3A-A7D4-55C58EA84005}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{697485F8-56F8-4885-B657-D3CF3BA491EE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{69759C1D-18AB-4E03-A830-401B145D5A8E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{697D6C73-DF68-4573-B489-FC7EB0B55B46}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{69BB0033-9E56-4496-84DF-AD7F4B6B9BB6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{69EEB9FA-3939-4E2D-84B0-45658F14D7D0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6A10F6EA-8C73-4A3E-8EE0-924A22FD2018}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6A1292C6-6B1C-4B37-BAAF-CF3E6249DBCD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6A2143E1-7582-4A63-96C8-0A1EDE5C358C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6A34B29F-0532-400B-BCED-BDBA4B10502B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6A72E4CE-9B71-4836-9BD5-D6F3FA719F8D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6A80610D-FCE0-41E0-9389-907DB2B99C92}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6A85ED6E-F508-431C-883C-A28DA958BEAF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6A9E6FBE-C4F8-4B7A-BCDB-185265BBE02F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6AA54F55-3885-4B12-ABAF-420908773DF5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6B2A365C-4091-4F0F-9E65-EB9F84D88978}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6B2E98DB-5EC4-4E24-B9C5-5716AB8197AB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6B38D41D-94C2-4C8C-AD1A-04A87B32BD3E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6B5C3CF8-A4D5-4384-8976-1E22460476FC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6B7FA776-0DAD-4966-9830-312513B11043}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6B8ECE32-0406-4F86-8030-F1DFE9D5EC56}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6B9F99F0-AC1B-422E-9FA0-462CA00A2195}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6C1E12F1-EDA3-491C-8D80-60E0E1279C0D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6C740433-D39A-488B-A7F3-7CE04FF96C2D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6C953C1D-4A53-407C-8A1A-C4DE85A71B42}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6CFB4B41-E929-42A0-BD8F-2776761022DD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6D92C8E5-A90A-4FC8-A972-437ED637BCFE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6DB98EFD-0F54-44AE-9893-055AD39C119B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6DE760FA-4475-43DF-B6EB-C5AD668C7A29}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6DE7BBE1-4E04-496F-8DAE-F14B4B02708C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6DECD5ED-B9B7-4390-81CA-F5D099E248E5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6E261A1A-421F-42A0-AAD3-31722CBE5A9E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6E310DD8-5F8B-4DD8-B37B-F9B675060351}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6E4C0568-65D1-4C9B-A3C6-40322D117E12}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6EA49D33-7E13-4135-BC11-26166F36C85E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6EC3AD7D-D1A9-4D67-9AA4-F009D3335CAA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6EFBD0CC-43B7-4B73-80C8-2FC1A0FC0F5D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6F06D1D3-292D-4BE4-A796-3C5EFC969BC4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6F874FB7-AB74-4E6E-BC8A-DB58D6270221}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6FAD5D55-AF67-4AE5-9957-A27E91DEAC44}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{6FBF3E39-98E3-4898-B4BB-6BFC9B6842F7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{703FA2DD-FB56-4CE7-82E2-EFF3893B3492}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{707D22D2-E4E1-4A86-9759-49F8CCA3DE26}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{708166DD-0481-4E70-8799-38B6D0FF84C4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{709C4566-81CD-425D-9E6D-83A1C96110A0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{713239F4-FDC2-43A1-9082-565D4A5BF823}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7150D1FC-482E-49BD-BA27-572528E2D225}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{71A4888E-E24B-486C-A75F-1C621A615020}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{71BA5865-44B6-4D74-8C02-5086EBBC3150}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{720BF5AD-4A54-4599-9997-198B8795F7FD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{721866FE-F480-4033-9A19-CCEF56AE0CA5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{724B7717-BAA3-4989-AC9C-B6246D876BD7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7268D613-0619-4570-913A-0444C787C9A3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7277E84B-04B5-4E83-83B7-33A831C5DCE4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7293CFB1-0591-41C8-A507-EC24034C413D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{72F0431D-56FE-4DC0-8D97-6729A2BEC587}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{73229A54-CF91-44F1-905F-68A9284D32D4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7358D8A0-E9FE-47F8-ACE4-1F247A34C650}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{73B522E7-4389-4CB6-88F8-891DCB78E59E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{73C7A340-A34F-4B49-AAFA-C5F1BB83A1E3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{73E6119A-E917-4368-AE7F-61E5C7626265}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{742F8B75-1AF1-4D55-9861-9E5A1CDE2FFA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{74B61A6E-847A-4A81-A8CF-00E13CB95D6B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{74E515AC-46EC-4B71-BAAB-707F60455009}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7522ABCB-9F69-4F4E-91DC-84CC093D5B97}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{753F6759-B6EE-44F7-BFB4-6113BD5A1CEB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{75FA5EA0-1D42-4CB7-AD18-32A65F6AEB8A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{760E115F-A13D-48CF-9E26-096A22FC2515}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{76409D61-18BF-4471-BC5C-4EB41B7E8797}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{768B2493-C834-4065-BD7E-C16787E6F576}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{76C7B3E7-0D43-4455-89D9-CABB77648BE7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{76D3FB72-838E-4D58-8E2B-EB4729D50E3D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{76E77BD0-3BC2-4EE8-A165-1FF7B4BE36B5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{77979A1D-88BC-4BBE-9CE8-C3165F2888B4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{77A168B9-8496-40EF-BA78-A262D4B680E1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{77CFBEB7-C33B-4C5B-BB13-04C0BB1CA7A4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{77E71E33-247A-4E7E-94EC-EB64249D8C69}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{788133AC-E172-4B51-8E03-4BCA6AEA7DDA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{788613F3-48CC-4327-8D06-9AB75EF7F593}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{78DFF0D8-28DE-442A-80AF-C1F10F0DE969}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{798E7862-ACF3-4606-85F3-4610914335EC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{79B4701C-FE47-45E6-8D18-5B4A75161F06}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{79F534E3-E6C2-496F-A9AE-7EE7D31D50A3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{79FCD7E5-2022-438D-87D1-7EFAAF987949}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7A1E1133-28D5-4BA4-858E-9F30D3E340D1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7A5B2037-D748-4E64-82ED-A1CA6D7AB131}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7A6FC740-DC8F-478F-A93A-3205F8D9A0E1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7A73DDBB-D10F-49CD-A992-BF21E0540996}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7A995155-D3E9-4ACD-B971-122DE7EEC2E5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7AC01D91-89D4-493C-B730-B4319DF687B5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7AE0499F-885F-4EE3-8211-31E61F36831C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7B7A1849-56BE-40C4-810A-E963BA027C96}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7BD6091F-3380-4D2E-B0F9-53715816E627}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7C19C43D-4ECE-4857-A8E6-A8D07998589D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7C46B7A9-A6A0-4629-A5DE-5CFF039825FB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7C5DF2D7-AE15-47A8-AFBF-78FF881894D3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7CE88A98-D2A8-40D9-ABE9-1CEDBBA8C366}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7D051F3E-BAC7-42F8-868E-E80884A712E1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7D3579A6-8D70-4DAA-92AA-D766F460A0EF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7D48F35A-AAA4-4A40-BDC7-C20C9B382855}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7D586669-31BC-4CC4-8C19-4009D696FA60}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7D617F20-D888-4285-A3B1-3287CFF1C8C0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7DA5C489-0255-4952-82BE-3F366D79E832}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7DAD0F6A-71AE-4A97-AEA8-E37BF924A1EC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7DD3AC1E-4BD3-48BD-B673-43DED53E7BC8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7DECB451-E9AA-4398-AFED-164BF89F7754}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7F203E66-A8D6-474C-A0D7-74B0DCE6DF8B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7F24E1FA-2343-4F26-B217-336A42496ECE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7F7541F5-F5D3-46F8-828E-BC71B5C4CE28}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7FC90053-D4CE-44DC-9295-CAF6DA5A9A09}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{7FE87AC6-5494-4F2C-A4A1-D8EC6B7C73F3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{802393D5-76C9-4F40-9CCC-814F218E70E8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{802EEC75-3DFB-4D4E-BB5E-7DAD806CADF1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{806A8C6C-1C2F-47C1-8352-9A604E80868B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{80D117BA-27A3-4741-805E-20D9136A0745}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{812DBA06-1266-4797-B975-B783B4075BD5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{81702F9F-49B8-422A-87C9-8FF77FE0F578}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{81872640-A831-4EC4-92F3-78776ED7C1B6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{81B33BB4-DBF0-4373-A106-386EB1CB2DE5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{81DC2353-462A-42B1-BD99-00B2346B5ABC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{81EDB980-C682-41C8-A456-D2A7ABAFE236}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{81F6053D-69B9-420B-9E39-88708CEEFE2F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8213DDA4-3D24-4723-80FD-B773F9794385}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{822534D9-5C2B-4476-B5E3-52CD5DF886E0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{823D403B-9203-4410-85BB-057596052C3C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{824C92B6-2943-49E6-84B9-367D9C791EA7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{824FD041-15B6-4E4C-8E4B-B82DEC05AFE2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{828BE47D-ADC4-4B53-B442-B2B2DEF4DD44}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{82B11206-CA25-4EF9-B96E-38D6EE21533F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{82BBF2F5-F089-419D-93EE-04420D28C26D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8322FAD2-FDC0-4723-9270-9B61C811F4DF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{835BDB93-4A5C-4530-9847-41AE073EC109}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8366BF01-11AA-4073-B40A-AD5B38C5271C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{83730259-9390-4894-BAF3-E1FB2DC1E59F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{83E6485D-C832-4A41-8E39-1F89B6B4FBA2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{84168102-B023-4581-99F2-E729CBE9207B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{84555283-F4CC-4723-850F-815E740F6E23}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8478AE2B-3D5A-4CB2-B6A6-A85ACD5E1C5F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{84B09507-96B8-46E1-8F34-2FE9B9474FD4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{850D8E9D-0EE0-45DB-B3CB-810C417FD5DD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8555BCE0-B41E-4FAC-9587-56AE1B344B05}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{855F0751-5A6F-4099-88C0-10210766DAF7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{85A2D4DD-7AD6-4BFA-BECC-22F0A5239A7E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{85EB49FD-2EB5-4EC2-B2A2-0A10F885D63F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8634EC89-3BB8-4255-963D-6A5C5265D8D0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{868356EC-D88B-46C1-B7CD-FACFDEEAF891}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{86EA2E71-ED9D-4D24-BE1A-05E6567D4224}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{871BA489-1F11-4D8D-B791-99BDE6439904}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{874A9EAC-8836-414D-A0E1-604E9605403E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{87AB07C5-9C97-48F3-9955-A69FD2283AE8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{87D542D1-943B-4C63-A066-FB613786559E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{87DBFD3A-0646-4130-B12A-00EC0D442098}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{87E74F69-1732-4C6A-95E9-2E0E172BFA2D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{87F037E1-E1A4-4CBE-998E-1BD7AD23C77C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8854218B-2277-49C2-8F85-E9622A05E43A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8878465A-B507-41BA-B241-F29BF43C2EC6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{893057DA-B97E-48E6-8796-866753F4FC2D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{896B9A26-F571-4DD6-AA77-C26196663FC8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8991F1BC-95D0-4D27-9F80-613EAB7F8D94}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{89A5B2D2-3B66-423F-BFBC-29ABE4BBC253}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{89CD3BBA-DA8F-4C55-8F8D-5F5A9FD8E44A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8A7FD308-E722-49B2-9367-42DA789F2010}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8A9CF09D-2064-49EE-90D1-64620BD1B7FA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8AD14282-50E3-4B9C-B762-138372D0C87F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8B1C3F47-331F-441D-9C3C-63EFC5AE9E0D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8B33E5B4-98DC-40EE-BD66-39FABBB34F24}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8B65DE2A-8CBC-44DE-8553-E610180280F7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8BBEF99D-0713-447C-B4BA-CE4DE8E22E09}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8CA648B5-2D95-42FD-AD2B-9EB2DDC9773A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8D1D262B-52DC-494C-9F3D-83CFE8CFDB8B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8D244CCE-F62E-4EB4-B0A7-DF6B76B6F020}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8D488749-8298-4D8B-9684-22E76B635C27}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8D8069B0-F420-4EFF-9CD2-7F42A43F8B01}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8D982008-C5D7-46EA-B49F-9F12D8226166}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8E09F6C9-455E-4CF2-8571-44F24FDCDFAC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8E14DBA2-4B74-4F56-9366-07A582C3C5ED}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8E28DBF9-731F-412D-9EFB-0338D597955F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8E4AE287-2DA7-4948-AA56-D925A78DBA15}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8E556EDA-755D-40FB-8F57-29114F3FBCA7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8E7A87C8-3596-4B27-B26C-BDD37B9CC78E}
