| |
| |||||||
Log-Analyse und Auswertung: Aus Email Anhang von DHL TR/Emotet.A.92 installiertWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
08.05.2015, 16:26
| #16 |
 |  Aus Email Anhang von DHL TR/Emotet.A.92 installiert JRT: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.6.8 (05.06.2015:1)
OS: Windows 7 Ultimate x86
Ran by Volker Henkels on 08.05.2015 at 16:59:45,51
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
Successfully stopped: [Service] wcuservice_stc_ie
Successfully deleted: [Service] wcuservice_stc_ie
~~~ Tasks
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0007E8F4-75E5-45CF-B431-8171592BC341}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{001628EB-8DE9-4676-A40C-70A8497111B1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{005216FD-1E49-49AF-AAE7-32F99CBD1BD9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{007B87E5-5B50-4E2E-A6CF-BDB66CFE905F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{00D8C8ED-2440-4A3E-B299-6DE287794481}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{00F85B98-E896-4AD1-82D0-40E2ACF86600}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{01043D33-B3D1-44FB-9E7C-00FFF876F193}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{011ACA84-9701-4C26-A8DF-6B1AD92B11BC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{01C7657B-E56E-48ED-B973-FF5CE2370750}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{02592B06-00FA-402E-99FB-5857CD4A3544}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0262B7E6-C11D-4A2E-B5E6-FC168F1B7405}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{02894B5B-39F0-410D-AB7A-54E6673601CE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{02B5098A-2BD4-47EB-BFB8-DAA1771C7E7C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0341E7C5-441F-4626-942C-CBD8182194E1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{03547BB9-DBF9-43BA-92D6-35A611A4602D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{03BD84EF-C7CD-4DA8-810B-F39D6BF39764}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{03C66A08-5D4C-49A8-B9E9-4BED76A639DB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{03F63F9E-A691-4CA8-BE72-FB3BF42A9951}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{04006A38-8B6A-41D7-A672-CA6383108537}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{040927BF-13B2-4780-856B-1F95ADCD3C44}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{04915D30-F89A-4E23-B9BA-C5F7821DDDB4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{049F15B9-6F2A-48DB-B973-5DA8B6972568}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{04DD5B27-2F59-4B7F-A265-533E5D7FB441}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0503D62B-ADA6-41EF-A05B-C74534847A97}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0528DAD6-CCFB-49CE-9853-AD75FA2994E4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{05611794-22AC-4C16-A90B-96D02ED4080D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0580CECD-87E5-4CDC-B502-0769F1664A7D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{059EAA83-CF16-42A4-BDE2-515704ED2AB6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{05C838AD-56EB-438A-8365-F56F68D24CEE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0698EBB7-21F5-4CBE-A04F-BACE2F8A83F8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{06D67F45-2BFC-475C-AD58-01FAD78774CA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{06FFA1EC-E305-4128-AE2F-A0F46B49499D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{073EB6FE-93C4-4B12-9948-AEF76267B3DB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{07FE6C2B-2EB0-4295-B591-37A3431C6EAA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{080D9470-8BB2-477E-8D84-79836B0ED37B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{08134291-ABED-46EB-A808-D4554FD727C6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{082E3FB9-DE63-4E25-9A98-ED5DA5745D62}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{08A43F36-42F5-4E3E-B16B-03E4DAA3A996}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{08D488BE-1FF4-473D-8A8D-55AA295AD2C6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{09057A32-92F0-4356-8191-89BC92DBC624}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{09193317-7855-4954-8238-F72600755AF6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{09962A4C-EA72-4E3D-A685-791A19B6D15E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{099B6076-8A90-467F-90E7-645B95111231}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{09D60A06-8C24-4B8B-8EBB-5AD191B09C94}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{09F856B3-37B9-4D21-8DD1-7E0503FF56C9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0A164ED6-5AE5-4AC6-822C-2F1410400698}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0A1C234D-0D88-4158-B665-40409BB460F1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0A277530-FD08-4230-9DE3-F12DD64608E0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0AE7FBE4-5BFA-401A-985D-4240A8B91E9D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0B74ED74-7049-4CC4-866B-3121719A3B0E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0C5D395A-4A3C-4BAF-B9EE-83DFA2958CDA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0CF7CE25-9450-45C8-B2E3-763DA9FBA0BC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0D2F2ACA-8C29-4437-ABE8-98DDEA82EA2F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0D96A5FC-489D-4F49-97EA-F6F940D328A6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0E94D557-D5B6-4295-A3DC-6B571845E0E1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0F871210-BC8A-418C-931E-C3E7AA55D076}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0F8B4AC0-3FEF-4E48-88B2-A3E04191B69A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0F909F64-CB47-4213-B9B5-2C4CF3409FBA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{0FB9C6E2-A6BD-4028-8A11-6BC3E0C7D883}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{106BA85B-2A72-481D-8365-4320DC810898}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1123AB35-6E1F-4891-A269-7F58B607DA18}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{11CAE663-ED95-4B57-A128-E401A7124E4C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{11DB132F-AA66-450E-A14F-27EA019491B6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1220284D-E41E-4D35-A14A-F8604F650461}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{12241735-E228-4DE2-A62C-E0B114F0D2DA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{127D4E77-2849-4F31-9542-71850049E5DF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{12A696DA-78FE-4EC1-AB5F-72D383677FFB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{13CF06A7-E750-4691-8E5D-5D57B59794FD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{13DB3878-3B04-4365-BEC1-D84484783DA5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{13E86323-0AE2-4713-A5A1-C82B949A2FC2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{142FFD3D-6DAD-430A-A8A5-9D9C066A8888}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1434E116-5AE1-40E8-AB55-922B2E7419C8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{14771193-7BD3-4D6D-B6D9-0FEFC9292C70}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{14B1EF94-BF31-4B2B-9259-EDD67143A838}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{14BD634D-EF96-4E4D-A9B1-81320EE68F55}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{14F7CCDE-0FAB-4D0D-BBFE-EB615B11F2E4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{152AEF75-D7C4-4E75-A0A0-2E9E931F0BD7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{153A3038-427E-4324-B1ED-54E96A350443}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{155E1473-4C23-4F10-9E08-DF50040D07DC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{15737A67-8D59-4B45-8CD4-4E0830667E1A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{157B5DD3-69B5-4F69-B0D5-FF164B9376E3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{15AE4CDF-8525-47A0-85BA-2C94F1FFE4F1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{15C3C165-8265-4DAD-96E6-0325B01A4421}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{16F1D3DD-4EB5-4F32-AAF0-3C8FE8F2FBCA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{16FB2A42-F904-4F72-8BAE-9ACA986BCAAB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1787FB1E-D96D-4716-A086-C95C2E910BD6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{182A2F38-57D4-4DB1-B24A-D4333045BF56}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{18889580-3563-4B3F-9D5F-F19EC95288DB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{18BEA277-90D4-41D2-8AA3-946508AD93B9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{18FE754B-F45A-41D5-B322-5B0A1CA498A7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{195EA3B7-BB1D-425F-9719-056522369D6A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{19613648-E78C-4A17-938B-24FD90AF03D9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{19847C78-EAF4-45FD-B897-C765755BF340}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{198A5A16-9559-4775-9009-2D5084274347}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{198F989C-77C2-4D26-8622-1D2CD75E2F0F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{19AA443A-4D1F-496B-A025-FFD125F7A062}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{19DFD2D6-AF66-4769-BF0E-2100D2149C95}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1A3A815B-11CE-4C2E-B3D0-C93621B4C671}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1AAFCA6D-F313-4A06-BCD6-90AC1EE4782F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1B282D42-39E3-4FFB-8228-96A410757AEA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1B6128F8-A36A-4006-BC80-D732A73BDBEF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1B705618-4C64-4047-926C-025B76F0C133}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1B712C0C-93FC-447B-ABA4-E4B2BDFD38C1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1B8664C3-ABA5-44B9-A251-764666AC5C07}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1BC9198E-4494-449E-9871-4035DE5403AB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1C07435B-5BAB-445A-824F-5AFDB55D3CD4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1C453BDC-BC3D-4AF6-A7B8-152435700449}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1C54ABDC-425F-487F-954C-294D3BC0C1CC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1CAF238A-EF49-4C92-8A62-448326E9DDD1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1CC0E667-153A-4EED-8387-E6F3E35BB012}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1D275228-B5D8-44F6-912B-7BB5CD18BF77}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1D6E78AD-270D-455B-9A0A-B015FEECCD91}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1EA0FBDB-8E41-413F-A049-927BAE6D909D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1EF70727-326E-4246-B5FE-02ACF55D09E1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1F0DB96F-CAF0-4806-8A7B-8710DDC31F63}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1F0F3190-7B09-479A-A4A8-23E33EECB4FA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1FA7B767-3A11-46AC-A450-DCF6241C9567}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1FBC1C5C-16EC-441F-B02E-AEC8AC04894E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1FC6B9EC-17A6-44ED-B2AA-2DBF7D21E4F9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{1FF0F663-2169-4099-8939-AE876F513E41}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2059F309-20F4-4474-8872-DC5BE43DA602}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{20753ACF-9BE1-4AB6-B3FF-2145C2B6CB8E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{208A0E13-30CD-4881-A445-6D8918A6A325}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{20A9A228-CC04-4C7F-B4D2-B227882950E7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{20CC6AF6-DF85-408D-94FB-EF2317F8AF78}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{20F71788-8C2D-4C52-83BE-EA44F76D1036}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{20FD5F49-EC3B-4559-BB45-B5F8E116E1A6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2134A8BC-C0D1-45FF-9C5A-FE8346810293}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{21BEA398-CD53-4939-8870-055F42903005}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{21D7B9F9-B547-47E3-91D8-2F3776A40961}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{21DA771A-51BD-475F-B6E8-913FB8D555BC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{21F1985D-F458-4467-8AE9-B12EC1E3D40B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2214B2D7-DFF6-4E32-B502-4B9CC5FB1AE6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{221DA4D0-653D-493C-BDFD-A3029C8DA821}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2258CCE3-17F7-4864-8603-653698B47821}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2298C1BF-3145-4551-86EE-8585C0FA8AA0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{22DF130E-DA22-4301-A584-1D84065DAFC1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{22E137F2-9DC5-4412-8D9B-9ECD69316A8F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{22EA7191-09FF-4C1B-920E-6F12C2757EBA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{236132AB-6628-426C-8FD5-B18E7ACA27D0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{23C0C92E-9226-4A29-8A9F-CC48FB03814E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{23C91318-E854-43C8-8E74-29B04C1137F2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{23D8CCF9-427F-4CFE-80FD-FDA77AD0D4C2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2402D159-4078-44EF-AC1E-066A23466573}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{24042587-8286-4439-A9E8-6864A04589C0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{24683FB2-4784-47BA-BEDF-BB202CA5E7A6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{24995C91-42E7-4E4C-9B5F-B8F3D8F178E7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{24BE99F3-146C-4FEE-A138-E642EF1D94AF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{253B2876-D352-44EB-AEFF-25CD5D00FF78}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2554633A-7A81-4199-8D59-BBBEA626BBB4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{25752B46-EAAF-4761-907E-51A12A9705C3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{259955DA-DC46-4720-9F70-91345DF7E6C0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{25D69B48-4C25-4A0F-AD15-BF5816B1CE7F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{262F3FB7-A528-4DD2-91EA-942CE5A2320C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{26BF52AA-9C5B-4A4A-A8D1-576287FA03B2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{26C375AA-B6AE-43F2-A0B2-27D5EE32B1E2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{26F6EEF1-8192-4C14-8840-C0D677BEF081}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{273379B5-A110-4329-80E7-9C5D15CC2FEA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2775A0A4-9C63-4E2B-98E5-D75C35C85CFB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{27F107CE-C3B8-492A-AFD0-8B500B0D1771}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{27F44DF3-7749-49FF-9CE4-A7D4A41ADD9B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{286747AC-0697-4F64-B2A9-3D06CE240C8C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{28A9431C-8691-4BB8-A9E9-02DE677BD947}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{28E7635C-AB1F-4917-BF01-8151C0E2F51D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2902568C-9C43-4376-AA6E-48CFAF4C2C3E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{293D7BBE-4DE0-4062-8C34-DC599B584AF2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{29652DDD-813D-4E9D-84DB-B0ED7D94570C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{299E9208-B240-4FBA-9490-84515FC01B21}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{29AA4120-8355-4AA7-8D4F-382FED8B2391}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{29C4AA5C-F822-4AA6-AAD7-CD522D2552A2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{29E39221-594C-4545-AC47-AA98DB8EC0BC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2A431F7C-59D4-476B-AD05-CA754796E908}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2AAC964A-F48F-4B40-81B2-1524A1CCB97F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2AB26DE1-B50B-4BB7-A58C-87508D6AA5C8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2AD2615E-6D06-44D3-B512-4CA835BC085E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2B23F99D-0FFA-40A9-93A8-D93CAFD544D5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2B7A1F52-FE1B-4180-ABF1-5CE71E6BDC75}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2BCAA780-89B5-4F6E-8EA9-5598ABA9EFE5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2BDB10A1-4321-4687-A958-EBF1BFD82F8C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2BE912ED-DA5E-4F79-B8BD-351043FCCC5F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2C66415B-3370-48E7-B8D6-B6AABC459855}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2C6B0CE8-5063-4B33-AFDB-8C374E4BB82F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2DD420C0-DE83-4D78-967A-3D49887A3A8E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2E006457-BF09-4C78-98D3-055D8645A492}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2E1CEB50-1E70-4272-80A9-137E8B62CCA3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2EC9E38D-AABA-4D5A-AA96-E4CE45610039}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{2FD0C1BB-028A-4458-BE25-093B7CA40A94}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3016BC47-50B7-4A4F-A362-E1A45218B536}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{30B40725-E996-41E2-8A38-DC65D4680C51}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{31B90F00-8AE8-47CA-91AA-BDDED9E99D16}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{31FB4A3E-9312-4A49-AC0A-9B844F591FE0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{321B0F08-3EE6-43B0-849B-53B2B0C78A9D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{326269E6-9D6F-4AC7-8C57-73A1BC817BA7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3282A51C-8728-453D-A8CC-1A7AFB4C9C27}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{32F15949-767B-48C2-9E19-09C33F47D529}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{33630ABA-B72A-4A71-A334-C75843C7321C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{337B7472-862D-4F1A-972A-F90A9F3D20AB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3390A569-99CF-434F-BD26-668EC01A85E2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3418B201-8DD2-4D05-9915-6447D4CD269B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3458583C-AB6A-4CFE-B6E6-CA946CABE977}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3476772C-6A7C-4C52-8E51-4D6F86817EE9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{347ADF5E-878E-4F4E-B1DD-620204D36582}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{34CF2A9B-45ED-4B5B-8B7E-B490749C55A9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{350FE468-5C6A-4F04-8FA3-6F4F62187797}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{352321F4-1EC3-4ECE-AC95-A9BED4316C81}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{35277994-83DB-4138-96AF-04A009B42CF8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{35293FBE-1678-4469-B20E-57C89C938EE6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{35610AEB-7221-4DE2-8148-AB56CCC1DDFD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{35E72CD9-5ED9-4705-86EF-14E1FE594AD8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{364D9BEB-6A62-4116-B188-E788A4CD51AC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{367DA9A7-D0AA-4BF2-B657-96DFC3122E35}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3703D166-B54A-49CD-AE2F-6F092F49D660}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3792875A-F5AB-40E3-B4A8-461EBB57318E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{37A8F79F-0D28-471A-B0C4-E2E06F1E9E15}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{37B1BE8E-25F1-4EDB-871C-C7C280360DBF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{37D0F7C9-16C9-4BF8-99FE-91DBE785A5F5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{38079566-6826-4AAA-89E1-D7FE05B94C07}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3895D8AD-16FB-4F11-88D2-1AF9A4A3B2A8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{38A759A9-065D-4DB4-B2E3-CE98EA799C21}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{39714E67-7357-413B-8A0F-6A273EE8705D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3A079B55-7C0F-4AE8-A169-7872B64FDDA0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3A212E49-2C09-414C-B163-FF170B02F314}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3A266B98-2B9D-44E9-ABEF-C113C273AA9B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3B0EA6B9-283B-40A3-B56B-C2F6AFF1ECB3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3B24923F-7259-433F-8B2C-7BD267FFBE69}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3B4871A7-D97C-4A18-966A-DE6D723A22B2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3B953D27-71B8-4AC6-9BC0-6B88836907F9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3BD92B00-ED1A-4D49-B44E-E12BCA7E93B6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3BEEF6F5-1960-47FB-AA4B-60998205A05C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3C0160C8-ADAC-4AA6-AB13-047D1F578C77}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3C030C6C-FC74-498E-9393-5B609E46AF01}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3C105C42-1B87-4850-B136-EDFAEB939606}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3C68BF7D-8F6D-42F1-B82B-F63FEB8F68B8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3DA4DE11-8497-4B8F-8DEF-5B71A1690776}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3DA675D0-2A43-453E-BF23-485A02DEDC93}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3E361319-7F7A-4509-BA5F-75623BAAF267}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3E76FB9D-F0FA-4593-B5A7-CB9B21CE330D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3EC5DAE7-D345-4D9F-9A88-74353A8F8634}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3F570388-A3BE-42C7-A0AA-0FDF72BA4D91}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3F650CE9-A5A6-4C30-AF9C-463718060FE4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3F6D2D39-BD66-47ED-9B3A-ED5A26C5948D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3FAD52F8-C339-49FB-9B0C-6666772FA987}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3FB97863-0427-4295-B99C-1E0E82737A02}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{3FF7BBF8-F862-42DA-8742-E15561183656}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4004E242-25A4-4B0D-8896-ECE98955A6C4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{401C1BDE-B989-4D65-A411-9B42D4897E45}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{40829431-AA2D-43E9-B242-B722CD38E0D3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{408F48A7-2FCD-4A67-8D40-A77AFCA9F7D3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{409F81F8-F96F-464E-B89E-7B82203A7C61}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{40AE9699-DD5D-4004-949A-2811CFE63258}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{40B84723-5851-487F-BF00-FD0DE5B39252}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{40BF6384-4B97-4EB3-8A84-C06B8A87718D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{40C30DC2-86DF-43E5-8A6E-6C8499E79E73}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{40D999F5-C727-40B3-8189-E3BEA39F9FB5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{40EF6A32-1831-459F-9C3C-0419A48E88BD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{418E564C-F3C5-4560-9815-C1E98B5B558D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{41BC498A-046C-4F55-AA51-8D38117795E0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{41E11416-27DF-452C-8DA2-222CA7567B3D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4202B666-9FBB-4A87-B89D-D7AAB7B5539E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{427A038A-2F5A-4156-8621-27A0835FF886}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{42800048-025A-4E0F-8133-EFCB6FE405E4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{430AC2A6-C721-4066-BD52-FCBB7B591E89}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{43439980-99A4-4829-8C33-28F65CF9B41D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4347F8F2-43C9-42B0-A9AD-D36BABFC841B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