Trojaner-Board - GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert (https://www.trojaner-board.de/138088-gvu-2-07-trojaner-vista-hitman-hirens-boot-cd-haben-funktioniert.html)

GVU 2.07 Trojaner auf Vista / Hitman und Hirens Boot CD haben nicht funktioniert

Hallo liebe Community,

ich bin neu hier also verzeiht, falls ich Fehler mache ;)

Mein Vater hat es geschafft, den Vista-Laptop meiner Mutter zu schrotten, indem er auf Malware-Seiten war und sie nun den 2.07er GVU-Trojaner hat.

Wir haben es schon mit Hitman versucht - ein Mal kam ich bis zum Programm, dann war der Laptop leer, bei neuen Versuchen kam ich erst gar nicht so weit. Ich habe alle Modi ausprobiert und nichts passierte außer, dass der Laptop startete und dann zur GVU-Seite kam oder sich direkt wieder herunter fuhr (mit der Anzeige 'Herunterfahren..').

Mein zweiter Versuch war die Methode von Alex Ken via youtube. Ich habe mit 'Rufus' einen Hiren's Boot USB Stick erstellt, bin auch gut durchgekommen, habe allerdings versehentlich, anstatt die Dateien durch Zusatz der Endung 'bak' umzubenennen, die eindeutigen Malware-Dateien gelöscht. Nach dem Neustart startete dann eine cmd.exe und sagte mir, dass eben diese, von mir als eindeutige Malware-Datei erkannte Datei, falsch geschrieben ist oder nicht gefunden wurde.

Momentan bin ich dabei einen OTLPE-Stick zu erstellen!

Die Schwierigkeit ist, dass auf dem befallenen Laptop Vista ist, mein Rechner ein Macbook ist und das Netbook, dass ich noch nutzen kann, Windows 7 hat :D

Ich hoffe, ihr könnt mir helfen! :)

Dankeschön :)

Hi,

Lass OTLPE weg.

Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8)

Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)

Downloade dir bitte die passende Version des Tools (im Zweifel beide) und speichere diese auf einen USB Stick: FRST 32-Bit | FRST 64-Bit

Schließe den USB Stick an das infizierte System an und boote das System in die System Reparatur Option.

Scanne jetzt nach der bebilderten Anleitung oder verwende die folgende Kurzanleitung:

Über den Boot Manager:

Starte den Rechner neu.

Während dem Hochfahren drücke mehrmals die F8 Taste

Wähle nun Computer reparieren.

Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".

Mit Windows CD/DVD (auch bei Windows 8 möglich):

Lege die Windows CD in dein Laufwerk.

Starte den Rechner neu und starte von der CD.

Wähle die Spracheinstellungen und klicke "Weiter".

Klicke auf Computerreparaturoptionen !

Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".

Wähle in den Reparaturoptionen: Eingabeaufforderung

Gib nun bitte notepad ein und drücke Enter.

Im öffnenden Textdokument: Datei > Speichern unter... und wähle Computer.
Hier wird dir der Laufwerksbuchstabe deines USB Sticks angezeigt, merke ihn dir.

Schließe Notepad wieder

Gib nun bitte folgenden Befehl ein.
e:\frst.exe bzw. e:\frst64.exe
Hinweis: e steht für den Laufwerksbuchstaben deines USB Sticks, den du dir gemerkt hast. Gegebenfalls anpassen.

Akzeptiere den Disclaimer mit Ja und klicke Untersuchen

Das Tool erstellt eine FRST.txt auf deinem USB Stick. Poste den Inhalt bitte hier nach Möglichkeit in Code-Tags (Anleitung).

Hallo schrauber,

danke für die schnelle Antwort. Nach einigen Problemen hat es jetzt über die CD geklappt!

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-07-2013 01

Ran by SYSTEM on 12-07-2013 08:41:28

Running from F:\

Windows Vista (TM) Home Premium Service Pack 1 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Recovery
 

The current controlset is ControlSet001
 ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and Addition.txt log.
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Defender] - %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [LMgrOSD] - "C:\Program Files\Launch Manager\OSDCtrl.exe" [241664 2006-08-29] ()

HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon [1637496 2011-08-04] (CANON INC.)

HKLM\...\Run: [avgnt] - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-07-01] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s [11672208 2012-08-31] (Realtek Semiconductor)

HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [141848 2009-09-23] (Intel Corporation)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [173592 2009-09-23] (Intel Corporation)

HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [150552 2009-09-23] (Intel Corporation)

HKLM\...\Runonce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [x]

HKU\Anna\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\Anna\AppData\Local\Temp\cesexmuolejicawli.exe [x] <===== ATTENTION

HKU\Anna\...\Winlogon: [Shell] cmd.exe [ 2008-01-21] (Microsoft Corporation) <==== ATTENTION 

HKU\Anna\...\Command Processor: "C:\Users\Anna\AppData\Local\Temp\cesexmuolejicawli.exe" <===== ATTENTION!

HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation)

HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation)

Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)

Startup: C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk

ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
 

========================== Services (Whitelisted) =================
 

S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG)

S2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [140456 2011-09-06] ()

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)

S3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [113152 2009-03-04] (Wistron Corp.)
 