|
|
24.02.2015, 09:24
| #4 |
| | Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe und hier der zweite Teil: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8F0B91DB-CC8B-491A-AC1D-889704F2B63F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8F2C2BA4-6887-47E1-BC03-15B807EB8454}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8F3DD760-C96A-4570-AD5B-A45656A1BD7F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8FA399DD-ECAB-4DA8-A92B-0DE6EA8E6ABB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8FB6F2A3-E818-49E3-A623-9EC95AC89D2F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{8FEA3A48-C99D-4458-B0A1-918A42D9E5FF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{90C0F687-C668-4332-9F96-16DD456AD873}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{911614E5-F765-4BA9-A1BB-9B416E08A87B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{912930EE-1F16-4C8B-B6D4-E4A66522F0B3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{91581E1E-3FD5-459E-A086-A6C40BD13590}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{916148C4-4E66-44C5-8835-5178B563EB61}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{91BECFCF-6784-475D-8067-B48C1671F3AE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9243CB40-07D0-496F-9A14-3429D08706DE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{92EEAFB6-3C39-4B01-894A-80BC3192A2B8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{93895288-C79A-4864-91A8-94F3A2DF06BF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{939681CA-12E0-4956-BCA4-9728D4A535C6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{93D45E08-DA55-4D3F-93D2-9EDA91C0BC59}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{940C155A-DAAE-4852-B6E9-416639FEAF33}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{940DEC1E-4BBA-48D3-8E9E-344E3B73FA19}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9475AD0E-4D0F-4583-83EF-6A535B20E437}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{947F5DF4-0327-4771-B411-3EECF6918A38}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{954876AD-4EF8-4DCA-869D-B56942AB8625}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{958A796E-722E-4ECC-9FB0-791E84BE7FF0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{958D2E16-4AA9-4856-905C-1F176453F2AE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{958FC999-4158-4F0D-BDF1-287CA71095B4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9597778B-1744-459B-9FBC-AB79BA054E03}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{95BF829F-27CF-453F-A135-C76B91D75C29}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{95C3F3C7-75D5-4B23-B498-E62DA13B6DE2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{960A3353-775E-4E22-A110-C1D603C42546}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{961B17A4-6E36-47FB-9436-5728E6D485D5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{963AC684-5A33-4CD4-AF58-B789FA27AD39}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{96582E42-A760-4361-9724-E1CCA3C6C9F9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{966F54DB-F36A-42DE-8FBA-BF395BB0274C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9680101E-A149-48F0-90D4-D7AB10CC04D5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9687095A-7E7E-4849-B0BB-6C3DAECF551A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{97373E56-0FAC-4701-82B6-8481D5759B5A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{97745ECE-7A1D-4DB4-900F-B139D3ABE61A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{977E4F87-C92C-4B50-A186-3F7E9B890A04}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{98213747-233D-4C48-BDF9-2246BCD43400}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9840ECD3-017B-4D72-87E0-9D136D9E6526}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9841DF2C-8DB6-4E6A-A660-B1F1DF3819BC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{984778E1-0082-49B2-A68F-62200480C09B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{985351CD-E365-41F6-AAA0-DF27FAF976C4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{987DA75D-0BF7-4578-BDEF-6AB898F58D87}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{991FE046-F221-4472-8556-6715090742B5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{99746809-6764-4A29-AD22-F67570CC8A2A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{99DDA944-B5C1-4E55-BFAE-CC223B6D49FE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{99E14A72-E89B-4730-9B74-8E9B9BE1EFA3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9A33A4F2-F385-430A-8704-3032491462B1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9A86FC03-DBF0-4C51-A641-3AD166DD76F8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9ACA4533-0032-4267-B9CD-85ABFEB998EB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9B0F419C-AFE0-4036-8340-AB49429B8DC7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9B20EDB2-CB6B-484A-BE2F-713C698E7227}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9B290089-CA0D-4B4C-A0AD-2E7CD09B4DE7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9B439271-90A7-4528-9FA3-8591BB8B3521}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9B498E28-5FCC-4609-BDE1-A8D8159C3ECD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9B767912-46A4-4A99-8D9B-D90C57698946}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9BA9FEC2-C434-4F1C-ABF3-472B4D050356}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9BB7776E-679B-4481-AA08-20D872043B76}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9CA5B330-0DEC-4BBB-9D3D-EFB12879118D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9CA87415-16FF-4582-8E47-D05AE73FDC4A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9CB7549D-3646-4A56-9FB1-B0947FE33F22}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9CE295E5-B0D2-43A5-920B-3F9DDF206859}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9CF2E62A-6E2E-4464-A4DE-3791001215ED}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9D4BAF5E-16C7-450B-8B11-0767F34F52CF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9D7C40A7-FE98-4AD9-8A2A-362FF860B8FD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9DD6B386-D77A-4D9F-AA08-5BB238D105C5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9DDE3B95-0899-4874-A1A8-7D0A40B1A8A6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9E4F6ED6-90FB-435D-8B19-ECFE1BEF109F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9E7B3063-D75B-4CE6-A285-D76131444330}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9EEBA6CE-0DCB-4C76-BAEE-99CA22701966}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9EFC70DC-0945-4CF5-99BB-0F199B68AE35}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9F13B612-2AAF-47F9-9F32-CB2CE73F7C52}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9F3FB898-7CF1-460F-BA0A-05E9EA8AE35C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9F5F893F-0160-49F4-9475-E4C2E23AD53F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9F67095E-388B-4F9D-A7D1-DECEC43CE5A5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9FB236C0-1D6E-4F25-BDEC-D7DD2378A481}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9FCB33EB-7070-45F8-8370-DEB98DC2DCEA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{9FCE701F-4EFE-47A8-83F9-8210DDE13B4E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A08687EB-DD44-424F-B4A3-D4D94FAD2980}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A0A7CF9A-DAA7-4700-BFDE-8C09EB2743BF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A0E2235D-628A-4C48-BCA5-326923E17E8D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A137B12F-7495-4ADA-A2C0-94B3830FB951}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A13EA240-BC7C-462C-81C5-750834F4D6E0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A221BF51-A83D-42AC-A850-76B35422A4A5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A228B244-724A-418D-9A10-7B801265697C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A2ED1F1E-369B-4B5E-B0D7-0363AD0AE79B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A2F4EF41-4431-4711-B660-42E99DFE3937}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A3363E44-D940-4AAA-8241-2A2ECFBE0D44}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A35499EC-7CE6-4592-8144-4025984EB066}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A387C59B-4EA9-4C1F-AB99-462F6F69C675}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A3890EED-7C97-475D-BDF5-273F89C1DC89}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A3CD22CA-44D3-4FD7-B8C8-EFFEDC5D5BB6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A3E14773-4118-4A0A-9852-51320F021D6F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A407B92D-352A-45B5-9589-5413ADF40524}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A4860287-064A-461A-B898-39AB0C56CBBB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A489F737-0277-477E-97D9-461B4690C0C1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A542AFF0-089F-41AF-9FD9-30F14BBD05CD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A579A55B-2041-4C59-8FAF-EF4CF6A75C14}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A5B0429F-07C8-4C7D-940F-A1EDA58F032D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A6A8F69B-A847-4AD0-9DCB-314C9F3DE125}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A72EA3C3-9B81-4EC4-ADC5-7B0CCF3578A5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A749202B-D5E2-4C8C-A979-C1320F9193D5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A7994FDF-497C-4877-A94F-39AC12A6855D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A7EAE60A-FA45-4642-A78D-6361D601B4BD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A860E36A-E1F6-41AE-BBAD-89C00276DFEE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A880C3B2-49EC-4655-9D38-B0B92E71AF9C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A94FCC49-38F3-48FA-BE18-76095361A46B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A9552CEF-5F2B-4AD3-B7B2-7B4DB5A47E22}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{A99DA96E-EADB-499D-9753-D3F1BAED4BAC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{AA179FB0-048E-4991-B823-2A24D587976A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{AA3A650A-C7E8-4F69-93C0-6B04C4E55872}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{AAA5186A-1096-4579-BEE6-D2CB56C5C305}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{AAFFFEEB-28D4-4307-8E88-36716A369F87}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{AC5AD703-2C89-4DC5-BD1B-7334F22F57D8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{AC5DA7A5-2FD6-43BB-B4CD-624FD770A3C7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{AC8545E8-AED3-4FE8-B637-4E4AD30B11D4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{ACCD506D-3640-48DB-9F34-7A88417BFF38}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{ACD63938-A06E-4837-9260-344EB3139816}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{ACEA9F34-D255-4901-B2C1-6D8A11DBF05D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{AD0C05BD-1F78-4449-BBCB-05A873491EA4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{AD7046DA-718A-46A0-A83C-7931EDEFDADF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{AD7F4009-9C24-4FD7-9A52-2EE1EDC5640D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{ADD4B832-5154-492B-AD77-B1E4B84EE25D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{ADF00854-8931-4DC8-856E-DE3FA4108F7D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{AE067E86-4715-49D0-809C-AC1B394815CF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{AE0EBE55-F449-4736-8B2A-CA800A2E015F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{AF90897C-D1A8-42E3-AC0D-29840670ACDB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{AFC30CD5-0948-401D-AFEC-5CEBC9781B44}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B0228FB6-F5CF-4331-9794-707F179ED5F2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B052D82C-1343-4BF7-BDC3-89F4C6E05AE4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B06DAA82-09D3-4A7A-80FF-67C45EAAB2CC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B0ECE901-B01F-4013-AEAF-A4D40234282A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B18AF625-2024-492C-A7AF-DF78B8F3E790}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B1C77861-2FA1-47F5-B350-A74B3C178621}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B1D388E1-25E7-435D-B19E-5AE1B5017254}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B1D8CE7E-0CEE-462E-A41B-28C152B01679}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B214056E-19A7-446A-9BD5-B2250AA426AE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B225D1D4-07A3-4CFD-8922-827BBABE0F48}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B22D92F7-6CEB-495A-A70B-F5C426E022F1