{43BE42C6-0924-40CC-9315-652A04D5FF82}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{43C0F7F9-7ACA-4EB2-857F-1CF191617952}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{440602F3-CC59-43FE-AC2F-828AFB80797B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{44A06BBD-69DB-4985-B0B6-8D9F060552AD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{44B57770-5B9A-4B33-89E6-B5DDBB950D16}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{44E94A8D-A9F0-4799-BBE5-011A3C47D66A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{44EABC15-FE62-4D8B-941B-4C4C88ED69FB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{44EADE76-DEEE-4872-92E8-DC9F693E7DAA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{451662B2-E0D1-4AED-9EA6-9CA125B89186}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{451AC6DB-D5AA-4C8F-9C30-0F78034D2839}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{460CE102-8DAA-4C82-9EC3-835704600508}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{46259B65-0BB4-43F0-ACF6-E7BD7D1268B3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{46844240-9F58-4EE5-90FB-E822CDE49C76}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{46AD5B29-A716-484F-9A47-F2752A5102A0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{46C92A35-F9DB-4120-B14A-7A846BADA27F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{46E9FB75-64A7-4B09-80B9-0CE26954194B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{475DF49C-9C91-4003-9057-52E8BB598C3D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{479AE767-3F07-426C-B37B-285696263E54}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{479E8DF3-0CFC-4C69-9830-76BE5DC95D8C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{47EDEC08-307B-4BC1-997C-EB39C8143D72}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4826298B-F340-4F83-A391-130F38DDDE4D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{48EEEF30-35F4-4175-8A71-A23707E6D2E9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{498FF74A-8624-45C2-A586-5247D2D1952E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{49BEC408-10E0-484C-AB35-7572825845DD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{49F7E6F8-295F-4BF9-ADCB-0ACD8B2FABAD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4A22EBA9-C6C1-41EA-B246-6CF3D1E26564}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4B143409-8BAF-4DE5-ABAD-18E384A77ED4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4B303411-11E4-48E1-878B-B282AEADABB9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4BEF511D-7A06-4744-95E9-CCF3037F427C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4BF0F9DB-6E48-40CB-9C87-22C5F9F3F32D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4C4DEE79-6A9D-495F-BBB5-0EDA1E3B5C18}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4C54E9C3-0958-4536-995A-0AF44A95CA7E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4D1B879C-1DC7-4AF1-AAC5-CE24D06B1234}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4D77D577-2651-4324-9889-767A2F3B3C4F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4D7EF7F4-C68A-45FB-8821-9021DDAE899F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4DADFB43-5ABF-485D-8ADC-B82CE7014BDE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4DDC1D21-AF6E-47E0-AEF8-A9E5F4B422BF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4DE1AD73-9BA7-48B4-9A64-FA28F6D47095}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4DE6665D-02C6-4108-8F7C-E00EEDE92C3C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4E835F24-0927-48C8-A319-2FAFA2C2919A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4F037AB3-F32F-492D-A5E9-836F616ED407}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4F2B24B1-21E1-4E74-89FA-23065C12BC2F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4F67A22E-9D8C-4E26-A701-D27764ACA7EB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{4F96F87A-A207-4AAE-846C-54ABB253B6CE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5042A0F0-4542-4388-AA2B-7254B1FD3335}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{507B74B4-D949-44C2-BB44-C5F5E2A78B3A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{50AC247D-7EE5-492F-82BE-A5FB58F4F3EB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{50D06836-535D-4FD1-BBFC-737EF17C23F7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{50E1A1F6-3338-456E-936A-0E6C54BBC3D8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{51303601-30D8-48C7-A696-48C41B31F9BE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{51702CC4-2AAF-4C39-A3C2-95E8F54496B2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{51C0D5AD-7556-4C57-9B75-CA3299CC4977}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{522ADD4D-0CC5-4697-B212-A0D20C0F8889}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5276A168-300D-4270-8CA1-644BCB241B18}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{52A640CA-CC02-4BA0-A343-E6EF8B689E51}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{52CFDEBD-A8C8-4B42-950D-64DC7306DE06}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{52F0BA33-AD08-485B-921A-D2A4527EA54E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{535E5DB0-3979-437A-8A2C-A9F6C5E6FC69}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{53C9A1BF-A141-40B9-9085-A22B99715E54}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{53E74448-133F-448D-9E8F-7A93EB8EEC39}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{54824387-6671-4C74-BC5F-6C40F99440A2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{54BE252E-3095-488E-B661-3E0D703C0EE9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{54BFEFDB-00A6-4F66-9847-6E31F5680F9D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{54C80357-AABC-4A67-9D38-8DABD6350F38}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{55199683-31D0-4C08-B16B-459766F45C1F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{552C6646-0CCA-49DE-9F09-676892D2F2D8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{55502304-5366-41BA-89AF-0B143A3583C2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5599815F-E9B0-4A35-82A6-01C426099AA4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{55A2E945-943B-4A21-B5BD-778103456793}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{55B7C60F-B99C-449E-A1E7-789ACA1955C4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{55D6EAD7-0D78-42B9-A238-E2315A1C82B8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{561A30EF-5036-4C9F-B50B-E9BB3547C008}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{563219FB-9B9A-4AEC-A595-889E1091BE5D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{563E4B55-56F2-47F5-9187-7280A4A8C432}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{563EA241-6824-467C-8CF7-24A42AB9FF8D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{577E2EB7-D302-478C-B759-71A9D90B78A7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{57C6C693-3F6D-4E80-90FB-FD20D988EFBF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{57F22BA4-4F4C-48F9-96AE-ECADA343C31A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{58017C99-FC42-414D-8705-16B3A30A6326}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{583EF630-178B-40C8-8D81-F31708CAB8BD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{58740880-F68C-4ADA-8863-645B28B20D9E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{58B75E9C-87D8-4659-967B-FB1E39395EA4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5941F117-B030-453D-B8E2-51E9782A2E3D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{594C569C-3C70-4B20-8D8A-F67CDFF5DDD9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5977BC26-BAC4-4DB1-B64E-8619DB829669}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{598EA0DC-00DB-4D14-A726-CC4E603D34E0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{59D79DEA-1B65-423C-A966-D815785E7EBA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5A456F2E-46E3-4832-9C52-D4F8E9952CCA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5A7E0BFD-6CF4-47D3-8DCE-4DA44C7338BE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5A911911-9701-4D82-BC71-BC2E7FC9B3B3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5AE1A5D2-EE83-4079-928A-B5D408E6FF95}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5B24B84E-1F77-4245-A0EC-B1911309CE0F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5B262D0B-2BF0-4369-BFDD-6D0C0A9429CF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5B5BA9AD-0FD3-42E7-A1D1-08D61A99565E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5B7718B1-EAE1-4AB1-ADB0-B86FCFEBB53F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5BA86D97-D449-4B2E-B110-2CB89F710A7D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5BCDB90D-5494-4E3E-A71B-6FF2A7119BFB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5BCEDFF0-5ECC-455E-BE68-EB798CE2FFD9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5BEB4496-9EC2-4FFF-8CB9-C486F7CAA087}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5BEEA47E-9F64-4954-B449-EAD59E85EC2D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5C42FA3E-3C93-4FAE-8399-8D8F5DF08721}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5C5A6420-E5F5-42A5-A648-A4C1225479A5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5C818820-A538-4131-A779-548ACD1451FB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5C8EB6E1-3BF3-4348-A80C-77005EF4B75D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5D1A24A8-B1FB-412E-888F-55D44F30321D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5E16561A-4361-475B-AD11-F14186894BF8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5E49E5C1-4639-484F-BCA7-C9E1E901334D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5E53D44E-AC15-4B98-9F68-031945800AF2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5EA33AFF-0766-4156-B320-4204F8F7474E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5EAB5F91-74A6-4F0D-A67A-3A448AB8FE6C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5EBAB33A-90AA-4816-A8DA-D533A189A287}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5EE6C35F-66A6-4D46-859C-76C1F91A9F81}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5FC9D73A-1A44-4ECF-9891-C7B62C1CECFF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{5FF46F82-9361-4930-831A-D18EAC2A7F5E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{604BDCF7-C428-4C83-819A-9ADE877395E4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{607A8492-23FA-4F99-A9EF-EEA693A3364F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6100EF9C-6B73-4BB9-BAE0-9F7ED2FEC302}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{61296298-8571-4ED6-9324-45FF85919A43}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6139AB8C-4B81-483A-8743-C36B82353EBB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{615B9CEE-7B4E-4B3E-BF2F-DFAFFEB1B5EC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{61720696-967F-444D-9BE6-E0EED4A7BB1F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{617C9E85-82A5-497F-A2C7-8FDE6B1D1E87}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{617D56E3-BD64-4F5E-97C8-210219D73EC1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{61D41770-E238-4DC6-9E47-D22EF3100CD0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{61E90D1B-27B6-4848-897E-CFAE4AFFAA64}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6200714C-AFD6-4E34-B0BD-D104BC43224B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6212BA4A-B65B-4518-83A8-87DF86436927}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{622019CB-636F-48DC-BF11-60C8D843DDFE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{62687860-7DBD-4E7C-9C85-69E4AD2C679E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{62B7A331-AECD-4DCF-9484-F92ADF0FEBC4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{62B7C464-6595-4765-BDDC-D739109BDF3D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{62BD9014-1DCE-4D22-91DB-909F0B23A8FB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{62D35909-C615-4F81-B5A3-D7B2526FA178}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{636211F9-5F13-4F1D-8F89-449603328948}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{63C98DE8-5F94-41BB-B11B-C281020353BD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{63F16B67-CEA8-45EE-BCF3-F3F3C2F9B188}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{63FEFDF1-AE46-4A8D-8D05-B89215F1862F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6431D888-5EE8-44D5-9C88-BE902D26643B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6450EF56-E835-4CF6-94BE-113E22A7203A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{646AC531-6AE5-45EB-B289-0C28C5545CF4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{64839FC1-EAAD-46B3-B089-62DEDA429668}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{65111534-150B-41C7-8CC9-97C0B11D392F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{654FE436-CD69-40B6-BD4E-FD0A6E44836D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6566E1E3-80FF-4656-8B0A-92939C088633}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{65C354C5-7887-4FBF-9E6B-1AC66C529F8B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{668575F0-4384-4AE6-9F1D-0046F326A479}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{66986BB2-1105-4FDC-8A3B-C9527C56072B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{66FE2DBC-E3F9-4008-8543-6AA93510BD8E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6789506A-42A4-4483-8580-0BA82FC75FA1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{678F5CD5-DE17-4DFD-8F63-F3DCA34B8B87}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{67E5C5E0-7D3E-4A73-9C35-F9A5E3A4B85D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{685F1B33-FE60-45F1-9DB6-E58D09E25735}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6860CDE8-D559-410E-99FD-879AE223A1B9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6868D654-63EC-4222-AA1A-C72CBA59FC6E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{68924113-33F1-406D-BCC9-7D6DEC504D72}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{68945844-B24A-4F6F-893C-E8D33F1F4A86}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{68BEAA3C-05C6-4507-84A8-05FCEB403C34}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{68EB7481-875E-4693-944C-6DF5DDC62073}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{68F089DB-6390-4608-9633-49F9953C14D8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{69874CD5-3B09-4579-A2B3-D79EF80C1582}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{69AA5F93-4A92-437F-89B3-93A76D2E2314}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6A261A2D-B4FA-48DD-A8A1-B6E081723709}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6A5EEC48-D400-4353-98CD-AE3A745661EF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6A6E6247-BEB8-4025-B76B-7D15C56CBC1C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6AA95BE9-8403-4B07-BAE3-1F6B3917DE3F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6B81F4C2-B139-4581-B560-D07D7DCE9693}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6C0013EC-549C-4F88-8088-6F084A2F3A43}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6C21C816-4C09-4CDA-8091-DC1648BC56A2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6C324293-F721-47B9-BC22-3E4862DE9CE9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6C4BF0C0-C1D3-4931-BC08-0B39FC72B2AC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6D3D233F-AF91-4BD6-86E2-B80A8E728824}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6D4E9EEA-FFBB-4EA3-9CED-F43DD585C67C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6D596146-C05B-4C29-BB79-C7C292409C89}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6D59E73C-2569-4B0F-978F-D1AFCFA278BE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6D6205CD-EF7B-4E87-9C54-72A740E82C9F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6D7B387B-06F3-4990-8B4B-5442B5E1388E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6D83FB9A-B2D5-4687-90D9-7881C3CAD37C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6D8ACDCC-FBC9-4388-B132-7CDE89E49CC7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6D9433E0-1B88-4985-AB3D-5153A248DE56}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6DE946A3-4198-46C1-9FF6-2B0862AAC7E7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6EBF642B-8343-4ABA-B5A6-30BFD5CD38CD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6ED0F841-6EA3-48DD-8D19-C551307576F8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6F297A7B-8A3A-4774-9210-ED33D572D375}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6F4D2BA7-5DED-4315-9601-09E46BCD8E78}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6F7F6A7E-9E7E-46A4-8684-2764CCE4DC3E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6FA5D193-0D48-4FE6-8BFC-59BA4D54D91C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{6FEDE804-955D-4601-9CCD-4A3FE1499D94}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{704194DF-B1C3-4090-BC9A-971BD7E40DBC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7051BD79-3304-42B3-912C-68ABB57C3C91}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7132EA4F-8F0D-49A9-BE52-1DE26745E44A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{71A0E082-9B5E-426B-BAC5-CD89E174D597}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{71ABBFC4-F399-48C3-B5B8-1FF4C5EB3E27}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{71D0F7F0-1C18-47A6-86FB-334D39EBB086}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{71F77943-791B-4C06-BBFA-D5960BE903A2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7245A453-4433-4B57-BF30-269AB03BC236}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7289CD7F-678D-4813-80DA-BF3865752E5A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{72968E38-42AF-4869-8D3D-27296445BFDB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{734CE7E5-FF11-4B1A-B6AE-F08D72EE6B4C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7367622F-AD2E-485F-860B-D801B309BAA1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{737D4A7D-16C5-4515-8D06-9E223A985C09}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7434ED79-734E-49EE-B613-2440422829EF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{74FC54B9-46E2-4A22-8943-1892DD0E563E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{751B2ACB-61FD-415F-9EEE-19B61BED8F28}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{757D7E53-B2E6-4ED1-BA3C-BAFD8CAABF39}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{758038F9-233C-47C9-BD92-7C42272E89D8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{75FEE702-3CDC-4DE2-8AEE-E8B6F1D71338}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{76ED7E13-4F16-41AE-AE2E-00854202F947}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{771C1A33-F370-4EA1-BAEE-C4DAB01663DF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{774C7015-428B-4B7D-9BA7-9FCF58317EF0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{774F18FA-52A7-46B6-9A7E-E0FB8EE66E32}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{77A6CCB5-69EC-4604-9731-4BC1B2702C31}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{77B4DDDC-9F6F-4853-A751-581FF8228118}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{780DCEA9-CCFF-4C6F-A0E7-424F0AB33176}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{782C47F3-BE5A-46C4-B001-833C8A3521BC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{78566FCA-E14F-4F10-B5A8-0AD15B68B046}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{787D8872-0079-45B1-A951-4551A3A20CF0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{789486C5-D04C-43F1-A46E-62E1DE5CA8EE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{78AD59FF-C059-45C5-8604-37A2D46C2195}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{795C2C0B-7FCC-4F54-BC26-4CB799D9402B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{79B1C211-4AA8-4961-910E-7571B7111E20}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7AE024AF-663D-4194-834B-AA33E5739875}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7B3D44A1-5DDB-4663-A22A-BC57BE2902CC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7B655266-1FF0-4D23-9112-71A8616667AA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7B805E95-0A5F-4603-BBDF-40CF7AE44C41}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7C139DA4-DDB1-4360-89E0-BD655296A3A5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7C7207D1-4F3B-4F77-A113-464A715E6B55}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7C96E840-CB77-4843-B340-A1E86A7210F5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7CF8635F-4EC3-4050-9DAD-53306D72D5D5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7D2068E9-CCF7-4D36-99DC-45788082BDA9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7D3EDA27-3DBF-4A3E-85AD-FFAB51118755}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7D74E3B3-73CD-4161-9442-20BF34CECA88}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7D8AF2CA-2FF5-4CC8-B35B-D0B822607763}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7DC5989E-B94E-4F99-B090-86117DB235C5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7DD17346-FB5A-4938-A8D4-04933C429123}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7EBF4F20-1BEE-489E-BE46-9C6CECD9C5BC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7ECB03CA-BF66-4D54-B2C4-73F9BA28C0DE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7EE4ED50-AEEF-40F2-9F57-596BE09CDDE6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7FC20F98-67F4-48EF-80E0-558EAE7D91F5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7FCFD5EC-907D-44B0-865A-0E372D6A9340}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7FD89255-00BD-4069-87AB-A6EDEE67E6AD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7FD8D1CA-DC68-463E-83C2-15C074535319}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7FF33527-1F70-47F4-A11B-E8765058C198}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{7FFAEC42-813F-408E-9A49-32C97A941BCA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{811411F4-CA07-42A1-9CDD-B87998AEA9AE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{81B6B70D-4BC2-4253-AEE6-70A6B8EB0E62}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{82122375-7833-425D-B029-A1B313820796}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{825DB63E-BDF7-4030-A2B3-4076F4168163}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{82734E8D-E9DB-4688-ABB5-9930B799B06B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{828A19B7-259B-4811-8458-7AA7A780181A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{82B0B341-B54E-4B14-B3C0-8107A4D93C5F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{82B6A707-6AED-47C1-A245-6264572C62B7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{82C0B062-5CD4-489B-85C6-B8F083EE778E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{82EBD755-7C7B-4730-A211-AF1446C83516}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{83257F14-25B6-441E-9ADF-6AD7CFCFAFC8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{832A416F-A4C1-4DA2-8710-7DA1E47AC646}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{832CF21E-D595-40D6-90EF-1EABC6A80C14}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{833D8778-7CD3-460F-9B86-DC354915D5BA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8361598A-5431-4F28-8327-040BCCA18D31}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{836B0AAD-D17D-4E15-8E9B-FF95BE941F90}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8393C64D-937A-4BA6-8FD6-63D7AE5FB303}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{83CAABB1-A627-4ED2-BC5E-1E888C434CFC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{84296D5E-0040-41F8-B973-2057D9F9C1EE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{84450A27-4D52-4114-B6E1-00A4D2C1FA87}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{849D36B3-2D13-4F68-849D-21254644AE9D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{849DE7C4-39E8-42D0-B377-396493A30014}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8698B274-A5FD-43CA-B2D2-EDD8B2C7ABB7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{86A67EFF-93DC-4F0E-B029-5AD3E443270B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{876FBA1E-8936-40F1-AC55-20814EA86E81}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{87A88744-6F4F-44D1-885E-35F1B68479D3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{87D084FB-B764-4427-90D7-4BC7872B5C5D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{881EDA38-97D4-4FE3-8D6A-3419E57B82D6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{884DE056-B136-4DFF-9EF8-34264D9B9CB6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8852301F-91EF-4824-A536-C7DAC95FFD72}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8869B484-A833-4220-BCBF-BAA869A20636}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{88C8EDC8-690A-42F3-BE28-82B8E9AB63F1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{88CF5DA9-D7A9-4CB7-8B96-19A2314B8DF2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{88DE0796-5DED-45DB-8D7B-3118F92581A9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{89973771-F86A-4A79-8A54-CDDC4B3AC7F2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{899DF1BE-0ABC-45BB-9BAE-36383D1DD42C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8A1C8C98-814A-4E04-B65E-7F06693BC49B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8A2C3B99-B0E7-4C30-BE76-C7A8A4E95517}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8A7E65B7-E0BB-4D30-905F-A2D1BC14CE91}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8BB827F7-E926-44E9-9218-359F74BC87B8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8C6A1FDA-0294-4C1C-8680-00997475D57A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8CD8C7E1-2FB1-4120-84B4-C2931ECA27DF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8D23B793-7130-4EFB-883B-E855147B238C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8DA3C014-C276-4FBA-B2C6-E3B4048D41E3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8DDCDDE3-C23E-4741-BA22-EF9DF5FDF23B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8DEBA51C-21E6-40AC-B911-35B90F949DA3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8E74582E-C9CE-4AEC-A46B-9870B744A97A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8E8B3727-1D83-4BF5-93C7-8087A6963B00}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8E9B6066-2768-4A7D-844A-8FEA05B162F5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8EC0E324-F424-4417-89C1-E2DEF5849B49}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8EF3B990-56C7-4F2C-BF0D-6CFDDBCCA91A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8F393D22-2606-4554-A93D-8E2A26A9440C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8F7C20B3-4ABE-4A80-8B10-4BE0A9CFC240}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8F7D9E12-640E-4E9D-8B7E-799E55B6E001}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8F7E688A-FEE7-4238-B259-ED55C57B550A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8FA0396B-823A-4970-A224-403AC17CD2BD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8FB22933-DF4E-4C56-AAE0-E258883EC853}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8FE0CEF6-E3D3-41BC-BB3D-F0FA59068EA1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8FF0D9E4-7E8B-4704-91AF-C33D06AF02A1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{8FF331A1-83E0-4614-9F38-4A4368720245}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9041F6CC-9BE0-4E77-9B54-DFF0659772DB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{90533E82-1A95-47B9-981D-181622118CF9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{906CBB55-018A-4690-9BAC-BAB5D5BFAF71}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{90AAB9DD-8D24-4592-848A-879CD9052ED3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{90C57DFF-1E6D-41EC-A8D1-EABBCB16729F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{90E68065-B484-4C95-AFF6-E2F31049BE8D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{91BDAACB-E9E0-4136-9E1A-B3179FF0B279}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{92D1179B-11A8-43DF-B002-51AFDC86FB4C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{93084386-14B8-415A-9535-1BF4DDE354DB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{930E2DA8-1059-4469-A4ED-528845D3A52A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{930E93EA-164A-4E3E-921E-105F8024E55F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{93704A81-E77D-4853-8C4B-0F25467F3B7E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{93966A82-2D8C-41B8-93E5-51907C66D1C2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{945B3A93-E10B-4E2B-833C-383DFE8E8E5B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{948766C3-BCFB-4756-B16D-27427D0634E2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{94D04C83-C8A9-44B9-BEBB-AB2E43ABBB57}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9570D2F2-C762-4CFF-AA64-BFC15DB6A247}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{958DEEC2-897B-446A-A861-7E02448A4619}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{96711990-634B-40E4-99E2-795761671C8E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{96BC3AE1-B782-448E-A88E-1AA14528A42D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{96CFB273-2897-47C2-95FA-B5724029DBE4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9701447D-05CA-4EF7-8843-EC4A36830431}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9742E71B-149A-48F7-87B5-DC0CE3CC2603}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{97C4FE92-942E-4A05-9951-A77813F1923C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{97E1B25A-053A-4D7B-8C5A-70BB765B9090}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{97F0F998-9EA0-41F9-82CD-86BB785F37D0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{986D79B8-ADDD-4C38-84EF-CEDC774ADA86}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{989701DB-297F-40B0-B3D0-AE9351117A6D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{98C79CC0-201B-4A88-856B-AA2D8DE46738}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{98CB49E4-2D04-4045-9CB8-433EC1E13BA9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{98D15616-F72B-404E-8194-988BA74D84D0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{992D43F6-CEEA-49FF-B14A-8DD9D5589996}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9948E8DE-42C0-4460-AD30-950D13DBC38B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{99C39163-BB9A-43C7-87CD-9C893A7627BC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{99CC1856-48DB-4A57-8DAD-52BCBBA89E1D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9A377599-8EC0-45AD-AC8E-1B4F826B9CA4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9A41521E-8D27-4D98-AF7D-75EEA89F34A8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9A6400B6-7272-410F-84D7-7F4754A5A666}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9A6F5228-EBF2-4FA5-ACA8-5446ED69786B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9AD7D938-12EE-4B01-A25E-52E5A613E53D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9ADA6F7C-925D-4C13-9316-D3E87D4B86F5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9B586450-7ABE-4A44-B8C3-1D05C96DB2DA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9B6FF736-81C5-41FF-B093-CED6A6C47848}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9B89A242-CDE0-473B-A8F4-8F39F2DA89B8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9B8BD3F8-FDCB-4ACA-B4C8-5907B0D50122}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9C42DEBC-3CC1-4F61-9B91-B7AC94B8A4FE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9C96EABA-CEC8-44A3-9073-55EF95FAF248}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9CC0C262-9ACB-4B19-BCB6-BF056B4266C4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9D5E259D-869C-475C-8508-C5F909316A4A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9D890F19-AC6E-497C-B548-DD5C28EB1249}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9D9A1FE1-59D1-4E9E-88C7-B9AD0452DCA1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9DA015D7-AA5B-4E0A-8F62-F94F637CD141}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9DD19463-D235-4474-8B71-B81018B64198}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9E28B8BC-2438-4440-A3A8-5D9CD41B4F8E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9E71AABD-B495-4E69-AEE2-300BB136365D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9E77A56B-511B-45F2-8DAD-3E4540191790}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9EC0EEF3-D655-442C-B3AC-1F57FB8EBF25}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9ECEEB17-9914-4137-AA72-50C9F63AC81B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9F35FF20-994A-43C6-842E-02DEAFB13059}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9F69AF80-653D-49C5-839A-BB60EE346611}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9F6B7441-86B9-4A1E-9615-55629E15CB1E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{9FF3A02B-C1D3-4F72-ACF6-33B2A6BB7312}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A01E62FD-E2C9-4750-A4EA-1E8FE4B300AC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A1174248-6470-4A03-9037-347EC757C0AF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A124C897-E242-4800-952A-16AC7F5FBB20}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A1A278EC-48E8-43C5-BD2F-28AF62A5904A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A1F0B434-A2D3-41DE-8264-1A6428471A02}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A247FBDF-1BF3-41C7-8BBF-ADCFDABFC2EE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A28884E0-29B1-49A8-BBB5-0D47EFE4A64C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A2FB3918-4F7F-4724-A9D0-ACA47E8DCCDA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A3846E79-82FB-406A-8221-5527F19B9F6A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A38A79AD-774E-467D-949F-4D81C22C2134}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A39D9AB5-1C7A-4E97-89EB-A7FCFB3073EA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A44C016B-9438-420D-AAE7-50EBB7C92B00}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A4A1BA74-3310-45EC-B9D9-5F3EB0F8B274}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A4A5E080-0F95-40C3-87F0-DF374639D4D4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A4B6F839-D0B3-4055-8A38-D8BF3469E242}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A4D5D3DF-1108-4958-8878-936E3AB8661D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A55AFBD2-21CF-472C-8656-9E2F42DD747E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A571F70A-DC1B-43CE-9BD2-61E804806BCA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A5737EE1-CC5C-4C0E-BAAF-1938A9C7C166}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A581390B-C459-4264-A223-23C6880C75E8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A58EA2BD-E637-4C26-8FBD-7C3BFD9B7EAA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A5B4C360-FA5E-4EB6-92FD-B21FE0856AD9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A5EB5190-E5A1-48BD-BEC8-D64542BFE9CF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A5ED5CBC-843C-4F50-9C22-F1DAD160B0FE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A67C82C1-6B3A-403D-9FC8-F66967A8D1B0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A6809048-EC2B-489F-97F4-3DE4F32D827B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A684A27C-862D-42EB-9C9B-9F66D6F1B4B2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A6A5CD25-1586-4E63-8E1A-9EBFD8207AE5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A6F0D33B-7830-4C73-8185-79EAE7F80A6C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A71B51C2-6718-4A62-B8CF-6EE4D4AF9CC7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A782354D-4395-4658-A5D8-02E9BD1CAAAD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A7BD25BD-1A74-4BDC-AD13-756D4BA45E02}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A7C2384A-A7EA-4486-905E-19B188660432}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A85583F4-3542-41D8-82DA-719789A4A00C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A8B4CFBC-8900-4F07-BC8B-947EC5B36E6B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A967A6A9-8758-43A3-91E3-89AD793553D3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A993F54C-90DF-424B-896A-53E0518A9216}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{A9C2195E-DC47-4B56-97B4-78D05A70D0B6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AA01BB0F-DE19-42DD-91CC-0EC8016EF999}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AA1D3A77-4B9A-4A61-83B2-8A02AF2E9F25}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AA1DAE3A-2CEE-4375-AF27-276D279F3CD4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AA36F4F4-922D-4118-9ACD-B0D20AC0D18C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AA399467-61B0-4F89-8589-BDCBD49ECE59}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AA43F9DC-176F-4A6E-A3B7-342761E8005C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AB6E7501-F585-41F3-B0B9-2273EC513DC7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AB7EFA85-1794-4BDA-8F0D-C847125E2EB5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{ABD6EEA0-E8A7-49D4-B731-6BB67D272B0B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AC4772DB-5C15-4FC7-8F42-A26B72604A7F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AC8C3021-D2EA-4418-99D8-1F887129E965}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{ACA08A1D-A6EF-4EC6-A683-3D4694BC1FE6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{ACB6E659-576A-49EB-93D0-FC611A51FD16}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{ACE1A37B-668B-4D37-BE7C-CC7D4DC7EDD3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{ACE44DEE-E608-45B5-B761-4DE7F23CBF00}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AD159FEF-1A8E-4B6D-BF49-1854B438821A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AD55F56E-B0AA-4C2F-AF94-9367B257E745}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AE544530-74CF-41C2-9CE6-4BA80E6B3A40}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AE6AADCA-08C5-47DA-90A3-96A7281808EF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AE8C8AB9-F748-460E-A6BD-C56BA8E6ACCA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AECCB6E4-60E6-49FA-AA48-35530A5B02DC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AEE16E47-525D-4418-8933-32842C139549}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AF6626AA-A256-4B8E-928F-E6CDF43FD5F3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AF87939A-5D53-4F6E-82BA-DEECFCE8CED2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{AFB0E1F2-EB9B-47E4-A347-0D64417BE33C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B0A39E5B-6862-4EBB-BA4E-A3839C824FFD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B0B5AD22-8B13-49CD-A1AA-5002D93784CE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B0BD2745-4018-4FFF-9AF1-422AAA2E033B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B15D2693-F8E9-412B-ADEC-971263ABFEC6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B1A7FA35-D846-47E7-9410-3A2911692846}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B1BD86E0-B4C6-4902-BAF4-42476A05F833}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B1BDFFF1-1EE0-4287-9EC1-1A7CB86E4455}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B22BB37C-F08D-4240-AC4D-643FB6F526CB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B257BAE6-BA92-493A-AEAF-30C758FD8759}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B2BD9FC8-E983-4BF1-82AA-158197F3BCC6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B326CE24-0F73-4D77-8709-F236C99D8194}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B3433958-94FC-4AAB-966C-529304ABFE31}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B363B5C4-614D-484A-B4E0-32D06B88DB9D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B36E460D-4CA9-4D76-808D-3C453BCDB6A2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B389754E-CC1A-4B52-9669-27975C41CDA9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B3F322E5-BD05-4DBE-AE35-C6AC4C74B8A2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B539C341-C7E1-4E44-8CFB-A84DDAEB1B02}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B5636A94-4F97-4847-99B5-1C4EDB586446}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B611CE8D-8F51-44F4-8570-D43414D70782}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B65E5F94-BC43-4119-A09B-8F380F9DEA18}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B6852F84-8454-4BF7-B566-75622C207DE1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B6BE6DED-F1EB-4052-95B9-FDDC74F0ADA0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B6C9322B-E799-4042-B87C-6D81090F099E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B6DC4D80-C723-48D1-A51B-94BBEF3F33EC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B6E964A2-70FF-453E-81FE-2C13431C72FD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B727C1E7-0870-44E2-9485-C3C0BEB91247}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B73EC800-4019-4522-8E36-97B080B7DEB9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B753E3EA-96AD-4E2A-93AE-BB00D8A09FE6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B765EACD-9DB6-4C0A-8025-00EAAB97CC8B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B7CD8DDD-6EB4-4149-8F10-1041B5C2CA94}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B7F33847-8602-433F-BB9E-878BD0A164DE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B8025FFF-13B6-4A2F-8E23-5CD5441052BF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B828F43A-F7BA-4DFA-B89C-BC1F911E2898}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B830D2FD-0958-4966-9C90-B8BFECEE8148}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B83AB522-1812-4353-B2EC-2C3EC23FCB6B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B87308FB-AA8A-4672-BAA6-A8641AA9B452}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B874FDB0-FDDE-42F3-A095-2A0B8DB67747}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B87D03FC-1AFC-4EEA-BF61-E7EC8EB62C4F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B895D14E-7439-4078-8CF7-004625D01915}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B89D1DF1-4110-4A81-9A34-DD1C34750A00}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B8AA0EDC-BB3D-4110-8104-81D3ED2A89DF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B8DA1585-8FB7-4204-ABDF-83DEDF99EB1C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B8E5A12A-F92D-4B73-A904-DC03ECB275D5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B9047B52-3259-486F-8A56-F13C9821999A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B91498AB-7E5E-4D0F-84C2-D61A15FA95EA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B94AAF35-28AD-48B8-8D7E-8DF9F98B003D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B9851183-06CF-4D61-B3DB-4BACF6BA3D09}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{B9B2A95F-18DE-43C6-90D5-485742B79486}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BA3A9BC0-C24B-449D-AE83-9F43E1DE06A0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BA487AEC-ECBC-45FF-A786-B25740F8AE9D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BA7F0861-AC90-4B47-8E1A-90A2A5ACA22E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BAC0AB5F-D82F-4640-900C-68F1C2381E41}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BADE8158-CFD6-4A70-9FC5-4714B26BD9F9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BB2D74E2-8272-42C8-A667-4D5B76FFA562}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BB557B0C-47D7-4BFC-B874-C5E70A9B36CB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BB6858DF-A351-4CD8-80C7-5E41F5077E70}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BBBC12DD-6E0A-4753-A742-1A9F302115E6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BBC3B789-6BC7-4B4D-A655-2F25C230C02F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BBD85ADC-71AC-4312-B8B5-6F0CAA7ED99A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BBEE6719-3542-4167-982D-1AAF600F8750}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BC22C5AF-27EE-48AB-89BA-591AA001DF87}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BC26863A-A1F1-4B5F-A96A-2C1BA126499A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BCAB551C-B62A-4E6E-80FB-25B39177BD23}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BCC751FA-AAD4-49E4-A71E-47BC5645FD09}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BDDFA131-42E3-4F05-8A3D-BBB8D5C65317}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BE17EDEA-AD2A-4C2A-9D56-A597A4A8DF2A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BE7D5700-6944-4336-8910-5B7DEC244A37}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BEC87FD7-BFD5-475C-8D78-EB0A2874336B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BF152395-7779-4A2F-82CA-613F17FCA68B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BF3C5AD4-0161-43A5-97CA-5E0CD1C35359}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BF6F32AE-9B94-4413-98E3-8006D913798A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BF7EA9C8-C5A3-4521-9658-233D83924588}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{BFF19D96-6B8A-4B38-BA80-D34C162D88A7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C00AFF39-EF70-4A94-9BB7-A73934C6E8AF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C08C84A8-6423-4864-95AA-5A3CA1BA2885}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C0A2F411-3718-4025-8984-51A2B6F6A238}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C0CE0600-FCAD-4262-9DF8-81746E790374}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C1635EAA-4E29-4E38-B18D-3577B80FD438}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C193D5A8-4578-4059-B9D3-660AEC2DC256}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C229F283-CBED-4A47-B77F-D66AD82BED1F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C2B22328-E387-4945-A7EF-D12440A4E515}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C2C71544-DD40-412D-8253-D49573E83583}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C328648B-07D6-43D0-AF0A-E26D92B9D374}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C33CFCE5-ADBB-4783-9BBB-4C46174E7AE7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C34C1A31-4757-4F64-940B-224B11356FDF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C3684FFE-A9AA-4489-9F60-8B596DC17285}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C3DB041C-1E63-4A95-ABED-B741677EE872}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C4F0E6C4-3D18-4426-9A25-C7CA07446C45}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C5198C60-0FC1-4A31-BFF3-00ECB0F75077}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C5DE4E0D-356B-4505-91F5-FD4D7FAA85D5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C617B4F7-0C06-40A7-BD2B-30E5A35943A1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C645B599-9960-4DA6-8688-E49011A04F27}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C66BED79-4646-4039-A6ED-AEB7904A54FD}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C69D8F8D-FCD1-484C-849E-35D2577B02BA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C7B6D105-5D0B-4D1E-B6DA-3B09D009364E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C8110E00-6A20-4185-B536-AAB0ECAD3C37}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C8269BE6-5D53-407F-AD4C-F8CF1E1A66C3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C8DCFE5F-8A14-4625-B1FF-70047BC9D18B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C90E1408-0B60-4870-8B0F-08E7C446C005}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C917BADB-9E3B-4F0A-AB41-AB5AE35F3290}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C93C9994-A176-4DB1-ABF5-FEB3CED2C8F6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C94917AA-625B-4593-B7CF-381BE55F70B3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C97B17B1-ADA9-4CE6-98A6-E38D4BDC2129}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{C97F946C-FBA0-4AE6-AA06-B1B2A502E848}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{CA0C4303-8C60-45BF-80DA-7F97E984D657}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{CAB2C749-A5C9-4A9D-A0A0-BEA6F7767B12}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{CAD9A598-5412-41EF-BBFA-42F6851062EB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{CADC552B-B6CF-4E94-BE30-B4AB6055997D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{CBB168EC-A9B0-438F-8D19-0C47862964B3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{CC4DE592-9B62-416C-A302-FAE675626EB4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{CD17ABCD-CB29-40D9-99E9-A1C829A59B73}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{CF3D4835-7078-4CA9-A5D8-083364E9F171}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{CF614AD7-0D6B-4455-8897-3F7B0D98589D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{CF8C2777-C872-4DC5-B88E-D444EDB1FEE1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{CF938FE1-F12E-49C3-B426-6BCBE500C803}