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B26B1516-41EB-4F29-8A71-3531854E8376}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B2ADCB81-6BA1-457E-B35B-A10531815508}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B2C8AEC6-7F87-4CB0-9E42-0100761D9386}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B2C9924C-59D9-44EB-8FF4-F47CAFD47F53}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B343F39D-CA3C-4C84-BB9F-23C052858892}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B4717265-0EA7-47FB-9B4E-267BF37EC8AD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B4A5E410-2175-4446-ABF0-1EBD5069E3C1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B4BDEB47-DBB1-4370-9ABF-6AF3D749C7ED}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B4CF6C6A-A18C-44A1-9ECD-678DF3A72859}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B4FBFE13-6D34-4806-8EB8-B47AB7763A35}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B5693A91-E853-40EA-A9EA-6A795356DA0F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B589E723-20CC-4016-B123-CFCD55957F73}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B5A2C0B2-EEEA-4671-94D3-7BC23C2D4206}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B5D4D530-D48F-472B-955B-53F6FAACD396}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B5D9D49D-99F1-4836-ADE7-ED28EA4580F4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B5E98545-931B-4E48-B170-233C80C5EC6A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B5FDA384-DAA1-4D52-9B80-7C60D0F36F77}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B6244A7A-036B-4DFC-B7A4-E00701C5C5D6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B638CBF0-2633-4EF0-B07A-329D642A7901}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B65C8288-45C0-4AD5-B498-72E798110205}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B6A712E4-38D8-48E0-9251-AC2190976D4A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B6B5AD97-CECE-47C7-BAC3-DF52F443E1FF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B6CC4B63-274A-4232-A2A2-FA95C68E2113}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B6EED4AD-738A-4695-A96F-AD9235E2F933}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B7174A55-AF92-446B-9445-B692BA0F7CF9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B73367B9-7331-4530-BC38-4F53B02F11C4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B73EB228-D4B3-4E33-A095-CAE5334C513B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B7492484-F0AE-43B3-9100-86509EBF87CF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B7503504-5842-4786-9576-90406201C2D2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B760B755-656B-4042-B138-4A4D0EC77DF5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B7631E4D-C7F5-41E8-B6CC-9DBFAEDEC39A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B77F28EB-3FFE-4155-8F43-02EE34F7EC21}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B793426C-7431-418B-8FAF-A38EE556850B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B7C232A0-66BA-4DD4-820B-66DBDC1FA4D0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B81D5813-E2C2-4187-A3E6-0BA4BCE9782E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B99A4AF7-3618-4654-B7B1-375F800DE4FA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{B9D7EA34-F795-4D8A-96EB-38A33D454F28}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BA150DA0-9DFB-438B-980A-8AC5EA080A39}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BA1FAEC2-B988-448A-B1D1-70CA60099F7C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BA294183-0B55-4AB3-B208-B434CFF251BD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BA76BDB7-573D-4566-8932-BE96F5C2835D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BA932E5E-64CF-4D39-907A-6DC20B9E7698}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BAC3AEEC-9801-4DBA-9C64-D11605358027}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BADA32B8-A8AB-499A-9E38-C0716AD0A484}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BAEA3A3C-FEF7-4EA7-B940-CA6393BA6E37}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BB4521EA-B7B4-44A5-8199-FEF04038E8D4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BBB88175-D5B3-4209-8285-07EC98855F13}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BC0E16E4-3C98-4F15-AE59-90E1E9CE1011}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BC2313E7-6B2F-4A24-8EE4-75225CB10224}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BC392BDA-B935-4B61-8125-159A8E0E1416}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BC925098-486E-4046-B5EB-A498EEB5BEFC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BCEF5A82-1D58-434B-A562-63723B0283A9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BD27FF35-2CEA-4C90-8DD0-3592059C1CCA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BD57558D-BB75-4F4E-9C76-6B954E957FEB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BD684F0C-B9CE-4ECD-B8DC-3951F6B0E540}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BDB0630B-8F24-4EED-81FC-44E326734F0D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BDE25D82-8C5A-416E-A74B-F094BADBDD1F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BE0A6B5F-44F8-4516-9EEF-120BF6A2A3F3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BE57856C-FF4A-42A5-BAAA-92DF0B06C2ED}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BE7ADBCD-D469-473A-8035-B9562103207C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BE7EFFBD-501E-401D-88C7-F74E25F31474}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BEC08515-5AB5-4A3E-921F-8DB0BAFCB592}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BEFF879A-BF09-4F0C-BE6B-2206520F4362}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BF0748B9-8F09-4624-BEA1-025147BDA1CD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BF1D993D-DC11-4DD1-BD18-482FE969034C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BF2F0B5D-4E51-4296-AEAD-D582ED0831F2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BF55B0B5-88FE-45E9-8ED3-7B2684E07119}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BF68C59F-0462-496E-8A66-3FD606BCEC18}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BF836302-694E-4489-B65B-E0A07DEA8ED0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BF855E0C-8384-480C-97C1-540BB68698AF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BF96DABB-B931-4A27-9285-08B99D9722A6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BF989B8C-7D86-4CDC-AF05-55D596301F95}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BFCB9AE1-6CFF-4BC1-93BF-2818C5A2B272}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BFCD43E9-0C90-4E36-B401-F5DE2022ECAA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{BFD5957E-D32B-42C8-BB4B-4967F5CA1BE0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C00E4AEB-FEBA-4EBF-B470-A00B773DC29A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C0504C5F-DE45-4715-B7C7-8199CE359565}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C06009E8-B107-4090-910A-CBB9A275D937}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C0BF761B-13F8-444D-8BA7-BB00AD10907B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C0EE317D-0E27-4138-BBB5-1F1F52BA0E4B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C13D1360-61A1-44B7-AAD7-334F17A465CD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C2097877-7D32-4E5D-A52D-9FB984729D3C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C255CF8B-E64B-4838-8194-1DE2EE90E3F8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C2D0319E-F567-42AD-9E3E-14D6F657229B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C33905BE-D7CF-4050-B1FA-161777799E60}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C344C8A7-3007-40AE-9C1C-5B77EFB39B47}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C3514D7B-12AC-4DF0-A6F9-1853144621FD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C3700BEE-7484-4709-A19C-907E7BE2B1D6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C3CCC19B-AB36-43FE-9687-D64E81CFF611}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C3F79035-19C1-4840-A650-90751CFB8932}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C43D18E4-5504-4325-9383-14304810485E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C508B89A-FEC4-48DD-90A0-4ED2FF917C45}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C52194CC-DDC5-4377-A9DD-AA307DD9904B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C533DF00-7919-4005-8AB4-84795F9B0860}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C5458AA2-56B8-41CD-8C15-C57AFA01897E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C5731431-CF36-47C3-98BE-6DEA95488FC4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C5C271DB-E929-4CE4-BDB1-74665A69C5BA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C6435E3E-C308-406D-8627-9002D9CC2F6E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C650ADC9-2C45-4460-BFD8-DADA7AC2A29D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C6527464-4E3D-4147-9DEB-DEA2E0227A3A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C67232F2-0991-4132-81C4-4FA17F2F9EC7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C6F8E606-FF2C-44B3-BE41-43E31BA70089}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C709AC05-A2E2-449F-9DB9-E073B7274721}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C81B17ED-871C-45D0-9B5C-83436F8D211C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C862D231-F104-4467-BE33-A8756379A43D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C869F1B6-8D03-4392-9D3E-971347A33616}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C890E56B-C7C4-4881-B221-09F39C336D2A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C90B8929-ED22-4347-BF3D-2700C1ED5083}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C9272900-A0B1-4761-8AF1-6AF5F806CEBC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C93EDA9F-F0EE-4A64-B805-2AAE9B8E0505}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C964CAEE-54BC-4671-80C8-889D5828A6AA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C97B5107-9B3B-423C-AE6B-3BD6795154E8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C9843F69-38BD-477F-8E8E-83EE91FDACCE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C9959A04-A590-4780-BC27-5EF4A06C0C56}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C9A54C63-46B7-473E-B914-6A60119C521C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C9C11C7A-7EFC-4ECB-9699-58E016F62F8F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{C9F5540C-39C7-4884-ACA6-D282E9A8F08C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CA164454-384B-407B-8474-7B9F5C60892E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CA335ABB-CB5C-40AF-8D01-33B00D365D59}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CA351061-517E-4504-B970-B3E92AB102D2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CA6C05FE-5C90-459C-8DB8-C404DC321CDE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CAD5FBB1-B629-48FB-8D5E-8393422A71C3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CB04CC69-868D-4F9F-AF9A-82E9B793A417}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CB260CF3-D631-4CFF-BECD-4D0B22EED369}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CB2FF3FB-5CFA-4A9A-A323-FC896F513046}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CB4780C0-59AF-4B8A-A635-2A2B8572AFF7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CBD5AAD1-89AF-44EF-99D7-EE1C3D11D7B9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CBE0FB38-5CA7-4203-B088-A0CB601FF384}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CBECCFEF-B4DF-4B07-A011-1A3DAA1B176D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CCBA3D0B-A7BF-415D-A27E-E8714C51DDCD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CD43CCFF-CE79-4DF4-9401-C023C1DBDBFC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CD63F183-7058-4D8B-9A77-802A56F489EF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CD7F2887-A784-472B-808A-B130815B7501}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CD84CBA8-AB4C-48AB-872A-502B4E5D2957}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CD8D3886-83C2-473E-9097-DD8BBB54D901}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CDB26C49-C6BD-45B1-AE9A-AF18AE27EAC8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CDBFBC8D-8A9D-4430-BAAF-F49485C10514}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CDDFD1A1-EF43-4005-87BC-914DA10B6753}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CDFB3966-F094-40BD-83C2-660189124254}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CE302715-0E1F-4EF3-A019-3D9A1578DDC6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CEB274AB-4820-4C82-8874-F89A845BF0D2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CED83B5A-8158-4070-AD21-84DE622BAA1F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CF0A0ADA-15AB-4D42-9B1F-366BD44ABF64}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CF4DC9C7-5AD9-45DE-A691-5B78699E64D7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CF4EF6A6-1DEA-4467-94C2-5EA5C714C42C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CF62D262-6659-46F2-B3A5-9A54C1F49964}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CFB312CC-721B-412A-B885-009006FDA5F1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{CFE70EA7-9146-4147-A87C-07263FD65258}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D042EEA4-7602-4DFD-8ADC-55BE6E2309BD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D0C345F3-9A2B-4ED1-A9D6-DE06E4B352D8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D0F735BD-A503-4F95-AC45-D544A2DE80BA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D1368F65-921C-422C-B2B1-0C33FD72D837}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D15240D5-B504-4401-A15F-FF4555F4E410}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D180699C-D379-48CE-B3CE-F2FF5C77A5C3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D229D712-5B90-44A2-BC90-D8D3A5BB48F6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D2C57241-364D-48B9-B8A8-754147FB2E88}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D300D46C-B01C-4647-B87F-FA513EFE34C7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D366FD2C-C1D9-4639-A669-0485D0279C4A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D3698A10-B3E2-41FF-92D6-7FBA238F4466}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D3741EB2-3970-45AF-8B52-C9CA1704DCB0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D37A06F8-873C-40A3-AE42-4F6078A2E249}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