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{CFB78A8C-0C6D-418E-A081-37344A5C200F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D08B79D5-BA60-4F52-89DF-F5364ED2A32A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D08DBF11-0C98-4129-AE98-BBCCEEDE05FE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D0A698D9-A2D0-4691-80D8-27DCBB79E53F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D0C095E2-EB37-4E5F-8847-68902B7C8698}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D0ED8AA6-3945-4F39-9116-FC7253A9E61D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D15E5E56-E855-4707-8089-B3188BD98B70}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D1CAF522-8F1A-4477-8A56-6E6A5592F617}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D2A103D2-5806-49FD-B713-3F79D4F58058}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D2A7293B-CD28-412D-BF78-BB381A61F905}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D2B5D528-B2AC-443F-A73F-38FBB409F0DA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D2C34217-B08E-42DC-B0F1-E9303D5CB40C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D3187FD1-0877-4652-8F23-8E108882E810}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D363F182-B4F8-4F32-9FFF-73452D470569}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D390BB39-1A64-49BA-B9CA-629935EA4A7C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D3E17138-E26A-4173-A38F-CCF3C0197143}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D4A708FA-155D-47B9-AC29-BD1C11E9250F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D5204471-E46D-4863-B14A-C137E4DC51D0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D570EEDF-38D1-46C0-B14F-9FB6FD5949B3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D577A68B-2435-45BF-AE21-55E4CCC11FE9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D5A51237-FE2B-47C2-B83B-117718D168DE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D6684623-172D-4B31-9C92-212B9F8CC913}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D69D40B3-553A-4900-B1CC-D833DB4D9ACF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D6A96F0E-C22D-4A5A-8FFA-81FA87A4FB36}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D6C9411D-9CAE-4D39-8D3A-3086123DCB9A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D7595B27-12BE-4C2F-8249-3B4013A00FEA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D7AA5FC6-0F45-40AD-BEE8-92432BEDB161}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D7C49803-A7FC-4361-805B-4F4E6798F14A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D7D52E31-327E-4EF3-A0E5-3ECFB1323CA6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D7D62890-2363-476B-838E-C96CBE9FEA11}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D7EA0F9E-BA61-47B4-8340-3B939C25B43C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D864D8B2-446D-4CFA-92BD-4FE2E57026E9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D86B3EA1-F3A0-4F83-92CC-02EF7113F17A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D8EC0EE7-FECE-479C-8CDC-55C47D18E6A0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D984D36F-5C1C-4480-8671-CA6EF9F8F8E3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D9914CDC-7A72-43FA-AE85-3D1D2210315E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D9AD3704-42F8-4BAF-BFEE-4AB39011219A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D9B85355-F947-4A77-9B46-A307135E4D09}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D9D29918-E915-48CE-B1D6-AA80B6EAD3A6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D9E43281-19AC-492A-8CFF-4843D8B5B4FE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{D9F3543D-7B0F-457B-A1A5-1F7F0E2143EC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DA22396B-615B-43AB-BB5B-EF1540B83356}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DA44019A-8E98-4D16-9453-DE421B315749}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DADFDCA6-27E4-4C6D-8773-5FAEC91101F5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DBA89C60-21DF-4060-8035-0FFA47E6BE59}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DBC0DEE4-BBBD-4599-A05A-3F961F34E690}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DBD07AD7-E1C0-4288-9092-09C0808EA94E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DC32BF00-4887-4494-847D-248DE3AACE3D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DC6C0008-9475-44DB-A4A0-E7561502EAF0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DC8052B5-6440-4EA7-8094-F994DB67B5B9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DC908BE7-0683-43F9-89FE-03613986E0F6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DCACC728-49FF-446F-9D45-465AC36FF1CC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DCD29D68-C80E-4251-A452-7C35DB1BAE76}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DDF9C68C-66C8-4DFC-A708-48F259160B5F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DE093FD8-798B-4AD2-B8DF-0D18A933BF38}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DE5DE206-DC75-4FED-97D4-A2FCCF374DF5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DE9924D9-1C1A-47B2-9A81-C58D99EA3DC7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DEE38EDA-7404-4D94-8B0D-22FC501C9043}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DF429C2F-0274-445D-9749-2FCD640A5605}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DF84B103-0E0E-4017-8C13-76CDA2DB28E4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{DFFBB1CF-25F2-4F55-9710-97E8B368FFC6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E00F638C-E79E-48B8-A61F-A784BE5C635A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E09E1D07-0ED9-4D0E-9300-2BF7B7B86617}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E0C110DF-857E-41CC-9DAA-866D9FCAAFD3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E1AE4B51-B5CE-476C-81B6-B59AF478EC1B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E2AE1974-D0D9-478C-B347-9A6C8AB3AC8D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E2CBB77D-C232-4523-851C-433BB9B8E856}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E308A832-F015-44C6-9E01-B7C01EEF1F40}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E30D46E8-BB3F-452B-826B-800AFE8ACB36}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E3393DD4-AE26-466E-8354-D2F6A1AB4CF7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E34EC13A-1002-477F-B8D6-F53D7CE3748C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E3515938-392D-4297-811F-3F3382901A2D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E3701270-F557-4AE9-8F20-F86B7C27072C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E3B6AC86-5C30-4794-86DD-9E3F18E43490}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E3DC22F9-8216-4605-906A-419F922ACACC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E4359687-89A6-4EA5-ABE0-9884A3ECA2C8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E49C7904-2FB7-4BBC-B0EC-7ABC711038D2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E4FDBC00-6158-4586-8F3E-71A4FDE8990B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E5735947-8290-41FC-B703-6637C63F30DF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E59996BF-189D-409B-98B6-517EB547A97B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E6C9A10B-6E77-4946-99E5-0E4E15D1F866}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E75A20C1-9C80-453E-AF1D-14C01B1BE116}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E7F513FA-D22F-46F9-90F3-447D4B685734}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E8DA9425-2728-416D-B558-AE2711C96CF8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E8E4E335-83AA-4507-8261-0086D8F6466B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E90EFA2C-13F8-44F3-852F-56B57A487735}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E98E3B41-E710-49A0-A784-1FE09A6D1DD2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E9CEE8DA-6F03-463D-8B34-CB9F8BF7F96F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{E9E1A0A3-E225-4801-99B7-D16A72864B0D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EA3438EF-5A27-4B03-8439-7853BB2132F5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EA60FA29-D96E-4D4F-94CB-83DFE85C143E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EAA22025-CEFA-4AD7-BFDE-221026E45AA7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EB1E8911-1156-4AA1-84FD-D9F76CE2982F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EBB29E36-F836-463D-9CBF-4DC9011D0D26}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EBE3CD47-BC7B-454E-A603-1B33CDC9CA41}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EC4ED4F0-D835-4616-8121-E3395FB61AE9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EC906DCC-45A0-45EE-A598-42AA075CA3DA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EC9E3061-F80A-4D8E-998A-3BBCC44B80C2}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{ECCC9288-6FFF-4EB3-B7BA-1D60F5806199}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EE27374D-2552-48C9-95CA-9CD8C9F2E0D6}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EE654C01-CBD6-4C61-A55A-B3CCE4139FC9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EEADEE1D-DD7B-45D3-BF74-AE77853C0137}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EF1EB832-CDF0-4411-AB39-C82665C09722}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EF43D35E-CD8A-4FAD-839E-7F2F6D96AA6D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EF9D46DD-6EAB-4346-8E8A-9173744B64EE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EFAC8F43-CA01-462A-A29E-8C6AC7C93A0D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{EFD3E5D4-F942-449D-9B92-6BCB7D87833C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F084A162-7592-4382-BCBD-F6456FD67734}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F1483112-3311-4B3E-B551-B590BDF829B8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F1B07DC5-6097-426B-9B13-C835841EDD2A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F1CFD3DF-37B9-4887-9FDA-A26A59C90013}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F23579C4-AFCB-4155-9B4B-A624D69F108A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F2A18DA2-2E46-478E-9712-B067EA44794D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F2ECA756-3DC4-4369-AAAB-6FFEAF4FE4C9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F35F6621-3540-4812-8DD6-3E77E7C5B7F8}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F3701BBA-4BE9-452A-BBD2-11D776D040A1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F392836C-2167-48C2-9005-B00A6E2627A9}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F3AB8B41-CD99-433E-A55A-90B7AA09000D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F3AE5E6F-6352-4BF7-8390-587B4D7BFD2A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F3AEFB2A-576F-4694-B8A6-34D99FAE8402}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F44719D7-90A9-44B7-B2D6-B6EC65A66960}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F4AD5134-F102-4B26-96AB-C9D096C947D1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F4C8CB30-91FF-4AEA-A9D6-6CFF25A6D131}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F4D85D3B-EC27-46C7-86C3-2E180489C84F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F4DA075F-34D3-491E-9EAA-CE8F3B33F3CC}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F4E05D0E-AF8A-4FEA-958C-50DF1DDCDE32}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F4E07A68-F522-43A8-928C-E7B9BD227A6F}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F4E0DDB4-7DCB-47DD-BE47-A7B061BA0037}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F53D0258-3345-47F1-8F3F-E9A6307BCF95}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F5D04E83-BB75-4A31-B074-EAEDA1FA7A4A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F5F1A76D-3013-45FB-9A04-A264BF8D53D1}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F66073B9-6F72-4BE5-9D10-1D201FFA1F38}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F6BF1F4B-8B7F-46EF-A690-EC7B11083238}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F6DD28A9-51E8-472C-92FB-1F0F878408E0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F752A30C-396F-4A39-A467-4E1D4B2711CF}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F775DEAB-03F0-4B8E-AFD9-8BB52B46B73B}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F7950159-23DC-4211-9F20-CE9192771523}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F874A0F3-8BDD-4949-8F2F-91D687F12FAA}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F886FE34-2061-4C6B-B173-3742030267E5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F8A49BDD-C01E-4F6F-B3D8-2918CC0A7239}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F8AF59B8-96CC-4A10-848B-F52D2644B5EB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F92B30C2-866D-44B8-9EAD-D7DFA922C39D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F9CF1404-FEFD-44CE-BD8B-1A7B7BFFF121}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{F9F39D7E-2DE4-436E-81CA-A541C054C017}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FA297BD1-3960-4C1E-9197-36AE9B31A67C}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FAA49652-C5A0-44A9-817C-C08D7C280A72}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FAA64C29-6D6C-4C48-8D29-BDF7B24C5CC4}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FACD8726-FB6A-469B-B303-4CC4E648818A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FB8D9FB8-1744-4214-B8A4-357A94693FFB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FBA8959E-9DAB-4B5E-A128-4643AD862097}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FBB74C86-7C36-47FE-8F57-121E7A6339F5}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FBEE9547-D1A1-4BF5-B124-0D2799BC24BE}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FBF43EF9-6403-4F40-BA55-6E6378ED0236}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FC0611AB-EC87-4B49-A164-9C2C86AEA297}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FC14D9D1-7B5C-4E01-AF80-AF77C194CB8E}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FC443CD5-6684-451B-8871-61E6DCD71CD3}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FDF58DD4-2974-4C93-AA21-3600C77CB4BB}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FE58765A-B636-4441-9392-5EC2C9642BC7}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FEF8F66A-D431-4BDE-939B-52E830E9777A}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FEFE3C3E-4280-42D4-A575-3DDD0863E79D}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FF18409F-F3CC-44FF-8F4A-9659989B7228}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FF399250-4891-4251-98BE-09D20508F1F0}
Successfully deleted: [Empty Folder] C:\Users\Volker Henkels\appdata\local\{FFD3E905-5708-471B-BDA9-0FFA8AEFE74A}
~~~ FireFox
Emptied folder: C:\Users\Volker Henkels\AppData\Roaming\mozilla\firefox\profiles\xed8oa8w.default\minidumps [45 files]
~~~ Chrome
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.05.2015 at 17:01:44,56
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
08.05.2015, 16:28
| #17 |
| | Aus Email Anhang von DHL TR/Emotet.A.92 installiert FRST
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-05-2015 01
Ran by Volker Henkels (administrator) on DESKTOP on 08-05-2015 17:09:55
Running from C:\Users\Volker Henkels\Documents\Downloads\Trojaner
Loaded Profiles: Volker Henkels (Available profiles: Volker Henkels & Uta)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
() C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Logitech Inc.) C:\Windows\LOGI_MWX.EXE
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Symantec Corporation) C:\Program Files\Norton Internet Security CBE\Engine\20.4.0.40\ccsvchst.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [XFastUsb] => C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-10-22] (FNet Co., Ltd.)
HKLM\...\Run: [CTSyncService] => C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)
HKLM\...\Run: [VolPanel] => C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)
HKLM\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry
HKLM\...\Run: [Logitech Utility] => C:\Windows\Logi_MwX.Exe [19968 2003-12-17] (Logitech Inc.)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [139264 2010-10-26] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM\...\Run: [IndexSearch] => C:\Program Files\Nuance\PaperPort\IndexSearch.exe [46368 2010-03-09] (Nuance Communications, Inc.)
HKLM\...\Run: [PaperPort PTD] => C:\Program Files\Nuance\PaperPort\pptd40nt.exe [29984 2010-03-09] (Nuance Communications, Inc.)
HKLM\...\Run: [PPort12reminder] => C:\Program Files\Nuance\PaperPort\Ereg\Ereg.exe [328992 2010-02-09] (Nuance Communications, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [FreePDF Assistant] => C:\Program Files\FreePDF_XP\fpassist.exe [312320 2007-06-26] (shbox.de)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11734240 2012-12-13] (Realtek Semiconductor)
HKLM\...\Run: [ZyngaGamesAgent] => C:\Program Files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe [841544 2010-11-15] (Splashtop Inc.)
HKLM\...\Run: [STCAgent] => C:\Program Files\Splashtop\Splashtop Connect IE\STCAgent.exe [776064 2011-01-21] (Splashtop Inc.)
HKLM\...\Run: [TrueImageMonitor.exe] => C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2622296 2008-04-21] (Acronis)
HKLM\...\Run: [AcronisTimounterMonitor] => C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [911168 2008-04-21] (Acronis)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [136472 2008-04-21] (Acronis)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [KeePass 2 PreLoad] => C:\Program Files\KeePass Password Safe 2\KeePass.exe [2092032 2014-02-03] (Dominik Reichl)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [728312 2015-05-05] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [129272 2015-03-16] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\...\Run: [ISUSPM] => -scheduler
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\...\Run: [PureSync] => C:\Program Files\PureSync\PureSyncTray.exe [915120 2014-08-25] (Jumping Bytes)
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\...\Run: [AceWebException] => C:\Users\Volker Henkels\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe
Lsa: [Authentication Packages] msv1_0 relog_ap
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VR-NetWorld Auftragsprüfung.lnk [2014-01-02]
ShortcutTarget: VR-NetWorld Auftragsprüfung.lnk -> C:\Program Files\VR-NetWorld\VRToolCheckOrder.exe (VR-NetWorld Software)
Startup: C:\Users\Uta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-06-22]
ShortcutTarget: Dropbox.lnk -> C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Volker Henkels\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-03-16]
ShortcutTarget: Dropbox.lnk -> C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
BootExecute: autocheck autochk /k:C *
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Adobe PDF Reader -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2014-12-03] (Adobe Systems Incorporated)
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Internet Security CBE\Engine\20.4.0.40\coIEPlg.dll [2013-05-31] (Symantec Corporation)
BHO: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files\Norton Internet Security CBE\Engine\20.4.0.40\IPS\IPSBHO.DLL [2013-04-09] (Symantec Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-05-11] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-05-11] (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security CBE\Engine\20.4.0.40\coIEPlg.dll [2013-05-31] (Symantec Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Volker Henkels\AppData\Roaming\Mozilla\Firefox\Profiles\xed8oa8w.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-18] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll [2013-05-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-05-11] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-08] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-08] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Extension: Kaspersky URL Advisor - C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru [2015-03-31]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2015-03-31]
FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn
FF Extension: No Name - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn [2013-09-02]
FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn
FF Extension: No Name - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn [2013-05-07]
FF Extension: No Name - C:\Users\Volker Henkels\AppData\Roaming\Mozilla\Firefox\Profiles\xed8oa8w.default\extensions\magicplayer@acestream.org [Not Found]
Chrome:
=======
CHR Profile: C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-06]
CHR Extension: (Google Docs) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-12]
CHR Extension: (Google Drive) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-12]
CHR Extension: (YouTube) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-12]
CHR Extension: (Google Search) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-12]
CHR Extension: (Google Sheets) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-06]
CHR Extension: (AdBlock) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-05-06]
CHR Extension: (Bookmark Manager) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-22]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]
CHR Extension: (Google Wallet) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-12]
CHR Extension: (Gmail) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-12]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [431384 2008-04-21] (Acronis)
R2 AdobeActiveFileMonitor5.0; C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe [102400 2006-09-14] () [File not signed]
S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [827640 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-05-05] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1185584 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [201008 2015-03-16] (Avira Operations GmbH & Co. KG)
S3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed]
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-10-22] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-10-22] (Creative Labs) [File not signed]
S2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [File not signed]
S2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
S2 KMService; C:\Windows\system32\srvany.exe [8192 2003-04-18] () [File not signed]
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 NIS; C:\Program Files\Norton Internet Security CBE\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
S2 PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.)
S3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-10-22] (Creative Labs) [File not signed]
R2 TryAndDecideService; C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe [498952 2008-04-21] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 asahci32; C:\Windows\System32\DRIVERS\asahci32.sys [32352 2011-03-23] (Asmedia Technology)
R3 asmthub3; C:\Windows\System32\DRIVERS\asmthub3.sys [95720 2010-12-29] (ASMedia Technology Inc)
R3 asmtxhci; C:\Windows\System32\DRIVERS\asmtxhci.sys [293352 2010-12-29] (ASMedia Technology Inc)
R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107400 2015-05-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-05-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2015-05-05] (Avira Operations GmbH & Co. KG)
R3 avmaudio; C:\Windows\System32\DRIVERS\avmaudio.sys [101248 2012-03-03] (AVM Berlin)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-04-28] (Avira Operations GmbH & Co. KG)
S1 BHDrvx86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130715.001\BHDrvx86.sys [1002072 2013-05-31] (Symantec Corporation)
S1 ccSet_NIS; C:\Windows\system32\drivers\NIS\1404000.028\ccSetx86.sys [134744 2013-04-16] (Symantec Corporation)
R2 DLPortIO; C:\Windows\system32\DRIVERS\DLPortIO.SYS [3584 1999-01-10] () [File not signed]
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-08-27] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-08-27] (Symantec Corporation)
R3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2011-10-22] (FNet Co., Ltd.)
R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-10-22] (FNet Co., Ltd.)
R1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130830.001\IDSvix86.sys [392792 2013-08-21] (Symantec Corporation)
S3 L8042pr2; C:\Windows\System32\DRIVERS\L8042pr2.Sys [51729 2003-12-17] (Logitech, Inc.)
S3 Ltn_hyd7700pc; C:\Windows\System32\Drivers\Ltn_hyd7700pc.sys [374144 2007-05-18] (Liteon)
S3 Ltn_rc; C:\Windows\System32\Drivers\Ltn_rc.sys [11520 2006-12-27] (Liteon)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130901.019\NAVENG.SYS [93272 2013-08-29] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130901.019\NAVEX15.SYS [1612376 2013-08-29] (Symantec Corporation)
S3 npf; C:\Windows\System32\drivers\npf.sys [34064 2009-02-08] (CACE Technologies)
R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [20640 2011-11-30] (Sonic Solutions) [File not signed]
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [31848 2010-11-16] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [31848 2010-11-16] (RapidSolution Software AG)
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [629760 2010-08-10] (Realtek Semiconductor Corporation )
R2 ScopeItPort; C:\SCOPE-IT\ScopeIt.sys [5231 2012-03-28] () [File not signed]
S3 SRTSP; C:\Windows\System32\Drivers\NIS\1404000.028\SRTSP.SYS [603224 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NIS\1404000.028\SRTSPX.SYS [32344 2013-03-05] (Symantec Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-02-14] (Avira GmbH)
R0 SymDS; C:\Windows\System32\drivers\NIS\1404000.028\SYMDS.SYS [367704 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NIS\1404000.028\SYMEFA.SYS [934488 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142496 2013-06-19] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\NIS\1404000.028\Ironx86.SYS [175264 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NIS\1404000.028\SYMNETS.SYS [339544 2013-04-25] (Symantec Corporation)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-12-15] (The OpenVPN Project)
R3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [37920 2010-11-16] (RapidSolution Software AG)
R0 tdrpman; C:\Windows\System32\DRIVERS\tdrpman.sys [368480 2013-05-07] (Acronis)
R2 tifsfilter; C:\Windows\System32\DRIVERS\tifsfilt.sys [44384 2013-05-07] (Acronis)
S3 catchme; \??\C:\Users\VOLKER~1\AppData\Local\Temp\catchme.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-08 17:01 - 2015-05-08 17:01 - 00112546 _____ () C:\Users\Volker Henkels\Desktop\JRT.txt
2015-05-08 16:59 - 2015-05-08 16:59 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-DESKTOP-Windows-7-Ultimate-(32-bit).dat
2015-05-08 16:59 - 2015-05-08 16:59 - 00000000 ____D () C:\RegBackup
2015-05-08 13:00 - 2015-05-08 13:00 - 00001105 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-05-08 13:00 - 2015-05-08 13:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-05-08 13:00 - 2015-05-08 13:00 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2015-05-08 13:00 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-08 13:00 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-08 12:11 - 2015-05-08 12:11 - 00000000 ____D () C:\Program Files\VS Revo Group
2015-05-06 10:59 - 2015-05-06 11:55 - 00000000 ____D () C:\ComboFix
2015-05-06 10:59 - 2015-05-06 10:59 - 00000000 ____D () C:\Qoobox
2015-05-06 10:59 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-05-06 10:59 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-05-06 10:59 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-05-06 10:59 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-05-06 10:59 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-05-06 10:59 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-05-06 10:59 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-05-06 10:59 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-05-06 10:58 - 2015-05-06 11:55 - 00000000 ____D () C:\Windows\erdnt
2015-05-05 08:52 - 2015-05-05 08:52 - 00000000 ____D () C:\Users\Uta\AppData\Roaming\Avira
2015-05-05 08:49 - 2015-05-05 08:49 - 00000000 ____D () C:\Users\Uta\AppData\Local\{B89840C6-3AAC-46F4-ADA3-6EE66298673F}
2015-05-03 12:00 - 2015-05-08 16:46 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-03 12:00 - 2015-05-08 13:46 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-05-03 12:00 - 2015-05-08 13:00 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-03 11:59 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-03 11:36 - 2015-05-08 17:02 - 00000000 ____D () C:\Users\Volker Henkels\Documents\Logfiles
2015-05-03 11:36 - 2015-05-03 11:36 - 00006103 _____ () C:\Users\Volker Henkels\Documents\gmer_1.txt
2015-05-03 11:07 - 2015-05-03 11:07 - 00000000 _____ () C:\Users\Volker Henkels\defogger_reenable
2015-05-03 10:41 - 2015-05-08 17:09 - 00000000 ____D () C:\FRST
2015-04-28 15:47 - 2015-04-28 15:47 - 00001138 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-04-28 15:40 - 2015-05-01 18:00 - 00000000 ____D () C:\Users\Volker Henkels\AppData\Roaming\Avira
2015-04-28 15:39 - 2015-05-05 13:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-04-28 15:39 - 2015-05-05 13:12 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-04-28 15:39 - 2015-05-05 13:12 - 00107400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-04-28 15:39 - 2015-05-05 13:12 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-04-28 15:39 - 2015-05-01 17:59 - 00000000 ____D () C:\ProgramData\Avira
2015-04-28 15:39 - 2015-04-28 15:46 - 00000000 ____D () C:\Program Files\Avira
2015-04-28 15:39 - 2015-04-28 15:41 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-04-28 15:39 - 2014-02-14 11:00 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2015-04-27 11:26 - 2015-04-27 11:26 - 00000000 ____D () C:\Users\Uta\AppData\Local\{BFD7934C-2205-4CAC-9226-B1B1F6DF58FD}
2015-04-26 08:06 - 2015-04-26 08:07 - 00000000 ____D () C:\Users\Uta\AppData\Local\{E9D9B646-E08B-41F7-BC93-585011053EBC}
2015-04-19 18:19 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-19 18:19 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-18 20:57 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-18 20:57 - 2015-03-23 05:06 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-18 20:57 - 2015-03-23 05:06 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-18 20:57 - 2015-03-23 05:06 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-18 20:57 - 2015-03-23 05:06 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-18 20:57 - 2015-03-23 05:06 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-18 20:57 - 2015-03-23 05:06 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-18 20:57 - 2015-03-23 05:06 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-18 20:57 - 2015-03-23 04:59 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-18 20:57 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-04-18 20:57 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-18 20:57 - 2015-03-17 07:01 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-18 20:57 - 2015-03-17 07:01 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-18 20:57 - 2015-03-17 06:59 - 01306112 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-18 20:57 - 2015-03-17 06:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-18 20:57 - 2015-03-17 06:56 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-18 20:57 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-18 20:57 - 2015-03-17 06:56 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-18 20:57 - 2015-03-17 06:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-18 20:57 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-18 20:57 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-18 20:57 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-18 20:57 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-18 20:57 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-18 20:57 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-18 20:57 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-18 20:57 - 2015-03-13 05:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-18 20:57 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-18 20:57 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-18 20:57 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-18 20:57 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-18 20:57 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-18 20:57 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-18 20:57 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-18 20:57 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-18 20:57 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-18 20:57 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-18 20:57 - 2015-03-13 05:16 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-18 20:57 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-18 20:57 - 2015-03-13 05:09 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-18 20:57 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-18 20:57 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-18 20:57 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-18 20:57 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-18 20:57 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-18 20:57 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-18 20:57 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-18 20:57 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-18 20:57 - 2015-03-13 04:43 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-18 20:57 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-18 20:57 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-18 20:57 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-18 20:57 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-18 20:57 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-18 20:57 - 2015-03-05 06:06 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-18 20:57 - 2015-03-04 06:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-18 20:57 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 03088384 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 02020864 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-18 20:56 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-18 20:56 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-18 20:56 - 2015-02-25 05:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-13 10:56 - 2015-04-13 10:57 - 00000000 ____D () C:\Users\Uta\AppData\Local\{0FE4FDFF-C807-4FB4-B922-0E48C4512D86}
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-08 17:07 - 2009-07-14 06:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-08 17:07 - 2009-07-14 06:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-08 17:00 - 2011-10-19 14:36 - 01062497 _____ () C:\Windows\WindowsUpdate.log
2015-05-08 16:55 - 2014-03-16 10:29 - 00000000 ___RD () C:\Users\Volker Henkels\Dropbox
2015-05-08 16:55 - 2014-03-16 10:25 - 00000000 ____D () C:\Users\Volker Henkels\AppData\Roaming\Dropbox
2015-05-08 16:54 - 2014-02-12 19:10 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-08 16:54 - 2013-05-07 21:05 - 00627406 _____ () C:\Windows\PFRO.log
2015-05-08 16:54 - 2013-05-07 16:27 - 00074325 _____ () C:\Windows\setupact.log
2015-05-08 16:54 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-08 16:52 - 2014-04-22 00:39 - 00000000 ____D () C:\AdwCleaner
2015-05-08 16:49 - 2014-02-12 19:10 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-08 16:22 - 2012-10-05 12:15 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-08 13:39 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\tracing
2015-05-08 12:24 - 2014-10-25 20:08 - 00000000 ____D () C:\Users\Volker Henkels\AppData\Roaming\.ACEStream
2015-05-06 16:43 - 2014-06-22 13:05 - 00000000 ____D () C:\Users\Uta\AppData\Roaming\Dropbox
2015-05-06 12:23 - 2011-10-20 11:00 - 00001863 _____ () C:\Windows\Alltag.ini
2015-05-06 12:17 - 2011-10-20 11:01 - 00000086 _____ () C:\Windows\Kontext.ini
2015-05-06 11:54 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2015-05-05 12:59 - 2013-08-01 18:13 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-05-03 13:06 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\addins
2015-05-03 11:07 - 2011-10-19 14:38 - 00000000 ____D () C:\Users\Volker Henkels
2015-05-01 21:04 - 2014-03-22 14:42 - 00000000 ____D () C:\Users\Volker Henkels\AppData\Roaming\KeePass
2015-05-01 20:05 - 2014-07-20 13:13 - 00017182 _____ () C:\Users\Volker Henkels\Passwort Datenbank.kdbx
2015-05-01 18:50 - 2014-02-12 19:13 - 00002166 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-01 18:36 - 2011-11-28 15:51 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-04-28 19:45 - 2014-09-08 17:10 - 00000000 ____D () C:\Program Files\Free Easy CD DVD Burner
2015-04-28 15:47 - 2015-02-03 14:35 - 00000000 ____D () C:\ProgramData\Package Cache
2015-04-28 15:35 - 2013-06-09 19:04 - 00000000 ____D () C:\Users\Volker Henkels\AppData\Local\CrashDumps
2015-04-25 11:08 - 2014-03-16 10:28 - 00000000 ____D () C:\Users\Volker Henkels\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-04-23 12:13 - 2011-10-20 10:27 - 00000000 ____D () C:\Users\Volker Henkels\Documents\Steuerfälle
2015-04-22 16:13 - 2011-12-19 11:34 - 00000000 ____D () C:\Users\Volker Henkels\Documents\Stabliste
2015-04-21 13:04 - 2014-08-15 13:25 - 00002220 _____ () C:\Users\Public\Desktop\SteuerSparErklärung 2014.lnk
2015-04-20 13:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2015-04-19 18:48 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2015-04-19 18:32 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-04-19 18:09 - 2014-12-12 12:19 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-19 18:09 - 2014-05-08 20:40 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-19 18:09 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-04-19 03:22 - 2011-10-19 15:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-19 03:20 - 2011-10-19 14:37 - 01602556 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-19 03:16 - 2009-07-14 04:04 - 00000478 _____ () C:\Windows\win.ini
2015-04-18 22:22 - 2012-03-31 17:39 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-18 22:22 - 2011-10-25 09:40 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-04-08 13:23 - 2014-11-05 18:57 - 00002220 _____ () C:\Users\Public\Desktop\SteuerSparErklärung 2015.lnk
==================== Files in the root of some directories =======
2011-12-02 14:30 - 2015-01-28 00:08 - 0000649 _____ () C:\Users\Volker Henkels\AppData\Roaming\burnaware.ini
2006-12-11 20:13 - 2006-12-11 20:13 - 0097336 _____ (Un4seen Developments) C:\Users\Volker Henkels\AppData\Local\bass.dll
2006-12-11 20:13 - 2006-12-11 20:13 - 0013872 _____ (Un4seen Developments) C:\Users\Volker Henkels\AppData\Local\basscd.dll
2007-08-13 18:46 - 2007-08-13 18:46 - 0102912 _____ (Albert L Faber) C:\Users\Volker Henkels\AppData\Local\CDRip.dll
2013-05-13 14:41 - 2015-02-03 14:04 - 0006144 _____ () C:\Users\Volker Henkels\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-10-19 18:23 - 2011-10-19 18:23 - 0000749 _____ () C:\Users\Volker Henkels\AppData\Local\error.log
2007-01-18 22:09 - 2007-01-18 22:09 - 0623616 _____ (Ivan Bischof ©2003 - 2005) C:\Users\Volker Henkels\AppData\Local\No23 Recorder.exe
2011-10-19 18:23 - 2011-10-19 18:23 - 0001955 _____ () C:\Users\Volker Henkels\AppData\Local\process.log
2013-01-30 20:11 - 2013-01-30 20:11 - 0001506 _____ () C:\Users\Volker Henkels\AppData\Local\RecConfig.xml
2012-03-08 20:24 - 2012-03-08 20:24 - 0000017 _____ () C:\Users\Volker Henkels\AppData\Local\resmon.resmoncfg
Files to move or delete:
====================
C:\Users\Volker Henkels\adw24cleaner.exe
Some content of TEMP:
====================
C:\Users\Uta\AppData\Local\Temp\avgnt.exe
C:\Users\Uta\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpz0plli.dll
C:\Users\Volker Henkels\AppData\Local\Temp\avgnt.exe
C:\Users\Volker Henkels\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpc_qwby.dll
C:\Users\Volker Henkels\AppData\Local\Temp\Quarantine.exe
C:\Users\Volker Henkels\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-05-04 12:35
==================== End Of Log ============================
--- --- --- Wars das? Ich glaub schon... |
|
09.05.2015, 08:49
| #18 |
| /// the machine /// TB-Ausbilder    | Aus Email Anhang von DHL TR/Emotet.A.92 installiertESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ |
|
09.05.2015, 13:12
| #19 |
| | Aus Email Anhang von DHL TR/Emotet.A.92 installiert Eset hat 25 Bedrohungen gefunden: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=f835abfc163ab74598513dd9de07289d
# engine=23768
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-05-09 11:48:14
# local_time=2015-05-09 01:48:14 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Norton Internet Security'
# compatibility_mode=3595 16777213 87 86 42743075 95860396 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 57631437 182803285 0 0
# scanned=335708
# found=25
# cleaned=0
# scan_time=8173
sh=63856AE12ADC7E92E46AB3B1BB9E5E9E0FAA6152 ft=0 fh=0000000000000000 vn="Win32/AdWare.BetterSurf.G Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\BetterSurf\BetterSurfPlus\ch\BetterSurfPlus.crx.vir"
sh=53A1B8795A3E41B91AFFC433E7807680C5518A7B ft=0 fh=0000000000000000 vn="Win32/AdWare.BetterSurf.G Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\MediaPlayerV1\MediaPlayerV1alpha460\ch\MediaPlayerV1alpha460.crx.vir"
sh=6C7308843661F1E98EF43FCDB485470A97DEA81D ft=0 fh=0000000000000000 vn="Win32/AdWare.BetterSurf.G Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\MediaPlayerV1\MediaPlayerV1alpha460\ff\chrome\content\ffMediaPlayerV1alpha460ffaction.js.vir"
sh=17A1379BAC9970FBD160F38F6F196B5B5ED99F11 ft=1 fh=eadcee676057d180 vn="Variante von Win32/Toolbar.SearchSuite.AB evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchCore for Browsers\SearchCore for Browsers\BrowserConnection.dll.vir"
sh=F130A96BE0214096BEBC16F7733D6E502D3ACF66 ft=1 fh=4aa9c3dee8a7c24f vn="Win32/Toolbar.SearchSuite.AC evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchCore for Browsers\SearchCore for Browsers\datamngrUI.exe.vir"
sh=1BC412E31E4980ED1385776D656980E6B3597B8B ft=1 fh=46668a506ccd52ba vn="Variante von Win32/Toolbar.SearchSuite.R evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchCore for Browsers\SearchCore for Browsers\DnsBHO.dll.vir"
sh=169F3FC21E1DB318E27F9917DA04E2559E12F249 ft=1 fh=c71c00117dd0d4b2 vn="Variante von Win32/Toolbar.SearchSuite.AB evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchCore for Browsers\SearchCore for Browsers\FirefoxExtension\components\DataMngrHlpFF3.dll.vir"
sh=845D1A4F85D748DBC748642279D68D959D7980C2 ft=1 fh=c71c00113ae2fdf0 vn="Variante von Win32/Toolbar.SearchSuite.AB evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchCore for Browsers\SearchCore for Browsers\FirefoxExtension\components\DataMngrHlpFF4.dll.vir"
sh=4C526E7FAEAE2D0BCCAEEBA69892127D31976AD6 ft=1 fh=c71c00110f49e8ab vn="Variante von Win32/Toolbar.SearchSuite.AB evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchCore for Browsers\SearchCore for Browsers\FirefoxExtension\components\DataMngrHlpFF5.dll.vir"
sh=0CB4E7B2995E175441B6A79892FD2A74F4418B9B ft=1 fh=c71c00117947d616 vn="Variante von Win32/Toolbar.SearchSuite.AB evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchCore for Browsers\SearchCore for Browsers\FirefoxExtension\components\DataMngrHlpFF6.dll.vir"
sh=6A997F41EC860336658C046039FAC68CA5162D9E ft=1 fh=c71c001158be0310 vn="Variante von Win32/Toolbar.SearchSuite.AB evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchCore for Browsers\SearchCore for Browsers\FirefoxExtension\components\DataMngrHlpFF7.dll.vir"
sh=3CF6B3364C29620831711BA32B1F07AF40A78207 ft=0 fh=0000000000000000 vn="Win32/AdWare.BetterSurf.G Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\VideoPlayerV3\VideoPlayerV3beta821\ff\chrome\content\ffVideoPlayerV3beta821ffaction.js.vir"
sh=B81BAAC9D35824000ADB556418067A9220C40F01 ft=1 fh=23a12d968d390125 vn="Variante von Win32/Toolbar.Visicom.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe.vir"
sh=5618448E0195BA9251A1A0A5132CE2612037D630 ft=1 fh=ccf0f11a65c989b1 vn="Variante von Win32/Toolbar.Visicom.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\searchquband.dll.vir"
sh=9069C1AE362702A5CFD0947D07C49791244CF7E1 ft=1 fh=b2a7890de2375dad vn="Variante von Win32/Toolbar.Visicom.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll.vir"
sh=AF3552E4C79378CD1937F607A759BA478BB30A42 ft=1 fh=3df6c3955d9df7af vn="Variante von Win32/Amonetize.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Volker Henkels\AppData\Local\SwvUpdater\Updater.exe.vir"
sh=164E76F15414BF37CDD705AA0ECB370AFFE57E3B ft=1 fh=0ca3eae339175988 vn="Variante von Win32/Toolbar.SearchSuite.X evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\Free Easy CD DVD Burner\Helper.dll"
sh=3D09B4A1E2E55E7D1DF62B739D434F3F4E51DB90 ft=1 fh=31688d33c108b3f2 vn="Win32/Toolbar.Widgi evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\PDFCreator\Toolbar\pdfforge Toolbar_setup.exe"
sh=3448FF8B58E2926A233D8813FC8FE32548A013B2 ft=1 fh=84e69a490e2a096e vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Volker Henkels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TQOU0BKG\Download\Windows Cleaner.exe"
sh=305F4185CA6F7A5EEAE117F8E21709200D7AE371 ft=1 fh=bddc8a0d36433916 vn="Win32/Toolbar.Widgi evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Volker Henkels\Documents\CHIP Software\fsSetup118.exe"
sh=E77AD207D6B35E593E06D607887D3A44D5D3706E ft=1 fh=9fb70091b719208f vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Volker Henkels\Documents\Downloads\Passbild Generator - CHIP-Installer.exe"
sh=6CF8A9F031B45F70BE3E66E7ACC7449CDA15FA34 ft=1 fh=2de4b6f517306153 vn="Win32/Toolbar.Widgi evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Volker Henkels\Documents\Downloads\PDFCreator-1_2_3_setup.exe"
sh=45A30A7CB5CBF88FB013D55585DC9835D2D9A1FA ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Visicom.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Volker Henkels\Documents\Downloads\SopCast3.5.0.zip"
sh=F26096D577DD081982BA7D5CEAE7563052B0EB81 ft=1 fh=82f55e6f3fef9185 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Volker Henkels\Documents\Downloads\Video DVD Maker Free - CHIP-Installer.exe"
sh=063779E0725260C7C4A187470ABE62D2A232F837 ft=0 fh=0000000000000000 vn="Win32/Toolbar.Widgi evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Volker Henkels\Documents\H&H Tontechnik\Für Ulf\Pcgo Diskimage.iso"
Code:
ATTFilter Results of screen317's Security Check version 1.001
Windows 7 Service Pack 1 x86 (UAC is disabled!)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Avira Antivirus
Norton Internet Security CBE
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
CCleaner
Java 7 Update 21
Java version 32-bit out of Date!
Adobe Flash Player 17.0.0.169
Adobe Reader 10.1.13 Adobe Reader out of Date!
Mozilla Firefox 36.0.4 Firefox out of Date!