D4103F18-0CA8-4444-933B-C51F9C77A92F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D424903D-0D04-4140-9967-D19EE3EDCF59}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D4311D09-BC9B-4CF4-A38C-55CBA55F7D9E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D455EF60-0E30-4F6B-8962-6636EF07E09B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D48C6ADF-6253-480E-AF4A-110ABBF5C7D7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D4944A02-774D-4400-89D9-8C37A83106A9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D4D40C57-BF32-4BE3-8D56-7C71350CB730}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D5022A5A-CC59-4796-B76F-2EC882440282}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D541319B-96A3-4D42-A060-BD8ADC26CFBF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D5488BEE-B3B7-4430-AF80-AA92406DF2B1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D561A00A-8537-4631-ACCE-44A89B0CC812}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D56A7352-FD40-4CE9-B40D-4436BF2CADAB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D59FD9DD-47DD-43B3-85B0-C356D95495AD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D5A7AEC2-60F7-4A93-8093-EF4B5BEC94E8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D5B417AC-FDAD-475E-B1FA-2EC3D7D2B6E7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D62327EC-2679-4F0B-9D26-90EA980EEEDD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D65070BA-55C3-4AC0-9D27-B90B9F6E0F2B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D6A27CBE-281F-4CFA-BC1F-343FFBF45CCB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D6F712CD-5B81-4518-9F2E-A5DF43827B5D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D72B13EE-53F0-44C0-B6F7-C985DA303F26}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D79739B2-8E07-4F29-916E-520FB35EF1E9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D7E227E0-6C48-4C2C-BCA4-A9B71A1C3D93}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D823C48A-2A96-4A06-B699-64AF6D8FC2A4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D898F4F9-2F4C-4C60-BBB5-2D94CF189B44}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D8A73D1A-4076-45EF-A2CE-6D6B2A1B8C5D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D8BF86A8-B8FC-4E94-BFDA-93E8A0B11544}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D8D79432-F0F5-4E78-9EE1-303C14023993}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D93170ED-6F7E-4D7F-9552-EB54004DEB99}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{D9FDC22A-0DC2-4DA2-918F-FB0181F81AB9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DA1B7ADA-E0D3-4231-82B9-20C335B9D4C2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DA4E8A82-A82A-4158-A228-55133DBCEAA9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DAD3F5CD-28CE-4F41-AB84-A6483FB15032}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DAF7A85D-26D0-426A-B515-B89C5AC56F59}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DB330A20-53AA-4C9F-88B8-AEFDC2B71BEC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DB6FDBAE-5E0D-4DC8-A640-32A0708F6E8E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DB92AFD3-7001-4581-9F33-C6AB4C42E783}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DBA8911E-DB31-4B59-A845-63DAFAB02948}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DBB38C67-B21A-4587-A5F5-CF3AAC711511}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DC28E98D-D0CE-4A2A-B225-D89F412AF135}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DC8214B6-0388-4CA7-AA7C-42E8110F7001}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DC8E911E-0D8B-4794-BE02-23431B423EC0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DD6982E1-06C9-425C-A291-D7BECC3DB16E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DE017A51-0755-4EAF-8603-F2F9D6D89113}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DE0B01E3-AF82-46D8-8D7C-B2F5D7D38FD2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DE5AA151-058C-426C-BD32-8D28B8270151}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DE9E2A8E-9F96-4682-9DA0-A37C5D31A9FE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{DED925B9-0511-4505-B9F0-618897BC283F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E04DF554-DAF3-4AFA-984D-5B19745B02BE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E0E7FBAF-7EE6-4E0E-BBB1-1F19A3143D95}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E0FBB6F6-52D3-4342-B06C-61B9A2CF3315}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E11B406C-DC1C-4BAE-AD4D-CFB051B3986D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E18F1F8C-2CDD-4B3E-86F5-8B1CA2BE7079}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E1A04896-D2A3-4A86-ACFE-7963385677B7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E1B07A39-627F-407D-B355-204A0BE6696B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E1BD859D-2034-48BA-A6D9-06C39CBDC603}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E1C19213-82EE-4EEE-9C81-1E71AF6B9668}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E1DE3598-6C35-43DF-BCFF-D554D7D451BC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E1E58052-1060-492B-80B8-5361DD995789}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E1E6D5D3-46AA-4C1A-AD7F-720BEB1D4265}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E1ED6ABE-CB06-4002-A02F-69E67CF9664A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E1FC018D-038C-4195-8691-7325238D9A29}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E2842F58-AC70-4087-A661-B1370ADF8483}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E2B9360F-08DD-4CD9-A3BA-E3DC6B52FC1B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E2EEEF7F-A826-4FF6-AB4F-3C9C57EE0B55}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E3071DC9-FED4-4D99-8B3E-9B8B4A65F170}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E3134317-6BE7-4C11-BF66-4FA690471BF8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E367BFEC-7789-43E7-B68C-79FB2ECF80C6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E3CB98F7-31F8-4212-A186-916220E78320}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E3CD2EFF-EE8D-47B9-B635-DBA9BF92C971}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E3D2C670-6D25-4F2A-A478-1A118C1E0F97}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E3D6FF87-322A-40F0-9A17-E51478BA3BD5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E4520BED-87C5-45F2-A308-ABC91AEB79CA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E46FE78F-432D-4CB7-A2B8-B9B2AFD02103}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E4B44E07-446F-4D23-87A9-338D04C2C536}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E4C26289-D5D4-4495-A639-416DF1658657}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E4C4C182-A646-48F9-90AF-619DB7E7A2D0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E581A04D-A0B7-4D0C-946F-48F7F5CABE52}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E5E5DF57-4CDE-414E-AC1A-DD68C297E894}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E5F9C95F-F6C2-4F67-B8AF-7B042E988521}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E6208939-1997-4BDA-9CB6-D487C7C79A74}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E6224F42-C77B-4007-AF80-3161E0734B31}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E660CA54-6C24-415F-82F4-9C8AA7D8A29E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E6B8A59E-E99F-461A-8891-F9258E9F561F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E7156DD4-03D6-4E73-A500-035A3C59CBAF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E768E733-5E0B-414B-85BB-A700B3E03D02}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E78784E2-7E58-462C-8275-168CB30C4CF7}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E7905B85-BC57-4986-9136-08DA8C349253}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E7BB0691-5AA4-4CDB-A05E-8B4F7646EA0A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E7FB1314-EBE4-40F3-9C39-E159EB34CD66}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E885ACDA-4C48-4FA2-913E-5ECC9B07CAC4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E8EB737F-757D-493B-960B-54751F8118BA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E8F915B5-AC14-4C4E-A8F8-5BAB0787B50F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E909934F-8B08-45AA-A686-08242259D6E1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E915AFE9-9E61-42E6-85B5-F4213FEAA4CD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E9C42BBC-7444-4EFB-85DA-C175DA256F83}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{E9FA625E-0007-435F-AA02-C324418B78D6}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EA013206-5124-45FE-8724-4E10A93270E1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EA678E57-A7BB-402E-BF6C-C57A95A7953A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EA99E3CB-A86E-42A7-B4A4-F9AC76620DE0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EAB2CBA4-8B8B-434F-A076-FE8C7B257AA2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EB734B13-F7D1-46E0-B7DE-948CDB672D30}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EBB2817D-1F50-443F-B58A-2324762577CC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EBC547B8-3DFC-4331-AF65-ADE2848F939A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EBDEA94A-6E1A-49DA-A2B3-B84CCDB30E20}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EC5CE529-B25A-431E-AFFE-5F875BF90F66}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EC66E450-A207-433A-B4BC-097E9DF77C97}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EC9C76DC-BE58-44F1-8B3C-C044BC57379F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{ECD2EE07-0197-4774-801F-1DE7694E0BA3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{ECFAE5E2-DBE1-4D82-B756-17A3DF53AC79}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{ED3FF4AC-BD3B-423C-9971-2FF048E06364}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{ED420F09-8341-45C7-9B3F-0E7A47F0B43C}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{ED9BD64C-8108-4BBA-87FC-573A6D7015C9}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EE02DFC4-3489-4790-A84B-9BB0AF9A5B57}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EE141D02-3221-418D-8285-6DFA687BF6E4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EE584057-88DD-418C-891E-F53D951138EC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EE8B11AA-AFD2-4146-8B24-08D6E1FCE3FA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EE8F0BF2-D110-4F33-B991-169A91A807AF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EEC67E16-151F-40FE-A42D-6CBB23ACF15D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EEDD9B87-0622-4B9B-A340-3D0E736B037A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EF063B3B-62D8-452A-AEA9-45BB81D07CA8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EF8C00DE-44DA-4B47-9004-2497CF54EB16}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EFD63D44-225D-4791-9C83-46206612019B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{EFE1B412-3B46-4CB9-9964-78EE47F9920A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F0212D02-B88E-479B-9DA6-2E66001E4997}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F0782D68-156F-4282-9112-717728A5DBED}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F098CB62-4563-46F3-964D-15B6BD790E72}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F0D94846-C541-4138-A335-5AFBECC13033}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F0DFEDA7-D73D-4290-8C93-D6EFF06A6D27}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F10B0026-09DC-43F4-84AC-169B0C1A12AD}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F1158CD1-66E4-470B-9A04-67BD371B4649}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F15CCB6A-1F4F-4321-A596-6E0A93C6D947}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F1A2B244-9507-42E4-BC1A-5F6FC7FAECAF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F1C87A33-87B0-4313-8814-942AEFE66CDF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F1E00A43-B8FD-460E-8F2B-7BE8B2296EE1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F2125866-8903-4F39-B7B0-333DDB8106B0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F229E884-5DD4-4686-9DFF-21E0FBB161A3}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F24224FC-959E-48FF-9417-A90B93102C46}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F2D488BC-FB62-4968-A7C4-D7CC5B64257D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F35091C1-2A03-423C-8625-1AFC5CAD2FD0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F35CCF44-0515-4F91-B7E8-CF3C3F9726FF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F3F52544-F011-4385-9A47-629244635152}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F4083EF9-A6B1-40E3-B9DF-A00F01B113AB}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F48E3887-26B5-4FE8-9386-2AC86ADAB793}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F4BF6431-54B9-4952-A7E3-C8D1F12BB0B8}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F55EE168-5801-45E7-BCC1-722D2716989F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F5645815-2478-4F5A-97AC-F497E11468A5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F5689325-D79B-42E6-9DD5-4A384457DDFC}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F59C4A99-5DCA-48DA-87E2-010217EA88D4}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F59C9E7C-FACC-4AE9-84BA-9F5B1B523FFA}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F5E10F2E-7820-4D7D-B9C1-B389018B6444}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F61872EF-4C99-4791-9176-7E4B9A8AC573}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F6198961-6B27-4103-89F3-409F224738AE}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F6D8E0A0-61F7-43EC-9DCF-9666AC6275D0}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F723A486-E066-4E78-962C-DFB7ACF6AC0B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F791CFBC-1169-43DD-8B74-33511828EE1A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F7DCB12F-72F6-4F6E-8BEF-8671326C4134}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F7FC6502-5689-4450-B199-C52A7AFFCCFF}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F81C58C8-5555-4643-A5C6-B34FC32C373E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F85348D3-6093-4F0F-A7AF-D86E9A44E56B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F86AD85A-AA0E-454D-99C3-4DF257AB7C66}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F87E4BC4-B742-4EA1-8DFC-1B5A030EF170}