Google Chrome (42.0.2311.135)
Google Chrome (42.0.2311.90)
````````Process Check: objlist.exe by Laurent````````
Norton ccSvcHst.exe
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-05-2015 01
Ran by Volker Henkels (administrator) on DESKTOP on 09-05-2015 13:59:48
Running from C:\Users\Volker Henkels\Documents\Downloads\Trojaner
Loaded Profiles: Volker Henkels (Available profiles: Volker Henkels & Uta)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
() C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
() C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Symantec Corporation) C:\Program Files\Norton Internet Security CBE\Engine\20.4.0.40\ccsvchst.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
() C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe
(Creative Technology Ltd) C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe
(Creative Technology Ltd) C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Logitech Inc.) C:\Windows\LOGI_MWX.EXE
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\pptd40nt.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(shbox.de) C:\Program Files\FreePDF_XP\fpassist.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Splashtop Inc.) C:\Program Files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
(Acronis) C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Macrovision Europe Ltd.) C:\Users\Volker Henkels\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(Creative Labs) C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Jumping Bytes) C:\Program Files\PureSync\PureSyncTray.exe
(Dropbox, Inc.) C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
() C:\Users\Volker Henkels\Documents\Downloads\Trojaner\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [XFastUsb] => C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-10-22] (FNet Co., Ltd.)
HKLM\...\Run: [CTSyncService] => C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)
HKLM\...\Run: [VolPanel] => C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)
HKLM\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry
HKLM\...\Run: [Logitech Utility] => C:\Windows\Logi_MwX.Exe [19968 2003-12-17] (Logitech Inc.)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [139264 2010-10-26] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM\...\Run: [IndexSearch] => C:\Program Files\Nuance\PaperPort\IndexSearch.exe [46368 2010-03-09] (Nuance Communications, Inc.)
HKLM\...\Run: [PaperPort PTD] => C:\Program Files\Nuance\PaperPort\pptd40nt.exe [29984 2010-03-09] (Nuance Communications, Inc.)
HKLM\...\Run: [PPort12reminder] => C:\Program Files\Nuance\PaperPort\Ereg\Ereg.exe [328992 2010-02-09] (Nuance Communications, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [FreePDF Assistant] => C:\Program Files\FreePDF_XP\fpassist.exe [312320 2007-06-26] (shbox.de)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11734240 2012-12-13] (Realtek Semiconductor)
HKLM\...\Run: [ZyngaGamesAgent] => C:\Program Files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe [841544 2010-11-15] (Splashtop Inc.)
HKLM\...\Run: [STCAgent] => C:\Program Files\Splashtop\Splashtop Connect IE\STCAgent.exe [776064 2011-01-21] (Splashtop Inc.)
HKLM\...\Run: [TrueImageMonitor.exe] => C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2622296 2008-04-21] (Acronis)
HKLM\...\Run: [AcronisTimounterMonitor] => C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [911168 2008-04-21] (Acronis)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [136472 2008-04-21] (Acronis)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [KeePass 2 PreLoad] => C:\Program Files\KeePass Password Safe 2\KeePass.exe [2092032 2014-02-03] (Dominik Reichl)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [728312 2015-05-05] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [129272 2015-03-16] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\...\Run: [ISUSPM] => -scheduler
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\...\Run: [PureSync] => C:\Program Files\PureSync\PureSyncTray.exe [915120 2014-08-25] (Jumping Bytes)
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\...\Run: [AceWebException] => C:\Users\Volker Henkels\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe
Lsa: [Authentication Packages] msv1_0 relog_ap
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VR-NetWorld Auftragsprüfung.lnk [2014-01-02]
ShortcutTarget: VR-NetWorld Auftragsprüfung.lnk -> C:\Program Files\VR-NetWorld\VRToolCheckOrder.exe (VR-NetWorld Software)
Startup: C:\Users\Uta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-06-22]
ShortcutTarget: Dropbox.lnk -> C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Volker Henkels\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-03-16]
ShortcutTarget: Dropbox.lnk -> C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
BootExecute: autocheck autochk /k:C *
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Adobe PDF Reader -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2014-12-03] (Adobe Systems Incorporated)
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Internet Security CBE\Engine\20.4.0.40\coIEPlg.dll [2013-05-31] (Symantec Corporation)
BHO: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files\Norton Internet Security CBE\Engine\20.4.0.40\IPS\IPSBHO.DLL [2013-04-09] (Symantec Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-05-11] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-05-11] (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security CBE\Engine\20.4.0.40\coIEPlg.dll [2013-05-31] (Symantec Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Volker Henkels\AppData\Roaming\Mozilla\Firefox\Profiles\xed8oa8w.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-18] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll [2013-05-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-05-11] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-08] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-08] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Extension: Kaspersky URL Advisor - C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru [2015-03-31]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2015-03-31]
FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn
FF Extension: No Name - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn [2013-09-02]
FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn
FF Extension: No Name - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn [2013-05-07]
FF Extension: No Name - C:\Users\Volker Henkels\AppData\Roaming\Mozilla\Firefox\Profiles\xed8oa8w.default\extensions\magicplayer@acestream.org [Not Found]
Chrome:
=======
CHR Profile: C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-06]
CHR Extension: (Google Docs) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-12]
CHR Extension: (Google Drive) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-12]
CHR Extension: (YouTube) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-12]
CHR Extension: (Google Search) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-12]
CHR Extension: (Google Sheets) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-06]
CHR Extension: (AdBlock) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-05-06]
CHR Extension: (Bookmark Manager) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-22]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]
CHR Extension: (Google Wallet) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-12]
CHR Extension: (Gmail) - C:\Users\Volker Henkels\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-12]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [431384 2008-04-21] (Acronis)
R2 AdobeActiveFileMonitor5.0; C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe [102400 2006-09-14] () [File not signed]
S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [827640 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-05-05] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1185584 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [201008 2015-03-16] (Avira Operations GmbH & Co. KG)
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed]
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-10-22] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-10-22] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [File not signed]
R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
S2 KMService; C:\Windows\system32\srvany.exe [8192 2003-04-18] () [File not signed]
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 NIS; C:\Program Files\Norton Internet Security CBE\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.)
R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-10-22] (Creative Labs) [File not signed]
R2 TryAndDecideService; C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe [498952 2008-04-21] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 asahci32; C:\Windows\System32\DRIVERS\asahci32.sys [32352 2011-03-23] (Asmedia Technology)
R3 asmthub3; C:\Windows\System32\DRIVERS\asmthub3.sys [95720 2010-12-29] (ASMedia Technology Inc)
R3 asmtxhci; C:\Windows\System32\DRIVERS\asmtxhci.sys [293352 2010-12-29] (ASMedia Technology Inc)
R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107400 2015-05-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-05-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2015-05-05] (Avira Operations GmbH & Co. KG)
R3 avmaudio; C:\Windows\System32\DRIVERS\avmaudio.sys [101248 2012-03-03] (AVM Berlin)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-04-28] (Avira Operations GmbH & Co. KG)
S1 BHDrvx86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130715.001\BHDrvx86.sys [1002072 2013-05-31] (Symantec Corporation)
S1 ccSet_NIS; C:\Windows\system32\drivers\NIS\1404000.028\ccSetx86.sys [134744 2013-04-16] (Symantec Corporation)
R2 DLPortIO; C:\Windows\system32\DRIVERS\DLPortIO.SYS [3584 1999-01-10] () [File not signed]
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-08-27] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-08-27] (Symantec Corporation)
R3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2011-10-22] (FNet Co., Ltd.)
R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-10-22] (FNet Co., Ltd.)
R1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130830.001\IDSvix86.sys [392792 2013-08-21] (Symantec Corporation)
S3 L8042pr2; C:\Windows\System32\DRIVERS\L8042pr2.Sys [51729 2003-12-17] (Logitech, Inc.)
S3 Ltn_hyd7700pc; C:\Windows\System32\Drivers\Ltn_hyd7700pc.sys [374144 2007-05-18] (Liteon)
S3 Ltn_rc; C:\Windows\System32\Drivers\Ltn_rc.sys [11520 2006-12-27] (Liteon)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130901.019\NAVENG.SYS [93272 2013-08-29] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130901.019\NAVEX15.SYS [1612376 2013-08-29] (Symantec Corporation)
S3 npf; C:\Windows\System32\drivers\npf.sys [34064 2009-02-08] (CACE Technologies)
R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [20640 2011-11-30] (Sonic Solutions) [File not signed]
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [31848 2010-11-16] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [31848 2010-11-16] (RapidSolution Software AG)
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [629760 2010-08-10] (Realtek Semiconductor Corporation )
R2 ScopeItPort; C:\SCOPE-IT\ScopeIt.sys [5231 2012-03-28] () [File not signed]
S3 SRTSP; C:\Windows\System32\Drivers\NIS\1404000.028\SRTSP.SYS [603224 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NIS\1404000.028\SRTSPX.SYS [32344 2013-03-05] (Symantec Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-02-14] (Avira GmbH)
R0 SymDS; C:\Windows\System32\drivers\NIS\1404000.028\SYMDS.SYS [367704 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NIS\1404000.028\SYMEFA.SYS [934488 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142496 2013-06-19] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\NIS\1404000.028\Ironx86.SYS [175264 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NIS\1404000.028\SYMNETS.SYS [339544 2013-04-25] (Symantec Corporation)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-12-15] (The OpenVPN Project)
R3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [37920 2010-11-16] (RapidSolution Software AG)
R0 tdrpman; C:\Windows\System32\DRIVERS\tdrpman.sys [368480 2013-05-07] (Acronis)
R2 tifsfilter; C:\Windows\System32\DRIVERS\tifsfilt.sys [44384 2013-05-07] (Acronis)
S3 catchme; \??\C:\Users\VOLKER~1\AppData\Local\Temp\catchme.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-08 17:01 - 2015-05-08 17:01 - 00112546 _____ () C:\Users\Volker Henkels\Desktop\JRT.txt
2015-05-08 16:59 - 2015-05-08 16:59 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-DESKTOP-Windows-7-Ultimate-(32-bit).dat
2015-05-08 16:59 - 2015-05-08 16:59 - 00000000 ____D () C:\RegBackup
2015-05-08 13:00 - 2015-05-08 13:00 - 00001105 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-05-08 13:00 - 2015-05-08 13:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-05-08 13:00 - 2015-05-08 13:00 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2015-05-08 13:00 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-08 13:00 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-08 12:11 - 2015-05-08 12:11 - 00000000 ____D () C:\Program Files\VS Revo Group
2015-05-06 10:59 - 2015-05-06 11:55 - 00000000 ____D () C:\ComboFix
2015-05-06 10:59 - 2015-05-06 10:59 - 00000000 ____D () C:\Qoobox
2015-05-06 10:59 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-05-06 10:59 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-05-06 10:59 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-05-06 10:59 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-05-06 10:59 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-05-06 10:59 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-05-06 10:59 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-05-06 10:59 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-05-06 10:58 - 2015-05-06 11:55 - 00000000 ____D () C:\Windows\erdnt
2015-05-05 08:52 - 2015-05-05 08:52 - 00000000 ____D () C:\Users\Uta\AppData\Roaming\Avira
2015-05-05 08:49 - 2015-05-05 08:49 - 00000000 ____D () C:\Users\Uta\AppData\Local\{B89840C6-3AAC-46F4-ADA3-6EE66298673F}
2015-05-03 12:00 - 2015-05-08 16:46 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-03 12:00 - 2015-05-08 13:46 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-05-03 12:00 - 2015-05-08 13:00 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-03 11:59 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-03 11:36 - 2015-05-09 13:50 - 00000000 ____D () C:\Users\Volker Henkels\Documents\Logfiles
2015-05-03 11:36 - 2015-05-03 11:36 - 00006103 _____ () C:\Users\Volker Henkels\Documents\gmer_1.txt
2015-05-03 11:07 - 2015-05-03 11:07 - 00000000 _____ () C:\Users\Volker Henkels\defogger_reenable
2015-05-03 10:41 - 2015-05-09 13:59 - 00000000 ____D () C:\FRST
2015-04-28 15:47 - 2015-04-28 15:47 - 00001138 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-04-28 15:40 - 2015-05-01 18:00 - 00000000 ____D () C:\Users\Volker Henkels\AppData\Roaming\Avira
2015-04-28 15:39 - 2015-05-05 13:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-04-28 15:39 - 2015-05-05 13:12 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-04-28 15:39 - 2015-05-05 13:12 - 00107400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-04-28 15:39 - 2015-05-05 13:12 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-04-28 15:39 - 2015-05-01 17:59 - 00000000 ____D () C:\ProgramData\Avira
2015-04-28 15:39 - 2015-04-28 15:46 - 00000000 ____D () C:\Program Files\Avira
2015-04-28 15:39 - 2015-04-28 15:41 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-04-28 15:39 - 2014-02-14 11:00 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2015-04-27 11:26 - 2015-04-27 11:26 - 00000000 ____D () C:\Users\Uta\AppData\Local\{BFD7934C-2205-4CAC-9226-B1B1F6DF58FD}
2015-04-26 08:06 - 2015-04-26 08:07 - 00000000 ____D () C:\Users\Uta\AppData\Local\{E9D9B646-E08B-41F7-BC93-585011053EBC}
2015-04-19 18:19 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-19 18:19 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-18 20:57 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-18 20:57 - 2015-03-23 05:06 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-18 20:57 - 2015-03-23 05:06 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-18 20:57 - 2015-03-23 05:06 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-18 20:57 - 2015-03-23 05:06 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-18 20:57 - 2015-03-23 05:06 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-18 20:57 - 2015-03-23 05:06 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-18 20:57 - 2015-03-23 05:06 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-18 20:57 - 2015-03-23 04:59 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-18 20:57 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-04-18 20:57 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-18 20:57 - 2015-03-17 07:01 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-18 20:57 - 2015-03-17 07:01 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-18 20:57 - 2015-03-17 06:59 - 01306112 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-18 20:57 - 2015-03-17 06:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-18 20:57 - 2015-03-17 06:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-18 20:57 - 2015-03-17 06:56 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-18 20:57 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-18 20:57 - 2015-03-17 06:56 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-18 20:57 - 2015-03-17 06:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-18 20:57 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-18 20:57 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-18 20:57 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-18 20:57 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-18 20:57 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-18 20:57 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-18 20:57 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-18 20:57 - 2015-03-13 05:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-18 20:57 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-18 20:57 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-18 20:57 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-18 20:57 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-18 20:57 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-18 20:57 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-18 20:57 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-18 20:57 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-18 20:57 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-18 20:57 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-18 20:57 - 2015-03-13 05:16 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-18 20:57 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-18 20:57 - 2015-03-13 05:09 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-18 20:57 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-18 20:57 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-18 20:57 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-18 20:57 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-18 20:57 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-18 20:57 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-18 20:57 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-18 20:57 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-18 20:57 - 2015-03-13 04:43 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-18 20:57 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-18 20:57 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-18 20:57 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-18 20:57 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-18 20:57 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-18 20:57 - 2015-03-05 06:06 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-18 20:57 - 2015-03-04 06:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-18 20:57 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 03088384 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 02020864 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-18 20:56 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-18 20:56 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-18 20:56 - 2015-03-25 05:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-18 20:56 - 2015-02-25 05:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-13 10:56 - 2015-04-13 10:57 - 00000000 ____D () C:\Users\Uta\AppData\Local\{0FE4FDFF-C807-4FB4-B922-0E48C4512D86}
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-09 13:49 - 2014-02-12 19:10 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-09 13:49 - 2014-02-12 19:10 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-09 13:41 - 2011-10-19 14:36 - 01116758 _____ () C:\Windows\WindowsUpdate.log
2015-05-09 13:22 - 2012-10-05 12:15 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-09 11:29 - 2011-10-19 14:37 - 01629212 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-09 11:28 - 2009-07-14 06:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-09 11:28 - 2009-07-14 06:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-09 11:23 - 2014-03-16 10:29 - 00000000 ___RD () C:\Users\Volker Henkels\Dropbox
2015-05-09 11:23 - 2014-03-16 10:25 - 00000000 ____D () C:\Users\Volker Henkels\AppData\Roaming\Dropbox
2015-05-09 11:19 - 2013-05-07 16:27 - 00074493 _____ () C:\Windows\setupact.log
2015-05-09 11:19 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-08 18:42 - 2011-10-19 15:52 - 00000000 ____D () C:\Program Files\VR-NetWorld
2015-05-08 18:41 - 2011-10-19 15:52 - 00000000 ____D () C:\Users\Public\Documents\VR-NetWorld
2015-05-08 16:54 - 2013-05-07 21:05 - 00627406 _____ () C:\Windows\PFRO.log
2015-05-08 16:52 - 2014-04-22 00:39 - 00000000 ____D () C:\AdwCleaner
2015-05-08 13:41 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\tracing
2015-05-08 12:24 - 2014-10-25 20:08 - 00000000 ____D () C:\Users\Volker Henkels\AppData\Roaming\.ACEStream
2015-05-06 16:43 - 2014-06-22 13:05 - 00000000 ____D () C:\Users\Uta\AppData\Roaming\Dropbox
2015-05-06 12:23 - 2011-10-20 11:00 - 00001863 _____ () C:\Windows\Alltag.ini
2015-05-06 12:17 - 2011-10-20 11:01 - 00000086 _____ () C:\Windows\Kontext.ini
2015-05-06 11:54 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2015-05-05 12:59 - 2013-08-01 18:13 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-05-03 13:06 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\addins
2015-05-03 11:07 - 2011-10-19 14:38 - 00000000 ____D () C:\Users\Volker Henkels
2015-05-01 21:04 - 2014-03-22 14:42 - 00000000 ____D () C:\Users\Volker Henkels\AppData\Roaming\KeePass
2015-05-01 20:05 - 2014-07-20 13:13 - 00017182 _____ () C:\Users\Volker Henkels\Passwort Datenbank.kdbx
2015-05-01 18:50 - 2014-02-12 19:13 - 00002166 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-01 18:36 - 2011-11-28 15:51 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-04-28 19:45 - 2014-09-08 17:10 - 00000000 ____D () C:\Program Files\Free Easy CD DVD Burner
2015-04-28 15:47 - 2015-02-03 14:35 - 00000000 ____D () C:\ProgramData\Package Cache
2015-04-28 15:35 - 2013-06-09 19:04 - 00000000 ____D () C:\Users\Volker Henkels\AppData\Local\CrashDumps
2015-04-25 11:08 - 2014-03-16 10:28 - 00000000 ____D () C:\Users\Volker Henkels\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-04-23 12:13 - 2011-10-20 10:27 - 00000000 ____D () C:\Users\Volker Henkels\Documents\Steuerfälle
2015-04-22 16:13 - 2011-12-19 11:34 - 00000000 ____D () C:\Users\Volker Henkels\Documents\Stabliste
2015-04-21 13:04 - 2014-08-15 13:25 - 00002220 _____ () C:\Users\Public\Desktop\SteuerSparErklärung 2014.lnk
2015-04-20 13:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2015-04-19 18:48 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2015-04-19 18:32 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-04-19 18:09 - 2014-12-12 12:19 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-19 18:09 - 2014-05-08 20:40 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-19 18:09 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-04-19 03:22 - 2011-10-19 15:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-19 03:16 - 2009-07-14 04:04 - 00000478 _____ () C:\Windows\win.ini
2015-04-18 22:22 - 2012-03-31 17:39 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-18 22:22 - 2011-10-25 09:40 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
==================== Files in the root of some directories =======
2011-12-02 14:30 - 2015-01-28 00:08 - 0000649 _____ () C:\Users\Volker Henkels\AppData\Roaming\burnaware.ini
2006-12-11 20:13 - 2006-12-11 20:13 - 0097336 _____ (Un4seen Developments) C:\Users\Volker Henkels\AppData\Local\bass.dll
2006-12-11 20:13 - 2006-12-11 20:13 - 0013872 _____ (Un4seen Developments) C:\Users\Volker Henkels\AppData\Local\basscd.dll
2007-08-13 18:46 - 2007-08-13 18:46 - 0102912 _____ (Albert L Faber) C:\Users\Volker Henkels\AppData\Local\CDRip.dll
2013-05-13 14:41 - 2015-02-03 14:04 - 0006144 _____ () C:\Users\Volker Henkels\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-10-19 18:23 - 2011-10-19 18:23 - 0000749 _____ () C:\Users\Volker Henkels\AppData\Local\error.log
2007-01-18 22:09 - 2007-01-18 22:09 - 0623616 _____ (Ivan Bischof ©2003 - 2005) C:\Users\Volker Henkels\AppData\Local\No23 Recorder.exe
2011-10-19 18:23 - 2011-10-19 18:23 - 0001955 _____ () C:\Users\Volker Henkels\AppData\Local\process.log
2013-01-30 20:11 - 2013-01-30 20:11 - 0001506 _____ () C:\Users\Volker Henkels\AppData\Local\RecConfig.xml
2012-03-08 20:24 - 2012-03-08 20:24 - 0000017 _____ () C:\Users\Volker Henkels\AppData\Local\resmon.resmoncfg
Files to move or delete:
====================
C:\Users\Volker Henkels\adw24cleaner.exe
Some content of TEMP:
====================
C:\Users\Uta\AppData\Local\Temp\avgnt.exe
C:\Users\Uta\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpz0plli.dll
C:\Users\Volker Henkels\AppData\Local\Temp\avgnt.exe
C:\Users\Volker Henkels\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpmuix6w.dll
C:\Users\Volker Henkels\AppData\Local\Temp\Quarantine.exe
C:\Users\Volker Henkels\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-05-04 12:35
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06-05-2015 01
Ran by Volker Henkels at 2015-05-09 14:00:56
Running from C:\Users\Volker Henkels\Documents\Downloads\Trojaner
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2498879569-601166142-2179082399-500 - Administrator - Disabled)
Gast (S-1-5-21-2498879569-601166142-2179082399-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2498879569-601166142-2179082399-1005 - Limited - Enabled)
Uta (S-1-5-21-2498879569-601166142-2179082399-1003 - Limited - Enabled) => C:\Users\Uta
Volker Henkels (S-1-5-21-2498879569-601166142-2179082399-1000 - Administrator - Enabled) => C:\Users\Volker Henkels
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Norton Internet Security CBE (Disabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security CBE (Disabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security CBE (Disabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
AAVUpdateManager (HKLM\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
Acrobat.com (HKLM\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Acronis*True*Image*Home (HKLM\...\{633A06C3-B709-479A-AAB3-5EE94AD9EE4B}) (Version: 11.0.8105 - Acronis)
Adobe Acrobat 5.0 (HKLM\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.6.0.5970 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Photoshop Elements 5.0 (HKLM\...\Adobe Photoshop Elements 5) (Version: 5.0 - Adobe Systems, Inc.)
Adobe Reader X (10.1.13) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Alltags-Adressen (HKLM\...\Adressen_is1) (Version: - Heiko Prueß / Alltags-Programme)
Apple Application Support (HKLM\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{235EBB33-3DA1-46DF-AADE-9955123409CB}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.4.7.0 - Asmedia Technology)
Asmedia ASM106x SATA Host Controller Driver (HKLM\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.2.2.000 - Asmedia Technology)
ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version: - ASRock Inc.)
ASRock eXtreme Tuner v0.1.56 (HKLM\...\ASRock eXtreme Tuner_is1) (Version: - )
ASRock InstantBoot v1.26 (HKLM\...\ASRock InstantBoot_is1) (Version: - )
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)
Avira (HKLM\...\{b5675cc4-ab8b-4945-8c1d-4c5479556d6a}) (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.10.434 - Avira Operations GmbH & Co. KG)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite MFC-7460DN (HKLM\...\{3ACCCFB3-7B17-4E9F-ACB0-46868FCD4487}) (Version: 1.0.0.0 - Brother Industries, Ltd.)
BurnAware Free 5.3 (HKLM\...\BurnAware Free_is1) (Version: - Burnaware Technologies)
calibre (HKLM\...\{C354D7E2-C1F3-45AB-A547-BF500F2E0814}) (Version: 1.45.0 - Kovid Goyal)
CCleaner (HKLM\...\CCleaner) (Version: 3.11 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4643 - CDBurnerXP)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
DivxToDVD 0.5.2b (HKLM\...\VSO DivxToDVD_is1) (Version: 0.5.2b - VSO-Software SARL)
Dropbox (HKU\S-1-5-21-2498879569-601166142-2179082399-1000\...\Dropbox) (Version: 3.4.4 - Dropbox, Inc.)
FileZilla Client 3.8.0 (HKLM\...\FileZilla Client) (Version: 3.8.0 - Tim Kosse)
Firebird SQL Server - MAGIX Edition (HKLM\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
fotokasten comfort 5.3 (HKLM\...\fotokasten comfort_is1) (Version: - )
Free Easy Burner V 5.1 (HKLM\...\Free Easy Burner_is1) (Version: 5.1.0.0 - Koyote soft)
FreePDF XP (Remove only) (HKLM\...\FreePDF_XP) (Version: - )
GIMP 2.6.12 (HKLM\...\WinGimp-2.0_is1) (Version: 2.6.12 - The GIMP Team)
Google Chrome (HKLM\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)
Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.04) (Version: 9.04 - Artifex Software Inc.)
iExplorer 2.2.1.3 (HKLM\...\{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1) (Version: - Macroplant, LLC)
iFunbox (v2.7.2386.747), iFunbox DevTeam (HKLM\...\iFunbox_is1) (Version: v2.7.2386.747 - )
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
iTunes (HKLM\...\{5D928931-D1D2-4A93-A82D-BF60D0E7CFA5}) (Version: 12.0.1.26 - Apple Inc.)
Java 7 Update 21 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.210 - Oracle)
JPEG-EXIF_autorotate (HKLM\...\JPEG-EXIF_autorotate) (Version: - )
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KeePass Password Safe 2.25 (HKLM\...\KeePassPasswordSafe2_is1) (Version: 2.25 - Dominik Reichl)
K-Lite Codec Pack 5.2.0 (Full) (HKLM\...\KLiteCodecPack_is1) (Version: 5.2.0 - )
Leawo Video Converter 2012 Version 4.1.0.0 (HKLM\...\{E0A8AB05-5217-4D9E-AE90-2BA8B9FB8496}_is1) (Version: 4.1.0.0 - Leawo Software)
Logitech MouseWare 9.79.1 (HKLM\...\{5809E7CF-4DCF-11D4-9875-00105ACE7734}) (Version: - )
MAGIX Foto Designer 7 (HKLM\...\MAGIX_{2DCD52EE-1AE1-4128-9819-A79F7D09B6B3}) (Version: 7.0.1.1 - MAGIX AG)
MAGIX Foto Designer 7 (Version: 7.0.1.1 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (HKLM\...\MX.{0860A3E3-E2BA-485C-8D98-1144A494D167}) (Version: 7.0.2.6 - MAGIX Software GmbH)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX Software GmbH) Hidden
MAGIX Video deluxe 2015 (32-Bit-Version) (HKLM\...\MX.{7571AD6B-E8C3-462E-92B4-020A2CF69B90}) (Version: 14.0.1.21 - MAGIX Software GmbH)
MAGIX Video deluxe 2015 (32-Bit-Version) (Version: 14.0.1.21 - MAGIX Software GmbH) Hidden
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Media Player (HKLM\...\MediaPlayerV1alpha460) (Version: 1.1 - Media Player) <==== ATTENTION
Mediaport (HKLM\...\Mediaport) (Version: - )
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Encarta Enzyklopädie 2000 (HKLM\...\Encarta Encyclopedia 2000 D) (Version: - )
Microsoft Office Outlook Connector (HKLM\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (HKLM\...\{95140000-007D-0409-0000-0000000FF1CE}) (Version: 14.0.5120.5000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 36.0.4 (x86 de) (HKLM\...\Mozilla Firefox 36.0.4 (x86 de)) (Version: 36.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
NetObjects Fusion 10.0 (HKLM\...\{6BCC67CF-BABD-4456-B95C-E6431C8FBC18}) (Version: 10.0 German - )
NetObjects Fusion 10.0 (HKLM\...\{EB280D0C-E8F7-4EA6-907B-4CD72122E904}) (Version: 10.0 German - )
No23 Recorder (HKLM\...\{22B0E143-2B0B-435B-9F56-136A3D16065F}) (Version: 2.1.0.3 - No23)
Norton Internet Security CBE (HKLM\...\NIS) (Version: 20.4.0.40 - Symantec Corporation)
Nuance PaperPort 12 (HKLM\...\{6C0A559F-8583-4B5A-8B50-20BEE15D8E64}) (Version: 12.1.0000 - Nuance Communications, Inc.)
OpenOffice 4.0.1 (HKLM\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Overlook Fing (HKLM\...\Overlook Fing 1.4) (Version: 1.4 - Overlook)
PaperPort 8.0 SE (HKLM\...\{AEF2D1F3-0696-11D5-8E6A-00C04F7FA234}) (Version: 1.0.0.0000 - ScanSoft, Inc.)
Passbild-Generator v4.0a (HKLM\...\Passbild-Generator_is1) (Version: - Passbild-Generator)
PC Inspector smart recovery (HKLM\...\{C9A87D86-FDFD-418B-BF96-EF09320973B3}) (Version: 4.50 - )
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.3 - Frank Heindörfer, Philip Chinery)
PDFill PDF Editor with FREE Writer and FREE Tools (HKLM\...\{D1399216-81B2-457C-A0F7-73B9A2EF6902}) (Version: 11.0 - PlotSoft LLC)
PixiePack Codec Pack (HKLM\...\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}) (Version: 1.1.1200.0 - None)
PureSync (Version: 3.8.1 - Jumping Bytes) Hidden
PureSync 3.8.1 (HKLM\...\PureSync) (Version: 3.8.1 - Jumping Bytes)
QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6804 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: - )
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Schachtrainer (HKLM\...\Schachtrainer_is1) (Version: - Tivola Development GmbH)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (HKLM\...\SLABCOMM&10C4&EA60) (Version: - )
Sound Blaster X-Fi MB (HKLM\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)
Splashtop Connect IE (HKLM\...\{F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}) (Version: 1.1.12.1 - Splashtop Inc.)
SteuerSparErklärung 2014 (HKLM\...\{A463EB06-22A6-47F5-9593-E52B291EF13E}) (Version: 19.13.97 - Akademische Arbeitsgemeinschaft)
SteuerSparErklärung 2015 (HKLM\...\{312C0E08-8F94-4536-AAF6-3413F784AC5F}) (Version: 20.32.155 - Akademische Arbeitsgemeinschaft)
StreamTorrent 1.0 (HKLM\...\StreamTorrent 1.0) (Version: - )
TrueCrypt (HKLM\...\TrueCrypt) (Version: 7.1 - TrueCrypt Foundation)
Tunebite (HKLM\...\{DDED1469-A08D-4043-9661-7FF914BD8F99}) (Version: 7.2.13700.0 - RapidSolution Software AG)
Video DVD Maker v3.30.0.75 (HKLM\...\{1A3E23D7-7A1E-43EC-B35D-EB2A31BED943}) (Version: - )
VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN)
VR-NetWorld (HKLM\...\{8815F011-43AF-4F50-BBD8-D78ED3D6F5B9}) (Version: - )
WaveAgent (HKLM\...\InstallShield_{053C7D32-3566-452B-9A37-D42B4F4C5379}) (Version: 1.20 - Sound Devices LLC)
WaveAgent (Version: 1.20 - Sound Devices LLC) Hidden
WBFS Manager 4.0 (HKLM\...\{825E9A84-1E03-4526-9F8E-45015C938A7C}) (Version: 4.0 - WBFS)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
winpcap-overlook 4.02 (HKLM\...\winpcap-overlook) (Version: - )
WinRAR (HKLM\...\WinRAR archiver) (Version: - )
XFastUsb (HKLM\...\XFastUsb) (Version: - )
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-2498879569-601166142-2179082399-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2498879569-601166142-2179082399-1000_Classes\CLSID\{6d05bf60-3eaf-4a97-87c5-10cce505435b}\localserver32 -> C:\Users\VOLKER~1\AppData\Local\Temp\{9c0ba3c1-2b67-45eb-bf69-bed9658d28d2}\IDriver.NonElevated.exe (the data entry has 7 more characters).
CustomCLSID: HKU\S-1-5-21-2498879569-601166142-2179082399-1000_Classes\CLSID\{9000834c-c6c7-43ac-b8ee-dc9668f39a81}\localserver32 -> C:\Users\VOLKER~1\AppData\Local\Temp\{91814ec0-b5f0-11d2-80b9-00104b1f6cea}\IDriver.NonElevated.exe (the data entry has 7 more characters).
CustomCLSID: HKU\S-1-5-21-2498879569-601166142-2179082399-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2498879569-601166142-2179082399-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2498879569-601166142-2179082399-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2498879569-601166142-2179082399-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2498879569-601166142-2179082399-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2498879569-601166142-2179082399-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2498879569-601166142-2179082399-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2498879569-601166142-2179082399-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2498879569-601166142-2179082399-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
==================== Restore Points =========================
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:04 - 2015-05-06 11:19 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0FCA4127-6BEC-4515-A7ED-28FA9EC00057} - System32\Tasks\{794DB57D-7EB9-4BA0-A3C7-7EBE3D028F00} => C:\Users\Volker Henkels\Documents\Downloads\Torpark.exe
Task: {131B0445-BC6F-4F53-89A5-ECE9C0788863} - System32\Tasks\{6180D768-68E5-4B2C-BC04-3DADEB1A14CF} => E:\Setup.EXE
Task: {18511FD6-6A77-4351-B0D0-9C2C8AC88BD0} - System32\Tasks\Abelssoft\CheckDriveBackgroundGuard => C:\Program Files\CheckDrive\CheckDriveBackgroundGuard.exe
Task: {289D24C2-79EB-41D2-86B3-5F6EA8D4353E} - System32\Tasks\{91AC768C-5270-4F3C-BCDE-8F60AB0134B4} => C:\Users\Volker Henkels\Documents\Downloads\Torpark.exe
Task: {34BA2C71-F71B-46CF-B102-0BAF3B01F302} - System32\Tasks\{EFA2BC6B-098A-4F69-B8EF-EF7449585CEF} => C:\Users\Volker Henkels\Documents\Downloads\Torpark.exe
Task: {42E35F47-810C-49A7-A66F-76431EE90E5C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-18] (Adobe Systems Incorporated)
Task: {4415D302-A36C-4D4A-94AF-0941DE55A4B0} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {4DE13AC1-7A5E-48F4-95EF-DC8D12BF3434} - System32\Tasks\{5AEADBF5-2266-4CB2-902F-EAC4ECA10BA0} => E:\Setup.EXE
Task: {51786A54-D505-400B-914B-EE751D94E89F} - System32\Tasks\{D7B08E1E-9FF0-4729-AC7B-3C277597F92C} => C:\Users\Volker Henkels\Documents\Downloads\Torpark\Torpark.exe
Task: {51907D83-A567-478B-B71A-2FCB53F8797D} - System32\Tasks\{EABA05C3-2F74-4BB5-99F7-072C20501280} => pcalua.exe -a E:\paperport\PP12Installer.exe -d E:\paperport
Task: {63023C49-3575-4105-85A5-A7DFBE1FC3DC} - System32\Tasks\{18C65823-8B94-4B01-9F15-CE2A1DDA68F7} => pcalua.exe -a "C:\Program Files\Microsoft Encarta\Encarta Enzyklopädie 2000\unee2000.exe" -c /uninstall
Task: {6687E89E-0EA9-4C7B-80B3-7588D16BCAEE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-12] (Google Inc.)
Task: {74FB5C52-6DA4-4ADB-916D-4597ED057F61} - System32\Tasks\{5B67CB8B-964C-4C8E-8D41-04ECF755E104} => pcalua.exe -a "C:\Users\Volker Henkels\Downloads\jxpiinstall.exe" -d "C:\Program Files\Mozilla Firefox"
Task: {81640940-9D5D-4FA7-9B36-331EC2DC8C92} - System32\Tasks\{C5EF75EB-2831-46AD-A4DC-01370676B696} => C:\Users\Volker Henkels\Documents\Downloads\Torpark.exe
Task: {822638D8-6F93-490D-93D7-4D4C3DE1972E} - System32\Tasks\{DAFCD1C1-7C64-4B97-A21C-7405D7E6AE6C} => C:\Program Files\Emme\Kleiner Eisbär 2\UNWISE.EXE
Task: {8A541488-06D3-429D-A2A0-B003FCF2B597} - System32\Tasks\{8132B927-E965-487E-98DD-29905D7B89D2} => C:\Users\Volker Henkels\Documents\Downloads\Torpark.exe
Task: {90CDF918-1746-4F25-A79C-A9F6CCEFC876} - System32\Tasks\{ADBEB609-D22B-4CD5-99E4-F7412357DC7C} => pcalua.exe -a C:\PROGRA~1\TECHNI~1\MEDIAP~1\UNWISE.EXE -c C:\PROGRA~1\TECHNI~1\MEDIAP~1\INSTALL.LOG
Task: {9421D7AE-F5E5-4AED-9BA2-F3561670E9C3} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {9B2DCD82-E459-41CE-B203-40E75D93BB5F} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {A5AA510D-F9CA-48B6-A886-E83FFC87583D} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton Internet Security CBE\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation)
Task: {B3420DD3-EEBA-4A85-A10F-3E13A2DC79DD} - System32\Tasks\{BD137A0E-0F87-485C-A8F9-C89BC4224A9F} => pcalua.exe -a "C:\Program Files\IncrediMail\Bin\ImSetup.exe" -c /uninstallProduct /addon:incredimail
Task: {B49F145D-3B72-4BC7-A6FA-E8818EB845C2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-12] (Google Inc.)