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F8AF4364-D96D-4C2A-B5F3-1516CB55AF27}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F8BDE31B-5963-4D59-B020-65280599624F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F910BC67-395C-4EF4-A277-A048FF64FC98}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F96F8F0D-9651-4C55-A9BD-F1ACD289D94A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{F9E4E985-B5E1-4E7A-BE8E-59049594A4ED}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FA0EFF83-B8E1-45A3-8B68-1024019C995B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FA881466-06A8-49E6-8E5F-7397ABB622E5}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FB286DBA-BA38-4A73-8489-81470E33A046}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FB2CBB76-7AEF-4663-B81B-721D47104172}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FB87484F-567B-4330-BD7F-75EB7C51EC4E}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FB8F858D-DAD5-46E8-BB85-E6D871F8BC06}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FBE12BF1-B53E-4DAA-9F01-168344E51CE1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FC26E77C-B858-4FCF-900F-841C9F3BF523}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FC52D186-8C9E-48A7-9251-B0913FBE520A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FCBC69E7-1B92-4BDE-A881-F0999C61C766}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FCDC2DE4-E799-4F6E-8DD8-8F0797B4A732}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FCFC3ECE-191C-4389-9A69-6D4C6CB49A62}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FD076461-9E5A-41A6-A6FE-E28F2D252CA2}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FD342BB1-14E4-4D17-BF6F-7B70D335926D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FDD34A1A-0CF0-473C-A306-197E6EFC8602}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FE39AA83-4294-4A26-BFA7-BFC50566CA44}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FE555952-E511-4248-828B-35F027FCF55D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FE9160F6-386D-4E9A-82FD-A5384CA51B76}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FE948665-E65C-4F48-B062-C062326E6A31}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FED1CB92-730E-4781-AF11-B1E048675E1B}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FF054F49-CCA4-4D07-8557-BC1F285B8A3F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FF40DDE1-2428-45FF-BE19-7C53D5D1349D}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FF426ADB-37B9-4064-952E-DC922066191F}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FF5A85E5-068C-47CD-A355-BE62CF29C51A}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FF84B1F1-3914-4990-B111-0F1D80463A65}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FFA2DB8C-7A88-4C3A-B0F2-C3B650EB83C1}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FFC8EA16-46A2-458C-AEEB-5DBB293F0B17}
Successfully deleted: [Empty Folder] C:\Users\theamzw\appdata\local\{FFD3EDF9-B622-4D5D-AFC4-ED90EC5FB778}
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 24.02.2015 at 9:03:19,19
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2015
Ran by theamzw (administrator) on THEAMZW-PC on 24-02-2015 09:05:57
Running from C:\Users\theamzw\Desktop
Loaded Profiles: theamzw (Available profiles: theamzw)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
(TODO: <公司名稱>) C:\Program Files (x86)\PHotkey\GPMTray.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\PHotkey\Atouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Users\theamzw\Desktop\Defogger.exe
(SlimWare Utilities, Inc.) C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12452456 2012-02-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-08] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2870032 2012-02-10] (Synaptics Incorporated)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [177936 2012-02-17] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-21] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-03] (CyberLink)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-30] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-26] (AVAST Software)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\...\Run: [AshSnap] => C:\Program Files (x86)\Medion MediaPack 2\Ashampoo Snap\ashsnap.exe
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-12-15] (Google Inc.)
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\...\Run: [SlimCleaner Plus] => "C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe" /minimize
AppInit_DLLs: C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL => C:\Program Files (x86)\Amazon\Amazon1ButtonApp\AmazonExtIE64.dll [157504 2014-02-22] (Amazon Inc.)
AppInit_DLLs-x32: C:\PROGRA~2\Amazon\AMAZON~1\\AMAZON~3.DLL => C:\Program Files (x86)\Amazon\Amazon1ButtonApp\\AmazonExtIE.dll [141120 2014-02-22] (Amazon Inc.)
Startup: C:\Users\theamzw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\JL Alpine Advent Calendar 2013.lnk
ShortcutTarget: JL Alpine Advent Calendar 2013.lnk -> C:\Program Files (x86)\JL Alpine Advent Calendar 2013\JL Alpine Advent Calendar 2013.exe (No File)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
CHR HKU\S-1-5-21-4164022602-3369482870-266661612-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-4164022602-3369482870-266661612-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-4164022602-3369482870-266661612-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-4164022602-3369482870-266661612-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-03-10]
Chrome:
=======
CHR Profile: C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-24]
CHR Extension: (Google Docs) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-24]
CHR Extension: (Google Drive) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-24]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-02-24]
CHR Extension: (YouTube) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-24]
CHR Extension: (Google Search) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-24]
CHR Extension: (Google Sheets) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-24]
CHR Extension: (Avast Online Security) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-02-24]
CHR Extension: (Google Wallet) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-24]
CHR Extension: (Gmail) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-24]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-21]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-18] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-21] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-21] (Avast Software)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-13] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-13] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-13] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-15] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-03-29] ()
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-03-29] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-21] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-01] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-21] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-21] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2015-02-23] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-21] (Avast Software)
U3 fxlirfow; \??\C:\Users\theamzw\AppData\Local\Temp\fxlirfow.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-24 09:05 - 2015-02-24 09:06 - 00020225 _____ () C:\Users\theamzw\Desktop\FRST.txt
2015-02-24 09:03 - 2015-02-24 09:03 - 00123466 _____ () C:\Users\theamzw\Desktop\JRT.txt
2015-02-24 08:52 - 2015-02-24 08:52 - 01388274 _____ (Thisisu) C:\Users\theamzw\Desktop\JRT.exe
2015-02-24 08:49 - 2015-02-24 08:49 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-24 08:49 - 2015-02-24 08:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-24 08:36 - 2015-02-24 08:36 - 00000000 __SHD () C:\Users\theamzw\AppData\Local\EmieBrowserModeList
2015-02-24 08:32 - 2015-02-24 08:32 - 00001268 _____ () C:\Users\theamzw\Desktop\Revo Uninstaller.lnk
2015-02-24 08:32 - 2015-02-24 08:32 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-02-24 08:31 - 2015-02-24 08:31 - 00000000 ____D () C:\Users\theamzw\Desktop\logs1
2015-02-24 08:30 - 2015-02-24 08:30 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\theamzw\Desktop\revosetup95.exe
2015-02-23 20:07 - 2015-02-23 20:07 - 00380416 _____ () C:\Users\theamzw\Desktop\Gmer-19357.exe
2015-02-23 20:03 - 2015-02-23 20:03 - 00000000 _____ () C:\Users\theamzw\defogger_reenable
2015-02-23 20:02 - 2015-02-23 20:02 - 00050477 _____ () C:\Users\theamzw\Desktop\Defogger.exe
2015-02-23 19:57 - 2015-02-24 09:06 - 00000000 ____D () C:\FRST
2015-02-23 19:56 - 2015-02-23 19:56 - 02087424 _____ (Farbar) C:\Users\theamzw\Desktop\FRST64.exe
2015-02-23 19:48 - 2015-02-23 19:48 - 00000197 _____ () C:\Windows\system32\2015-02-23-18-48-13.068-AvastVBoxSVC.exe-4468.log
2015-02-23 19:00 - 2015-02-23 19:46 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-23 18:58 - 2015-02-23 18:58 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-23 18:58 - 2015-02-23 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-02-23 18:58 - 2015-02-23 18:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-23 18:58 - 2015-02-23 18:58 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-02-23 18:58 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-23 18:58 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-02-23 18:58 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-02-23 18:48 - 2015-02-23 18:50 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\theamzw\Desktop\mbam-setup-2.0.4.1028.exe
2015-02-23 18:47 - 2015-02-23 18:47 - 00000197 _____ () C:\Windows\system32\2015-02-23-17-47-20.073-AvastVBoxSVC.exe-5116.log
2015-02-23 18:36 - 2015-02-23 18:40 - 00000000 ____D () C:\AdwCleaner
2015-02-23 18:35 - 2015-02-23 18:35 - 02126848 _____ () C:\Users\theamzw\Desktop\AdwCleaner_4.111.exe
2015-02-22 23:33 - 2015-02-22 23:33 - 00000247 _____ () C:\Windows\system32\2015-02-22-22-33-25.002-aswFe.exe-7920.log
2015-02-22 23:24 - 2015-02-22 23:33 - 00000247 _____ () C:\Windows\system32\2015-02-22-22-24-48.048-aswFe.exe-6568.log
2015-02-22 23:24 - 2015-02-22 23:24 - 00000197 _____ () C:\Windows\system32\2015-02-22-22-24-42.028-AvastVBoxSVC.exe-5876.log
2015-02-17 14:12 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-17 14:12 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-17 14:12 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-17 14:12 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-16 23:30 - 2015-02-16 23:30 - 00000197 _____ () C:\Windows\system32\2015-02-16-22-30-27.047-AvastVBoxSVC.exe-4004.log
2015-02-11 21:43 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 21:43 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 21:43 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 21:43 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 21:43 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 21:43 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 21:43 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 21:43 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 21:43 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 21:43 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 21:43 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 21:43 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 21:43 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 21:43 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 21:43 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 21:43 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 21:43 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 21:43 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 21:43 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 21:43 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 21:43 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 21:43 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 21:43 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 21:43 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 21:43 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 21:43 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 21:43 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 21:43 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 21:43 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 21:43 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 21:43 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 21:43 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 21:43 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 21:43 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 21:43 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 21:43 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 21:43 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 21:43 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 21:43 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 21:43 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 21:43 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 21:43 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 21:43 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 21:43 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 21:43 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 21:43 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 21:43 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 21:43 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 21:43 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 21:43 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 21:43 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 21:43 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 21:14 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 21:14 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 21:12 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 21:12 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 21:12 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 21:12 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 21:12 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 21:12 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 21:12 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 20:50 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 