Task: {BFA0BDF5-B1B2-4176-8E0F-DF5002D6C903} - System32\Tasks\{CAEC5C14-DA68-494B-9656-F43CB49E0684} => C:\Users\Volker Henkels\Documents\Downloads\Torpark\Torpark.exe
Task: {C2E434F7-9077-4EAC-A430-0368EC4A3407} - System32\Tasks\{EDF60F3E-89B0-4DE1-BF0C-85462ABD839D} => msiexec.exe /package "E:\Setup\Löwenzahn 5.msi"
Task: {C61680E4-97EE-40A4-A841-A88EA1691CB7} - System32\Tasks\{8E92A3C3-8295-42C5-8836-72DD9552015B} => pcalua.exe -a "C:\Users\Volker Henkels\Documents\Downloads\VRNetWorldSW_51012.exe" -d "C:\Users\Volker Henkels\Documents\Downloads"
Task: {C81CDF8E-6421-4F24-84BD-E468FC949571} - System32\Tasks\{77D564C7-808F-4AB7-A975-D95CE6069C90} => pcalua.exe -a "C:\Users\Volker Henkels\Download\Maus\mw9791deu.exe" -d "C:\Users\Volker Henkels\Download\Maus"
Task: {DAECB3EA-C5FA-4B4F-A00C-C6925395EB1D} - System32\Tasks\{981E4BC2-CA6D-4C07-834A-C23786137ED9} => C:\Users\Volker Henkels\Documents\Downloads\torpark-2.4.1-ff3.exe
Task: {DBDF02DB-5EF7-4BA4-B2EE-567E629571E8} - System32\Tasks\{14A5D1A3-3B6D-40FD-B989-C55CBD9CC488} => C:\Users\Volker Henkels\Documents\Downloads\torpark-2.4.1-ff3.exe
Task: {E4297023-2DAB-4DD9-BD10-534216F1718B} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files\Norton Internet Security CBE\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {E8B4FED2-D186-4C9F-BE0E-07BDB3E8FA65} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files\Norton Internet Security CBE\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {F8B6E8F8-4D0E-41F9-88A6-5968D7843E96} - System32\Tasks\{2CCE7FD9-AB71-4537-B279-25FE075D821F} => pcalua.exe -a E:\EE\SETUP.EXE -d E:\EE
Task: {FBBD6DDF-74A3-4123-A987-14C93C0FD596} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {FE781653-1136-40F3-848A-71AB4B3A5F07} - System32\Tasks\{BEB0EF88-0D0B-4128-B0A5-C8FF2E0C65C2} => pcalua.exe -a "C:\Users\Volker Henkels\Documents\Downloads\pci_de_smartrecovery45.exe" -d "C:\Program Files\Mozilla Firefox"
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) ==============
2011-12-02 11:33 - 2001-10-28 18:42 - 00116224 _____ () C:\Windows\System32\pdfcmnnt.dll
2011-10-20 10:56 - 2005-01-06 18:33 - 00116224 _____ () C:\Windows\System32\redmonnt.dll
2008-10-24 16:35 - 2008-10-24 16:35 - 00128296 _____ () C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
2006-09-14 08:56 - 2006-09-14 08:56 - 00102400 _____ () C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 14:05 - 2014-10-11 14:05 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2011-11-13 15:10 - 2009-02-27 17:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2008-04-21 23:27 - 2008-04-21 23:27 - 00498952 _____ () C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-03-28 11:35 - 2014-03-28 11:35 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2011-10-23 22:39 - 2007-09-20 18:34 - 00129024 _____ () C:\Program Files\WinRAR\rarext.dll
2011-08-31 19:13 - 2011-08-31 19:13 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll
2015-05-09 11:22 - 2015-05-09 11:22 - 00697884 _____ () C:\Users\Volker Henkels\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0002\~df394b.tmp
2015-05-09 11:22 - 2015-05-09 11:22 - 00592896 _____ () C:\Users\Volker Henkels\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0002\~de6248.tmp
2011-10-22 12:04 - 2009-02-06 18:52 - 00073728 _____ () C:\Windows\SYSTEM32\CmdRtr.DLL
2011-10-22 12:04 - 2009-04-20 11:55 - 00148480 _____ () C:\Windows\SYSTEM32\APOMngr.DLL
2008-04-21 22:43 - 2008-04-21 22:43 - 01336600 _____ () C:\Program Files\Acronis\TrueImageHome\fox.dll
2015-05-09 11:22 - 2015-05-09 11:22 - 00043008 _____ () c:\Users\Volker Henkels\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpmuix6w.dll
2015-03-04 23:45 - 2015-03-04 23:45 - 00750080 _____ () C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-03-04 23:45 - 2015-03-04 23:45 - 00047616 _____ () C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\libEGL.dll
2015-03-04 23:45 - 2015-03-04 23:45 - 00865280 _____ () C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2015-03-04 23:45 - 2015-03-04 23:45 - 00200704 _____ () C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2015-05-09 13:55 - 2015-05-09 13:55 - 00852630 _____ () C:\Users\Volker Henkels\Documents\Downloads\Trojaner\SecurityCheck.exe
2015-05-01 18:50 - 2015-04-28 04:07 - 01252680 _____ () C:\Program Files\Google\Chrome\Application\42.0.2311.135\libglesv2.dll
2015-05-01 18:50 - 2015-04-28 04:07 - 00080712 _____ () C:\Program Files\Google\Chrome\Application\42.0.2311.135\libegl.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Volker Henkels\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupreg: FreePDF Assistant => C:\Program Files\FreePDF_XP\fpassist.exe
MSCONFIG\startupreg: IndexSearch => C:\Program Files\Scansoft\PaperPort\IndexSearch.exe
MSCONFIG\startupreg: PaperPort PTD => C:\Program Files\Scansoft\PaperPort\pptd40nt.exe
MSCONFIG\startupreg: PP8 SE Reminder => "C:\Program Files\Scansoft\PaperPort\WebEreg\NAVBrowser.exe" -r "C:\Program Files\Scansoft\PaperPort\WebEreg\navLoad.ini"
==================== FirewallRules (whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
FirewallRules: [{B37FBAC1-8C0F-4168-91B8-F39952115DBE}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{2F692203-1DB0-4D3B-B001-F4197354EA7D}] => (Allow) LPort=2869
FirewallRules: [{C3AA16F4-F657-431B-840D-67338D188046}] => (Allow) LPort=1900
FirewallRules: [{D6FC6651-0E7C-44B5-9591-AB5328E138B1}] => (Allow) C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe
FirewallRules: [{2677B019-5FAF-4218-94FD-5AD974B99E7D}] => (Allow) C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe
FirewallRules: [{A1790FAE-BF64-4E6B-95D2-2B1F6B3D9ECE}] => (Allow) LPort=54925
FirewallRules: [{54F3DB20-4D53-4A49-B3EF-F2524D3D7D59}] => (Allow) C:\Program Files\Adobe\Photoshop Elements 5.0\AdobePhotoshopElementsMediaServer.exe
FirewallRules: [{5A5C99AC-8FB6-4D87-824E-0193BE27042A}] => (Allow) C:\Program Files\Adobe\Photoshop Elements 5.0\AdobePhotoshopElementsMediaServer.exe
FirewallRules: [{9854BE86-E71A-41AF-8E33-4CBA3552D207}] => (Allow) C:\Users\Volker Henkels\AppData\Local\Apps\2.0\2Q250O22.HWY\96JPLEXE.RNE\frit..tion_8488884cfbcefd60_0002.0002_8541bf1f4a1c673d\fritzbox-usb-fernanschluss.exe
FirewallRules: [{26F9458A-FB63-4507-89BD-9A17235A5279}] => (Allow) C:\Users\Volker Henkels\AppData\Local\Apps\2.0\2Q250O22.HWY\96JPLEXE.RNE\frit..tion_8488884cfbcefd60_0002.0002_8541bf1f4a1c673d\fritzbox-usb-fernanschluss.exe
FirewallRules: [{F0C0E574-8614-4289-8F83-987C96BD5D34}] => (Allow) C:\Users\Volker Henkels\AppData\Local\Apps\2.0\2Q250O22.HWY\96JPLEXE.RNE\frit..tion_8488884cfbcefd60_0002.0002_8541bf1f4a1c673d\fritzbox-usb-fernanschluss.exe
FirewallRules: [{ABEE847B-4764-4802-94EF-4A20880DFE7F}] => (Allow) C:\Users\Volker Henkels\AppData\Local\Apps\2.0\2Q250O22.HWY\96JPLEXE.RNE\frit..tion_8488884cfbcefd60_0002.0002_8541bf1f4a1c673d\fritzbox-usb-fernanschluss.exe
FirewallRules: [{5974B080-77EC-461C-9A28-D71C28373024}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{CC034879-5FB8-4C61-A8CC-C2A1529C5A59}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{8D86D336-FBED-447F-B1C0-26032749444B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{19A36E4D-E61A-413A-A3F8-2BAEF6CD642B}] => (Allow) C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{E6FDE045-88E8-4474-ACB9-5CCCA8D0D3B3}] => (Allow) C:\Users\Volker Henkels\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{6F5E31D1-BFCD-4E87-8887-8C4A33E3E314}] => (Allow) C:\Users\Uta\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{BDD3FCEE-C823-4A50-88E2-3FBA7BCB1EF4}] => (Allow) C:\Users\Uta\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{7675CFF5-2E9E-4EFA-BA6C-06C0F863A867}C:\users\volker henkels\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\volker henkels\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{1ECDA62E-ABD3-45BD-BA05-6511837BCCB0}C:\users\volker henkels\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\volker henkels\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{D3A78000-8D4A-412F-8B0D-126975DFC77E}C:\users\uta\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\uta\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{F19E5006-6BC2-4255-9223-5E3A88D26C02}C:\users\uta\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\uta\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{F3C2C1AA-99B4-4142-BF01-D0EEA4F36B6A}C:\program files\streamtorrent 1.0\streamtorrent.exe] => (Allow) C:\program files\streamtorrent 1.0\streamtorrent.exe
FirewallRules: [UDP Query User{DA7C87AA-40D6-4370-A2BD-743F9A22C0C3}C:\program files\streamtorrent 1.0\streamtorrent.exe] => (Allow) C:\program files\streamtorrent 1.0\streamtorrent.exe
FirewallRules: [{C476E187-F630-4614-A471-B6053D14D323}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{1A445D69-5C90-4D1B-9D88-870FFB289B15}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{20813C83-76AB-4994-994D-FEFCC96F5B83}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{CEE3DBEA-465C-4E83-9C96-F4283D174415}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
Name: BHDrvx86
Description: BHDrvx86
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: BHDrvx86
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Norton Internet Security CBE Settings Manager
Description: Norton Internet Security CBE Settings Manager
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ccSet_NIS
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Symantec Iron Driver
Description: Symantec Iron Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: SymIRON
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (05/09/2015 00:41:06 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/05/09 12:41:06.055]: [00002324]: SendSKeySettingToDevice:: Snmp Load Error[0] To[192.168.178.27]
Error: (05/09/2015 11:23:48 AM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/05/09 11:23:48.854]: [00002324]: SendSKeySettingToDevice:: Snmp Load Error[0] To[192.168.178.27]
Error: (05/08/2015 07:18:27 PM) (Source: System Restore) (EventID: 8211) (User: )
Description: Der geplante Wiederherstellungspunkt konnte nicht erstellt werden. Zusätzliche Informationen: (0x81000101).
Error: (05/08/2015 07:18:27 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x81000101).
Error: (05/08/2015 05:03:41 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/05/08 17:03:41.535]: [00002304]: GetDeviceIpAddress: GetAddressByName [BRN001BA97A22D7] Error
Error: (05/08/2015 05:03:41 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/05/08 17:03:41.465]: [00002304]: SendSKeySettingToDevice:: Snmp Load Error[-1] To[192.168.178.27]
Error: (05/08/2015 05:02:58 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/05/08 17:02:58.614]: [00002304]: GetDeviceIpAddress: GetAddressByName [BRN001BA97A22D7] Error
Error: (05/08/2015 05:02:28 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/05/08 17:02:28.568]: [00002304]: GetDeviceIpAddress: GetAddressByName [BRN001BA97A22D7] Error
Error: (05/08/2015 05:02:28 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/05/08 17:02:28.475]: [00002304]: SendSKeySettingToDevice:: Snmp Load Error[-1] To[192.168.178.27]
Error: (05/08/2015 05:01:49 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/05/08 17:01:49.678]: [00002304]: GetDeviceIpAddress: GetAddressByName [BRN001BA97A22D7] Error
System errors:
=============
Error: (05/09/2015 11:28:18 AM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
Error: (05/09/2015 11:20:51 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (05/09/2015 11:20:01 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
BHDrvx86
ccSet_NIS
SymIRON
Error: (05/09/2015 09:34:09 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
BHDrvx86
ccSet_NIS
SymIRON
Error: (05/09/2015 09:33:36 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (05/08/2015 06:35:29 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (05/08/2015 06:34:45 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
BHDrvx86
ccSet_NIS
SymIRON
Error: (05/08/2015 05:00:04 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/08/2015 05:00:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/08/2015 05:00:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "FABS - Helping agent for MAGIX media database" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Microsoft Office Sessions:
=========================
Error: (05/09/2015 00:41:06 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STIBrtSTI: [2015/05/09 12:41:06.055]: [00002324]: SendSKeySettingToDevice:: Snmp Load Error[0] To[192.168.178.27]
Error: (05/09/2015 11:23:48 AM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STIBrtSTI: [2015/05/09 11:23:48.854]: [00002324]: SendSKeySettingToDevice:: Snmp Load Error[0] To[192.168.178.27]
Error: (05/08/2015 07:18:27 PM) (Source: System Restore) (EventID: 8211) (User: )
Description: 0x81000101
Error: (05/08/2015 07:18:27 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationGeplanter Prüfpunkt0x81000101
Error: (05/08/2015 05:03:41 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STIBrtSTI: [2015/05/08 17:03:41.535]: [00002304]: GetDeviceIpAddress: GetAddressByName [BRN001BA97A22D7] Error
Error: (05/08/2015 05:03:41 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STIBrtSTI: [2015/05/08 17:03:41.465]: [00002304]: SendSKeySettingToDevice:: Snmp Load Error[-1] To[192.168.178.27]
Error: (05/08/2015 05:02:58 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STIBrtSTI: [2015/05/08 17:02:58.614]: [00002304]: GetDeviceIpAddress: GetAddressByName [BRN001BA97A22D7] Error
Error: (05/08/2015 05:02:28 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STIBrtSTI: [2015/05/08 17:02:28.568]: [00002304]: GetDeviceIpAddress: GetAddressByName [BRN001BA97A22D7] Error
Error: (05/08/2015 05:02:28 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STIBrtSTI: [2015/05/08 17:02:28.475]: [00002304]: SendSKeySettingToDevice:: Snmp Load Error[-1] To[192.168.178.27]
Error: (05/08/2015 05:01:49 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STIBrtSTI: [2015/05/08 17:01:49.678]: [00002304]: GetDeviceIpAddress: GetAddressByName [BRN001BA97A22D7] Error
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-2100 CPU @ 3.10GHz
Percentage of memory in use: 64%
Total physical RAM: 3050.68 MB
Available physical RAM: 1095.3 MB
Total Pagefile: 6097.59 MB
Available Pagefile: 3867.86 MB
Total Virtual: 2047.88 MB
Available Virtual: 1913.21 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:292.87 GB) (Free:103.27 GB) NTFS
Drive d: () (Fixed) (Total:172.79 GB) (Free:22.25 GB) NTFS
Drive f: (UUI) (Removable) (Total:7.47 GB) (Free:5.02 GB) FAT32
Drive g: () (Removable) (Total:1.84 GB) (Free:0.98 GB) FAT
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: F961277B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=292.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=172.8 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 1.8 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
========================================================
Disk: 5 (Size: 7.5 GB) (Disk ID: 00481927)
Partition 1: (Active) - (Size=7.5 GB) - (Type=0C)
==================== End Of Log ============================
|
|
10.05.2015, 06:15
| #20 |
| /// the machine /// TB-Ausbilder | Aus Email Anhang von DHL TR/Emotet.A.92 installiert Java, Adobe und Firefox updaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Program Files\Free Easy CD DVD Burner\Helper.dll
C:\Program Files\PDFCreator\Toolbar\pdfforge Toolbar_setup.exe
C:\Users\Volker Henkels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TQOU0BKG\Download\Windows Cleaner.exe
C:\Users\Volker Henkels\Documents\CHIP Software\fsSetup118.exe
C:\Users\Volker Henkels\Documents\Downloads\Passbild Generator - CHIP-Installer.exe
C:\Users\Volker Henkels\Documents\Downloads\PDFCreator-1_2_3_setup.exe
C:\Users\Volker Henkels\Documents\Downloads\SopCast3.5.0.zip
C:\Users\Volker Henkels\Documents\Downloads\Video DVD Maker Free - CHIP-Installer.exe
C:\Users\Volker Henkels\Documents\H&H Tontechnik\Für Ulf\Pcgo Diskimage.iso
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\...\Run: [AceWebException] => C:\Users\Volker Henkels\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe
BootExecute: autocheck autochk /k:C *
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Downloadverhalten überdenken: anleitung.trojaner-board.de/chip-installer  Cleanup: (Die Reihenfolge ist hier entscheidend) Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken. Falls Combofix verwendet wurde:  Combofix deinstallieren
Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.   Absicherung: Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank. Meine Empfehlung:  Emsisoft Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner . Abschließend noch ein paar grundsätzliche Bemerkungen: Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems. Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
10.05.2015, 18:44
| #21 |
| | Erstmal Danke!Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 06-05-2015 01
Ran by Volker Henkels at 2015-05-10 19:06:27 Run:1
Running from C:\Users\Volker Henkels\Documents\Downloads\Trojaner
Loaded Profiles: Volker Henkels (Available profiles: Volker Henkels & Uta)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Program Files\Free Easy CD DVD Burner\Helper.dll
C:\Program Files\PDFCreator\Toolbar\pdfforge Toolbar_setup.exe
C:\Users\Volker Henkels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TQOU0BKG\Download\Windows Cleaner.exe
C:\Users\Volker Henkels\Documents\CHIP Software\fsSetup118.exe
C:\Users\Volker Henkels\Documents\Downloads\Passbild Generator - CHIP-Installer.exe
C:\Users\Volker Henkels\Documents\Downloads\PDFCreator-1_2_3_setup.exe
C:\Users\Volker Henkels\Documents\Downloads\SopCast3.5.0.zip
C:\Users\Volker Henkels\Documents\Downloads\Video DVD Maker Free - CHIP-Installer.exe
C:\Users\Volker Henkels\Documents\H&H Tontechnik\Für Ulf\Pcgo Diskimage.iso
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\...\Run: [AceWebException] => C:\Users\Volker Henkels\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe
BootExecute: autocheck autochk /k:C *
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Emptytemp:
*****************
C:\Program Files\Free Easy CD DVD Burner\Helper.dll => Moved successfully.
C:\Program Files\PDFCreator\Toolbar\pdfforge Toolbar_setup.exe => Moved successfully.
C:\Users\Volker Henkels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TQOU0BKG\Download\Windows Cleaner.exe => Moved successfully.
C:\Users\Volker Henkels\Documents\CHIP Software\fsSetup118.exe => Moved successfully.
C:\Users\Volker Henkels\Documents\Downloads\Passbild Generator - CHIP-Installer.exe => Moved successfully.
C:\Users\Volker Henkels\Documents\Downloads\PDFCreator-1_2_3_setup.exe => Moved successfully.
C:\Users\Volker Henkels\Documents\Downloads\SopCast3.5.0.zip => Moved successfully.
C:\Users\Volker Henkels\Documents\Downloads\Video DVD Maker Free - CHIP-Installer.exe => Moved successfully.
C:\Users\Volker Henkels\Documents\H&H Tontechnik\Für Ulf\Pcgo Diskimage.iso => Moved successfully.
HKU\S-1-5-21-2498879569-601166142-2179082399-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AceWebException => value deleted successfully.
HKLM\System\CurrentControlSet\Control\Session Manager\\BootExecute => Value was restored successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
EmptyTemp: => Removed 1.4 GB temporary data.
The system needed a reboot.
==== End of Fixlog 19:12:06 ====
|
|
11.05.2015, 09:48
| #22 |
| /// the machine /// TB-Ausbilder | Aus Email Anhang von DHL TR/Emotet.A.92 installiert fertig
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Aus Email Anhang von DHL TR/Emotet.A.92 installiert |
| antivir, antivirus, avira, bonjour, browser, converter, desktop, dhl mail, email, flash player, google, kaspersky, launch, logfile, maus, realtek, registry, scan, security, software, starten, svchost.exe, symantec, system, trojaner, virusverdacht, virusverdacht nach öffnen infizierter emailanhang, windows |
+ R Taste und schreibe Combofix /Uninstall in das 
Linear-Darstellung