20:50 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 20:50 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 20:50 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 20:50 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 20:50 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 20:50 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 20:50 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 20:50 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 20:50 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 20:50 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 20:50 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 20:50 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 20:50 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 20:50 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 20:50 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 20:50 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 20:50 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 20:50 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 20:50 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 20:49 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 20:49 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 20:49 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 20:49 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 20:49 - 2014-10-04 03:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-11 20:49 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-02-11 20:49 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-02-11 20:49 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 20:49 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 20:49 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-11 20:49 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-11 20:48 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 20:48 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 20:47 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-10 20:01 - 2015-02-10 20:01 - 00000197 _____ () C:\Windows\system32\2015-02-10-19-01-09.009-AvastVBoxSVC.exe-6120.log
2015-02-10 08:44 - 2015-02-10 08:44 - 00000197 _____ () C:\Windows\system32\2015-02-10-07-44-22.022-AvastVBoxSVC.exe-2964.log
2015-01-27 18:56 - 2015-01-27 18:56 - 00000197 _____ () C:\Windows\system32\2015-01-27-17-56-14.085-AvastVBoxSVC.exe-5688.log
2015-01-25 16:48 - 2015-01-25 16:48 - 00000197 _____ () C:\Windows\system32\2015-01-25-15-48-00.037-AvastVBoxSVC.exe-5760.log
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-24 08:49 - 2012-12-15 12:45 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-24 08:41 - 2012-12-15 12:15 - 01750284 _____ () C:\Windows\WindowsUpdate.log
2015-02-24 08:28 - 2013-03-13 10:34 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-24 03:28 - 2014-08-19 09:21 - 00000370 _____ () C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - theamzw).job
2015-02-23 20:41 - 2009-07-14 05:45 - 00024912 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-23 20:41 - 2009-07-14 05:45 - 00024912 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-23 20:13 - 2014-08-18 19:13 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2015-02-23 20:03 - 2012-12-15 12:51 - 00000000 ____D () C:\Users\theamzw
2015-02-23 19:57 - 2012-12-15 12:45 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-23 19:46 - 2014-05-08 08:11 - 00000000 ____D () C:\Users\theamzw\Documents\Youcam
2015-02-23 19:43 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-23 19:43 - 2009-07-14 05:51 - 00181993 _____ () C:\Windows\setupact.log
2015-02-23 19:42 - 2010-11-21 04:47 - 00253442 _____ () C:\Windows\PFRO.log
2015-02-23 19:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\IME
2015-02-23 18:40 - 2012-12-23 18:37 - 00000000 ____D () C:\Program Files (x86)\Amazon
2015-02-23 09:52 - 2014-10-20 08:28 - 00173568 ___SH () C:\Users\theamzw\Documents\Thumbs.db
2015-02-17 13:56 - 2013-03-10 12:20 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-02-16 23:26 - 2009-07-14 05:45 - 00366888 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-16 23:23 - 2014-12-11 11:34 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-16 23:23 - 2014-05-07 08:19 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-16 23:15 - 2013-08-15 19:13 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-16 23:00 - 2011-07-18 21:31 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-10 19:54 - 2012-12-15 12:55 - 00000000 ____D () C:\Users\theamzw\AppData\Roaming\SoftGrid Client
2015-02-04 19:52 - 2012-12-15 12:45 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 19:52 - 2012-12-15 12:45 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-04 19:52 - 2012-12-15 12:45 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-04 19:51 - 2013-03-13 10:34 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-04 19:51 - 2013-03-13 10:34 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-04 19:51 - 2011-12-01 22:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-29 20:40 - 2013-03-10 12:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-01-29 20:34 - 2012-12-15 12:52 - 00093224 _____ () C:\Users\theamzw\AppData\Local\GDIPFONTCACHEV1.DAT
==================== Files in the root of some directories =======
2014-02-15 11:22 - 2014-03-27 21:13 - 0000069 _____ () C:\Users\theamzw\AppData\Roaming\WB.CFG
2013-04-06 12:19 - 2013-04-06 12:19 - 0003584 _____ () C:\Users\theamzw\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-01-08 09:39 - 2013-01-08 09:39 - 0017408 _____ () C:\Users\theamzw\AppData\Local\WebpageIcons.db
Some content of TEMP:
====================
C:\Users\theamzw\AppData\Local\Temp\APNSetup.exe
C:\Users\theamzw\AppData\Local\Temp\APNStub.exe
C:\Users\theamzw\AppData\Local\Temp\BrokerMediumIntegrity.exe
C:\Users\theamzw\AppData\Local\Temp\COMAP.EXE
C:\Users\theamzw\AppData\Local\Temp\DealPlyUpdateVer.exe
C:\Users\theamzw\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp6dnktd.dll
C:\Users\theamzw\AppData\Local\Temp\GenericUninstall.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\MSETUP4.EXE
C:\Users\theamzw\AppData\Local\Temp\Quarantine.exe
C:\Users\theamzw\AppData\Local\Temp\scp791.tmp.exe
C:\Users\theamzw\AppData\Local\Temp\SlimCleanerPlus.x64.exe
C:\Users\theamzw\AppData\Local\Temp\sqlite3.dll
C:\Users\theamzw\AppData\Local\Temp\WSSetup.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-01-18 20:49
==================== End Of Log ============================
--- --- --- --- --- --- |
|
24.02.2015, 17:01
| #5 |
| /// the machine /// TB-Ausbilder | Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exeESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
24.02.2015, 20:17
| #6 |
| | Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe Hallo Schrauber! Danke für deine Mühe =) Du erlebst das sicher täglich, vor lauter alles-ganz-genau-machen-wollen übersieht man wieder was...Ich habe Eset ausgeführt und zwar mit der Einstellung "Erkennung von eventuell unerwünschten Anwendungen", aber die erweiterten Einstellungen habe ich nicht geändert. Hier der log: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=5eca9d2d287f914685c8962d7ae9800d
# engine=22626
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-02-24 07:04:11
# local_time=2015-02-24 08:04:11 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Internet Security'
# compatibility_mode=779 16777213 85 72 2423572 189225141 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 51225686 176434501 0 0
# scanned=326780
# found=27
# cleaned=20
# scan_time=8159
sh=C33FEDF1A60F25DC90A4754446535DF6924A9FDF ft=1 fh=017cd515e52a74e6 vn="Variante von Win32/Toolbar.Perion.H evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\mjcm\5108\nsib.dll"
sh=181241E6431887DC27F4E2B92159F77D82831893 ft=1 fh=80d13d017bfcdcc5 vn="Variante von Win32/Toolbar.Perion.H evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\mjcm\5113\nsib.dll"
sh=4A1C619288EF819FB99EB59FC2CDDEB1E11C53ED ft=1 fh=a39ab979e92d10f3 vn="Variante von Win32/Toolbar.Perion.H evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\mjcm\5116\nsib.dll"
sh=C0A6EE22B75DAB50FA3B2C6C71B7F3A2A6F470DC ft=1 fh=ef388b79d75014b6 vn="Variante von Win32/Toolbar.Perion.H evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\mjcm\5119\nsib.dll"
sh=D589418ED5B785A121824C5F6B6B4D99BEE7AF36 ft=1 fh=23a86629a9f2b83e vn="Variante von Win32/Toolbar.Perion.H evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\mjcm\5123\nsib.dll"
sh=52D2E7000C51C535BE065DBC04697148F2A91DA7 ft=1 fh=0a5709db6f26ac2f vn="Variante von Win32/Toolbar.Perion.H evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\mjcm\5132\nsib.dll"
sh=636553DBD4D8839C3BB36F59A90C63F23BCD7504 ft=1 fh=8b8daa0a3405b1f4 vn="Variante von Win32/Toolbar.Perion.H evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\mjcm\5141\nsib.dll"
sh=0F908E1FF25E2E3CDBD55F147050E7A80E6C9899 ft=1 fh=95a759830365cd8b vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir"
sh=143416AAC4F6000C3A3235EB4EC955B4D0B6955E ft=1 fh=b68409d87b15670c vn="Win32/DealPly.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\theamzw\AppData\Local\Temp\DealPlyUpdateVer.exe"
sh=A660D2BC9CFF99A2B97D609819241EC0A33636E6 ft=1 fh=2f6518ca83af4ee2 vn="Variante von Win32/Toolbar.Perion.G evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\theamzw\AppData\Local\Temp\WSSetup.exe"
sh=7A0A3F9317D64E6B6E889CA70FE4EC94B87ABFF2 ft=1 fh=b44917b53b2777fd vn="Win32/Distromatic.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\theamzw\AppData\Local\Temp\nspAB41.tmp\zplugins.dll"
sh=7A0A3F9317D64E6B6E889CA70FE4EC94B87ABFF2 ft=1 fh=b44917b53b2777fd vn="Win32/Distromatic.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\theamzw\AppData\Local\Temp\nsr8863.tmp\zplugins.dll"
sh=BD165479C4C6FE4FA308749C6549737F7C06061B ft=1 fh=fb9c0a330915096d vn="Win32/Systweak.D evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\theamzw\Downloads\rcpa_230704535731817315.exe"
sh=12E4CFD358238FB9CE88BDBC913672EE710ACD20 ft=1 fh=d1ef114bdadb9632 vn="Win32/Systweak.D evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\theamzw\Downloads\rcpsetupg_apptvlatest-apptvlatest_2081 (1).exe"
sh=12E4CFD358238FB9CE88BDBC913672EE710ACD20 ft=1 fh=d1ef114bdadb9632 vn="Win32/Systweak.D evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\theamzw\Downloads\rcpsetupg_apptvlatest-apptvlatest_2081 (2).exe"
sh=12E4CFD358238FB9CE88BDBC913672EE710ACD20 ft=1 fh=d1ef114bdadb9632 vn="Win32/Systweak.D evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\theamzw\Downloads\rcpsetupg_apptvlatest-apptvlatest_2081.exe"
sh=432178503A7865FD836D78ABA56DFD6393A96B7D ft=1 fh=d52819f8460afbfa vn="Win32/SpeedUpMyPC.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\theamzw\Downloads\speedupmypc_4037136_.exe"
sh=27C9BD6A05DA87C72B722534F115E411C53D2DC4 ft=1 fh=dd66c373406c8aae vn="Win32/Systweak.K evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\theamzw\Downloads\tamnsp_110907183030597034.exe"
sh=582484017C8854DB9BA32D1EBE98369AACFE8576 ft=1 fh=4236180cef38cee1 vn="Win32/Systweak.K evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\theamzw\Downloads\tamnsp_160807394795712278.exe"
sh=C33FEDF1A60F25DC90A4754446535DF6924A9FDF ft=1 fh=017cd515e52a74e6 vn="Variante von Win32/Toolbar.Perion.H evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\mjcm\5108\nsib.dll"
sh=181241E6431887DC27F4E2B92159F77D82831893 ft=1 fh=80d13d017bfcdcc5 vn="Variante von Win32/Toolbar.Perion.H evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\mjcm\5113\nsib.dll"
sh=4A1C619288EF819FB99EB59FC2CDDEB1E11C53ED ft=1 fh=a39ab979e92d10f3 vn="Variante von Win32/Toolbar.Perion.H evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\mjcm\5116\nsib.dll"
sh=C0A6EE22B75DAB50FA3B2C6C71B7F3A2A6F470DC ft=1 fh=ef388b79d75014b6 vn="Variante von Win32/Toolbar.Perion.H evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\mjcm\5119\nsib.dll"
sh=D589418ED5B785A121824C5F6B6B4D99BEE7AF36 ft=1 fh=23a86629a9f2b83e vn="Variante von Win32/Toolbar.Perion.H evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\mjcm\5123\nsib.dll"
sh=52D2E7000C51C535BE065DBC04697148F2A91DA7 ft=1 fh=0a5709db6f26ac2f vn="Variante von Win32/Toolbar.Perion.H evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\mjcm\5132\nsib.dll"
sh=636553DBD4D8839C3BB36F59A90C63F23BCD7504 ft=1 fh=8b8daa0a3405b1f4 vn="Variante von Win32/Toolbar.Perion.H evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\mjcm\5141\nsib.dll"
sh=A9F6A3299D8E5A8B0F8F18915521C8B3E7C9F864 ft=1 fh=a874d3fc82897e2d vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="D:\TOOLS\Medion MediaPack\medion_mediapack_2_ext.exe"
Und muss ich, falls ich es nochmal mache ESET "Als Administrator ausführen"? Lieber Gruß und danke! Lea |
|
25.02.2015, 07:20
| #7 |
| /// the machine /// TB-Ausbilder | Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe Nö, jetzt einfach die andern beiden Sachen von oben
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
25.02.2015, 08:44
| #8 |
| | Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe Alles klar. SecurityCheck meldet "UNSUPPORTED OPERATING SYSTEM! ABORTED!" FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2015
Ran by theamzw (administrator) on THEAMZW-PC on 25-02-2015 08:39:10
Running from C:\Users\theamzw\Desktop
Loaded Profiles: theamzw (Available profiles: theamzw)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
(TODO: <公司名稱>) C:\Program Files (x86)\PHotkey\GPMTray.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\PHotkey\Atouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(SlimWare Utilities, Inc.) C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12452456 2012-02-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-08] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2870032 2012-02-10] (Synaptics Incorporated)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [177936 2012-02-17] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-21] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-03] (CyberLink)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-30] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-26] (AVAST Software)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\...\Run: [AshSnap] => C:\Program Files (x86)\Medion MediaPack 2\Ashampoo Snap\ashsnap.exe
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-12-15] (Google Inc.)
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\...\Run: [SlimCleaner Plus] => "C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe" /minimize
AppInit_DLLs: C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL => C:\Program Files (x86)\Amazon\Amazon1ButtonApp\AmazonExtIE64.dll [157504 2014-02-22] (Amazon Inc.)
AppInit_DLLs-x32: C:\PROGRA~2\Amazon\AMAZON~1\\AMAZON~3.DLL => C:\Program Files (x86)\Amazon\Amazon1ButtonApp\\AmazonExtIE.dll [141120 2014-02-22] (Amazon Inc.)
Startup: C:\Users\theamzw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\JL Alpine Advent Calendar 2013.lnk
ShortcutTarget: JL Alpine Advent Calendar 2013.lnk -> C:\Program Files (x86)\JL Alpine Advent Calendar 2013\JL Alpine Advent Calendar 2013.exe (No File)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
CHR HKU\S-1-5-21-4164022602-3369482870-266661612-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-4164022602-3369482870-266661612-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-4164022602-3369482870-266661612-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-4164022602-3369482870-266661612-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-4164022602-3369482870-266661612-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-03-10]
Chrome:
=======
CHR Profile: C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-24]
CHR Extension: (Google Docs) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-24]
CHR Extension: (Google Drive) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-24]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-02-24]
CHR Extension: (YouTube) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-24]
CHR Extension: (Google Search) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-24]
CHR Extension: (Google Sheets) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-24]
CHR Extension: (Avast Online Security) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-02-24]
CHR Extension: (Google Wallet) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-24]
CHR Extension: (Gmail) - C:\Users\theamzw\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-24]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-21]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-18] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-21] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-21] (Avast Software)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-13] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-13] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-13] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-15] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-03-29] ()
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-03-29] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-21] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-01] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-21] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-21] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2015-02-23] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-21] (Avast Software)
U3 fxlirfow; \??\C:\Users\theamzw\AppData\Local\Temp\fxlirfow.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-25 08:35 - 2015-02-25 08:35 - 00852594 _____ () C:\Users\theamzw\Desktop\SecurityCheck.exe
2015-02-24 17:40 - 2015-02-24 17:40 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-02-24 17:38 - 2015-02-24 17:38 - 02347384 _____ (ESET) C:\Users\theamzw\Desktop\esetsmartinstaller_deu.exe
2015-02-24 09:07 - 2015-02-24 09:08 - 00026653 _____ () C:\Users\theamzw\Desktop\Addition.txt
2015-02-24 09:05 - 2015-02-25 08:39 - 00020631 _____ () C:\Users\theamzw\Desktop\FRST.txt
2015-02-24 09:03 - 2015-02-24 09:03 - 00123466 _____ () C:\Users\theamzw\Desktop\JRT.txt
2015-02-24 08:52 - 2015-02-24 08:52 - 01388274 _____ (Thisisu) C:\Users\theamzw\Desktop\JRT.exe
2015-02-24 08:49 - 2015-02-24 08:49 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-24 08:49 - 2015-02-24 08:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-24 08:36 - 2015-02-24 08:36 - 00000000 __SHD () C:\Users\theamzw\AppData\Local\EmieBrowserModeList
2015-02-24 08:32 - 2015-02-24 08:32 - 00001268 _____ () C:\Users\theamzw\Desktop\Revo Uninstaller.lnk
2015-02-24 08:32 - 2015-02-24 08:32 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-02-24 08:31 - 2015-02-24 08:31 - 00000000 ____D () C:\Users\theamzw\Desktop\logs1
2015-02-24 08:30 - 2015-02-24 08:30 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\theamzw\Desktop\revosetup95.exe
2015-02-23 20:07 - 2015-02-23 20:07 - 00380416 _____ () C:\Users\theamzw\Desktop\Gmer-19357.exe
2015-02-23 20:03 - 2015-02-23 20:03 - 00000000 _____ () C:\Users\theamzw\defogger_reenable
2015-02-23 20:02 - 2015-02-23 20:02 - 00050477 _____ () C:\Users\theamzw\Desktop\Defogger.exe
2015-02-23 19:57 - 2015-02-25 08:39 - 00000000 ____D () C:\FRST
2015-02-23 19:56 - 2015-02-23 19:56 - 02087424 _____ (Farbar) C:\Users\theamzw\Desktop\FRST64.exe
2015-02-23 19:48 - 2015-02-23 19:48 - 00000197 _____ () C:\Windows\system32\2015-02-23-18-48-13.068-AvastVBoxSVC.exe-4468.log
2015-02-23 19:00 - 2015-02-23 19:46 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-23 18:58 - 2015-02-23 18:58 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-23 18:58 - 2015-02-23 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-02-23 18:58 - 2015-02-23 18:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-23 18:58 - 2015-02-23 18:58 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-02-23 18:58 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-23 18:58 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-02-23 18:58 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-02-23 18:48 - 2015-02-23 18:50 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\theamzw\Desktop\mbam-setup-2.0.4.1028.exe
2015-02-23 18:47 - 2015-02-23 18:47 - 00000197 _____ () C:\Windows\system32\2015-02-23-17-47-20.073-AvastVBoxSVC.exe-5116.log
2015-02-23 18:36 - 2015-02-23 18:40 - 00000000 ____D () C:\AdwCleaner
2015-02-23 18:35 - 2015-02-23 18:35 - 02126848 _____ () C:\Users\theamzw\Desktop\AdwCleaner_4.111.exe
2015-02-22 23:33 - 2015-02-22 23:33 - 00000247 _____ () C:\Windows\system32\2015-02-22-22-33-25.002-aswFe.exe-7920.log
2015-02-22 23:24 - 2015-02-22 23:33 - 00000247 _____ () C:\Windows\system32\2015-02-22-22-24-48.048-aswFe.exe-6568.log
2015-02-22 23:24 - 2015-02-22 23:24 - 00000197 _____ () C:\Windows\system32\2015-02-22-22-24-42.028-AvastVBoxSVC.exe-5876.log
2015-02-17 14:12 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-17 14:12 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-17 14:12 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-17 14:12 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-16 23:30 - 2015-02-16 23:30 - 00000197 _____ () C:\Windows\system32\2015-02-16-22-30-27.047-AvastVBoxSVC.exe-4004.log
2015-02-11 21:43 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 21:43 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 21:43 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 21:43 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 21:43 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 21:43 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 21:43 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 21:43 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 21:43 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 21:43 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 21:43 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 21:43 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 21:43 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 21:43 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 21:43 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 21:43 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 21:43 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 21:43 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 21:43 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 21:43 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 21:43 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 21:43 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 21:43 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 21:43 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 21:43 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 21:43 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 21:43 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 21:43 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 21:43 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 21:43 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 21:43 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 21:43 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 21:43 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 21:43 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 21:43 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 21:43 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 21:43 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 21:43 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 21:43 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 21:43 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 21:43 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 21:43 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 21:43 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 21:43 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 21:43 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 21:43 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 21:43 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 21:43 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 21:43 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 21:43 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 21:43 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 21:43 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 21:14 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 21:14 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 21:14 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 21:12 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 21:12 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 21:12 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 21:12 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 21:12 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 21:12 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 21:12 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 20:51 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 20:51 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 20:50 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 20:50 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 20:50 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 20:50 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 20:50 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 20:50 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 20:50 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 20:50 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 20:50 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 20:50 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 20:50 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 20:50 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 20:50 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 20:50 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 20:50 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 20:50 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 20:50 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 20:50 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 20:50 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 20:50 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 20:49 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 20:49 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 20:49 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 20:49 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 20:49 - 2014-10-04 03:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-11 20:49 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-02-11 20:49 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-02-11 20:49 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 20:49 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 20:49 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-11 20:49 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-11 20:48 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 20:48 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 20:47 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-10 20:01 - 2015-02-10 20:01 - 00000197 _____ () C:\Windows\system32\2015-02-10-19-01-09.009-AvastVBoxSVC.exe-6120.log
2015-02-10 08:44 - 2015-02-10 08:44 - 00000197 _____ () C:\Windows\system32\2015-02-10-07-44-22.022-AvastVBoxSVC.exe-2964.log
2015-01-27 18:56 - 2015-01-27 18:56 - 00000197 _____ () C:\Windows\system32\2015-01-27-17-56-14.085-AvastVBoxSVC.exe-5688.log
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-25 08:34 - 2013-03-13 10:34 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-25 08:34 - 2012-12-15 12:15 - 01785486 _____ () C:\Windows\WindowsUpdate.log
2015-02-25 02:58 - 2014-08-19 09:21 - 00000370 _____ () C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - theamzw).job
2015-02-24 19:57 - 2012-12-15 12:45 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-24 08:49 - 2012-12-15 12:45 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-23 20:41 - 2009-07-14 05:45 - 00024912 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-23 20:41 - 2009-07-14 05:45 - 00024912 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-23 20:13 - 2014-08-18 19:13 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2015-02-23 20:03 - 2012-12-15 12:51 - 00000000 ____D () C:\Users\theamzw
2015-02-23 19:46 - 2014-05-08 08:11 - 00000000 ____D () C:\Users\theamzw\Documents\Youcam
2015-02-23 19:43 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-23 19:43 - 2009-07-14 05:51 - 00181993 _____ () C:\Windows\setupact.log
2015-02-23 19:42 - 2010-11-21 04:47 - 00253442 _____ () C:\Windows\PFRO.log
2015-02-23 19:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\IME
2015-02-23 18:40 - 2012-12-23 18:37 - 00000000 ____D () C:\Program Files (x86)\Amazon
2015-02-23 09:52 - 2014-10-20 08:28 - 00173568 ___SH () C:\Users\theamzw\Documents\Thumbs.db
2015-02-17 13:56 - 2013-03-10 12:20 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-02-16 23:26 - 2009-07-14 05:45 - 00366888 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-16 23:23 - 2014-12-11 11:34 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-16 23:23 - 2014-05-07 08:19 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-16 23:15 - 2013-08-15 19:13 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-16 23:00 - 2011-07-18 21:31 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-10 19:54 - 2012-12-15 12:55 - 00000000 ____D () C:\Users\theamzw\AppData\Roaming\SoftGrid Client
2015-02-04 19:52 - 2012-12-15 12:45 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 19:52 - 2012-12-15 12:45 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-04 19:52 - 2012-12-15 12:45 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-04 19:51 - 2013-03-13 10:34 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-04 19:51 - 2013-03-13 10:34 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-04 19:51 - 2011-12-01 22:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-29 20:40 - 2013-03-10 12:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-01-29 20:34 - 2012-12-15 12:52 - 00093224 _____ () C:\Users\theamzw\AppData\Local\GDIPFONTCACHEV1.DAT
==================== Files in the root of some directories =======
2014-02-15 11:22 - 2014-03-27 21:13 - 0000069 _____ () C:\Users\theamzw\AppData\Roaming\WB.CFG
2013-04-06 12:19 - 2013-04-06 12:19 - 0003584 _____ () C:\Users\theamzw\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-01-08 09:39 - 2013-01-08 09:39 - 0017408 _____ () C:\Users\theamzw\AppData\Local\WebpageIcons.db
Some content of TEMP:
====================
C:\Users\theamzw\AppData\Local\Temp\APNSetup.exe
C:\Users\theamzw\AppData\Local\Temp\APNStub.exe
C:\Users\theamzw\AppData\Local\Temp\BrokerMediumIntegrity.exe
C:\Users\theamzw\AppData\Local\Temp\COMAP.EXE
C:\Users\theamzw\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp6dnktd.dll
C:\Users\theamzw\AppData\Local\Temp\GenericUninstall.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\theamzw\AppData\Local\Temp\MSETUP4.EXE
C:\Users\theamzw\AppData\Local\Temp\Quarantine.exe
C:\Users\theamzw\AppData\Local\Temp\scp791.tmp.exe
C:\Users\theamzw\AppData\Local\Temp\SlimCleanerPlus.x64.exe
C:\Users\theamzw\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-01-18 20:49
==================== End Of Log ============================
|
|
25.02.2015, 17:20
| #9 |
| /// the machine /// TB-Ausbilder | Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Windows\SysWOW64\mjcm\5108\nsib.dll
C:\Windows\SysWOW64\mjcm\5113\nsib.dll
C:\Windows\SysWOW64\mjcm\5116\nsib.dll
C:\Windows\SysWOW64\mjcm\5119\nsib.dll
C:\Windows\SysWOW64\mjcm\5123\nsib.dll
C:\Windows\SysWOW64\mjcm\5132\nsib.dll
C:\Windows\SysWOW64\mjcm\5141\nsib.dll
C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir
C:\Users\theamzw\AppData\Local\Temp\DealPlyUpdateVer.exe
C:\Users\theamzw\AppData\Local\Temp\WSSetup.exe
C:\Users\theamzw\AppData\Local\Temp\nspAB41.tmp\zplugins.dll
C:\Users\theamzw\AppData\Local\Temp\nsr8863.tmp\zplugins.dll
C:\Users\theamzw\Downloads\rcpa_230704535731817315.exe
C:\Users\theamzw\Downloads\rcpsetupg_apptvlatest-apptvlatest_2081 (1).exe
C:\Users\theamzw\Downloads\rcpsetupg_apptvlatest-apptvlatest_2081 (2).exe
C:\Users\theamzw\Downloads\rcpsetupg_apptvlatest-apptvlatest_2081.exe
C:\Users\theamzw\Downloads\speedupmypc_4037136_.exe
C:\Users\theamzw\Downloads\tamnsp_110907183030597034.exe
C:\Users\theamzw\Downloads\tamnsp_160807394795712278.exe
C:\Windows\System32\mjcm\5108\nsib.dll
C:\Windows\System32\mjcm\5113\nsib.dll
C:\Windows\System32\mjcm\5116\nsib.dll
C:\Windows\System32\mjcm\5119\nsib.dll
C:\Windows\System32\mjcm\5123\nsib.dll
C:\Windows\System32\mjcm\5132\nsib.dll
C:\Windows\System32\mjcm\5141\nsib.dll
D:\TOOLS\Medion MediaPack\medion_mediapack_2_ext.exe
Emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
26.02.2015, 11:35
| #10 |
| | Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe Wunderbar =) hier der Fixlog: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-02-2015 01
Ran by theamzw at 2015-02-26 11:04:39 Run:1
Running from C:\Users\theamzw\Desktop
Loaded Profiles: theamzw (Available profiles: theamzw)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Windows\SysWOW64\mjcm\5108\nsib.dll
C:\Windows\SysWOW64\mjcm\5113\nsib.dll
C:\Windows\SysWOW64\mjcm\5116\nsib.dll
C:\Windows\SysWOW64\mjcm\5119\nsib.dll
C:\Windows\SysWOW64\mjcm\5123\nsib.dll
C:\Windows\SysWOW64\mjcm\5132\nsib.dll
C:\Windows\SysWOW64\mjcm\5141\nsib.dll
C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir
C:\Users\theamzw\AppData\Local\Temp\DealPlyUpdateVer.exe
C:\Users\theamzw\AppData\Local\Temp\WSSetup.exe
C:\Users\theamzw\AppData\Local\Temp\nspAB41.tmp\zplugins.dll
C:\Users\theamzw\AppData\Local\Temp\nsr8863.tmp\zplugins.dll
C:\Users\theamzw\Downloads\rcpa_230704535731817315.exe
C:\Users\theamzw\Downloads\rcpsetupg_apptvlatest-apptvlatest_2081 (1).exe
C:\Users\theamzw\Downloads\rcpsetupg_apptvlatest-apptvlatest_2081 (2).exe
C:\Users\theamzw\Downloads\rcpsetupg_apptvlatest-apptvlatest_2081.exe
C:\Users\theamzw\Downloads\speedupmypc_4037136_.exe
C:\Users\theamzw\Downloads\tamnsp_110907183030597034.exe
C:\Users\theamzw\Downloads\tamnsp_160807394795712278.exe
C:\Windows\System32\mjcm\5108\nsib.dll
C:\Windows\System32\mjcm\5113\nsib.dll
C:\Windows\System32\mjcm\5116\nsib.dll
C:\Windows\System32\mjcm\5119\nsib.dll
C:\Windows\System32\mjcm\5123\nsib.dll
C:\Windows\System32\mjcm\5132\nsib.dll
C:\Windows\System32\mjcm\5141\nsib.dll
D:\TOOLS\Medion MediaPack\medion_mediapack_2_ext.exe
Emptytemp:
*****************
"C:\Windows\SysWOW64\mjcm\5108\nsib.dll" => File/Directory not found.
"C:\Windows\SysWOW64\mjcm\5113\nsib.dll" => File/Directory not found.
"C:\Windows\SysWOW64\mjcm\5116\nsib.dll" => File/Directory not found.
"C:\Windows\SysWOW64\mjcm\5119\nsib.dll" => File/Directory not found.
"C:\Windows\SysWOW64\mjcm\5123\nsib.dll" => File/Directory not found.
"C:\Windows\SysWOW64\mjcm\5132\nsib.dll" => File/Directory not found.
"C:\Windows\SysWOW64\mjcm\5141\nsib.dll" => File/Directory not found.
"C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir" => File/Directory not found.
"C:\Users\theamzw\AppData\Local\Temp\DealPlyUpdateVer.exe" => File/Directory not found.
"C:\Users\theamzw\AppData\Local\Temp\WSSetup.exe" => File/Directory not found.
"C:\Users\theamzw\AppData\Local\Temp\nspAB41.tmp\zplugins.dll" => File/Directory not found.
"C:\Users\theamzw\AppData\Local\Temp\nsr8863.tmp\zplugins.dll" => File/Directory not found.
"C:\Users\theamzw\Downloads\rcpa_230704535731817315.exe" => File/Directory not found.
"C:\Users\theamzw\Downloads\rcpsetupg_apptvlatest-apptvlatest_2081 (1).exe" => File/Directory not found.
"C:\Users\theamzw\Downloads\rcpsetupg_apptvlatest-apptvlatest_2081 (2).exe" => File/Directory not found.
"C:\Users\theamzw\Downloads\rcpsetupg_apptvlatest-apptvlatest_2081.exe" => File/Directory not found.
"C:\Users\theamzw\Downloads\speedupmypc_4037136_.exe" => File/Directory not found.
"C:\Users\theamzw\Downloads\tamnsp_110907183030597034.exe" => File/Directory not found.
"C:\Users\theamzw\Downloads\tamnsp_160807394795712278.exe" => File/Directory not found.
"C:\Windows\System32\mjcm\5108\nsib.dll" => File/Directory not found.
"C:\Windows\System32\mjcm\5113\nsib.dll" => File/Directory not found.
"C:\Windows\System32\mjcm\5116\nsib.dll" => File/Directory not found.
"C:\Windows\System32\mjcm\5119\nsib.dll" => File/Directory not found.
"C:\Windows\System32\mjcm\5123\nsib.dll" => File/Directory not found.
"C:\Windows\System32\mjcm\5132\nsib.dll" => File/Directory not found.
"C:\Windows\System32\mjcm\5141\nsib.dll" => File/Directory not found.
"D:\TOOLS\Medion MediaPack\medion_mediapack_2_ext.exe" => File/Directory not found.
EmptyTemp: => Removed 5.4 GB temporary data.
The system needed a reboot.
==== End of Fixlog 11:14:23 ====
Welchen Schaden kann das ganze angerichtet haben? Welche Art "Infektion" war das? Und muss ich noch was anderes beachten? Ich nehme mal an, alle verwendeten und/oder gespeicherten Passwörter sollten geändert werden, noch was? In der MBAM Quarantäne scheinen noch Dateien drin zu sein, bei Avast ebenso, kann/soll ich die auch löschen? =) Geändert von pepsli (26.02.2015 um 12:15 Uhr) |
|
26.02.2015, 18:04
| #11 |
| /// the machine /// TB-Ausbilder | Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe Es war überwiegend Adware, davon aber ne Tonne. Schaden? En paar Nerven  Passwörter ändern ist Pflicht, Quarantäne kannste leeren.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
01.03.2015, 15:57
| #12 |
| | Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe Vielen, vielen lieben Dank! Dann ist das ganze jetzt abgehakt =) Du hast mir sehr geholfen (und mein Interesse an dem ganzen Thema sehr geweckt ) und ich bin erstaunt, wie viele liebe Menschen hier so viel Zeit investieren, um anderen zu helfen!  Beste Grüße, Lea |
|
02.03.2015, 06:48
| #13 |
| /// the machine /// TB-Ausbilder | Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe |
| canon, device driver, fehlercode 0xc0000005, flash player, pup.optional.bandoo, pup.optional.installbrain.a, pup.optional.installcore, pup.optional.livesoftaction.a, pup.optional.mypcbackup.a, pup.optional.regcleanpro, pup.optional.sweetim, pup.optional.sweetim.a, pup.optional.sweetpacks.a, services.exe, slimcleaner plus, svchost.exe, trackid=sp-006, trojaner, win32/dealply.b, win32/distromatic.c, win32/speedupmypc.a, win32/systweak.d, win32/systweak.k, win32/toolbar.conduit.b, win32/toolbar.perion.g, win32/toolbar.perion.h, win64/systweak.a |
![Avast meldet Malware, Adware und Trojaner: WSSetup.exe[zahl] und Skywalker[zahl].exe](iconimages/log-analyse-auswertung/avast-meldet-malware-adware-trojaner-wssetup-exe-zahl-skywalker-zahl-exe_ltr.gif)
Linear-Darstellung