==================== Drivers (Whitelisted) ====================
 

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-03-27] (Avira Operations GmbH & Co. KG)

S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-03-27] (Avira Operations GmbH & Co. KG)

S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-27] (Avira Operations GmbH & Co. KG)

S1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

S1 HWiNFO32; \??\F:\DIAG\HWINFO32\HWiNFO32.SYS [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S3 USBAAPL; System32\Drivers\usbaapl.sys [x]

S3 uxddrv; \??\F:\uxddrv86.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-07-12 08:41 - 2013-07-12 08:41 - 00000000 ____D C:\FRST

2013-07-11 19:27 - 2013-07-11 19:28 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp

2013-07-11 19:22 - 2013-07-11 19:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp

2013-07-11 18:29 - 2013-07-11 19:27 - 193362412 _____ C:\Windows\MEMORY.DMP

2013-07-11 18:29 - 2013-07-11 19:27 - 00000000 ____D C:\Windows\Minidump

2013-07-11 18:29 - 2013-07-11 18:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp

2013-07-11 18:22 - 2013-07-11 18:22 - 00000000 ____D C:\ProgramData\HitmanPro

2013-07-11 05:22 - 2013-05-29 02:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-07-11 05:22 - 2013-05-29 02:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2013-07-11 05:22 - 2013-05-29 02:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-07-11 05:22 - 2013-05-29 02:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl

2013-07-11 05:22 - 2013-05-29 02:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll

2013-07-11 05:22 - 2013-05-29 02:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-07-11 05:22 - 2013-05-29 02:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\System32\url.dll

2013-07-11 05:22 - 2013-05-29 02:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2013-07-11 05:22 - 2013-05-29 02:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe

2013-07-11 05:22 - 2013-05-29 02:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll

2013-07-11 05:22 - 2013-05-29 02:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll

2013-07-11 05:22 - 2013-05-29 02:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2013-07-11 05:22 - 2013-05-29 02:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2013-07-11 05:22 - 2013-05-29 02:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-07-11 05:22 - 2013-05-29 02:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll

2013-07-11 05:22 - 2013-05-29 02:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll

2013-07-10 10:17 - 2013-06-04 02:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys

2013-07-10 10:17 - 2013-06-01 05:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll

2013-07-10 10:17 - 2013-05-08 05:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL

2013-07-10 10:17 - 2013-04-17 12:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\System32\d3d10.dll

2013-07-10 10:17 - 2013-04-17 12:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll

2013-07-10 10:17 - 2013-04-17 12:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\System32\d3d10core.dll

2013-07-10 10:17 - 2013-04-17 12:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll

2013-07-10 10:17 - 2013-04-17 11:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll

2013-07-10 10:17 - 2013-04-17 11:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll

2013-07-10 10:17 - 2013-04-17 11:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\System32\d2d1.dll

2013-07-10 10:17 - 2013-04-17 11:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll

2013-07-10 10:17 - 2013-04-17 11:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\System32\FntCache.dll

2013-07-10 08:56 - 2013-07-10 08:56 - 00000000 ____D C:\Users\Anna\AppData\Local\{4D4C01C9-758E-4287-BC78-525110F96E28}

2013-07-09 12:05 - 2013-07-09 12:05 - 00000000 ____D C:\Users\Anna\AppData\Local\{972D5C66-ABBE-4299-BEC2-0AB1697EDFCA}

2013-07-08 10:17 - 2013-07-08 10:17 - 00000000 ____D C:\Users\Anna\AppData\Local\{76AA8DA7-A0CA-4B64-8161-5F70E9314C52}

2013-07-07 20:13 - 2013-07-07 20:14 - 00000000 ____D C:\Users\Anna\AppData\Local\{052E06E5-BB70-423F-BCD6-CE10447904D6}

2013-07-05 11:07 - 2013-07-05 11:07 - 00000000 ____D C:\Users\Anna\AppData\Local\{5E8BAA18-B059-4DFC-B145-9F953F9BA906}

2013-07-04 19:49 - 2013-07-04 19:49 - 00000000 ____D C:\Users\Anna\AppData\Local\{350F4CE9-E1AF-4E8D-8222-12F57D801274}

2013-07-03 16:10 - 2013-07-03 16:10 - 00000000 ____D C:\Users\Anna\AppData\Local\{9E7E6922-CD5E-4DF0-99CF-B1577E87F527}

2013-07-02 19:30 - 2013-07-02 19:30 - 00000000 ____D C:\Users\Anna\AppData\Local\{107D0085-EDCD-4028-B27A-921164322B23}

2013-07-01 11:50 - 2013-07-01 11:50 - 00000000 ____D C:\Users\Anna\AppData\Local\{C50E8972-0969-443D-9617-574BB869F1E5}

2013-06-30 16:32 - 2013-06-30 16:32 - 00000000 ____D C:\Users\Anna\AppData\Local\{9FB6E802-C0B9-4CC0-A303-0E7DFEC18093}

2013-06-29 14:23 - 2013-06-29 14:23 - 00000000 ____D C:\Users\Anna\AppData\Local\{74CA5688-C18F-4E53-B329-926648ABE73E}

2013-06-28 16:22 - 2013-06-28 16:22 - 00000000 ____D C:\Users\Anna\AppData\Local\{00A83E1D-9BAB-4DE4-8409-8188E70B61FA}

2013-06-27 08:55 - 2013-06-27 08:55 - 00000000 ____D C:\Users\Anna\AppData\Local\{743A058F-28BD-44D7-BFFD-C17A24F3A10E}

2013-06-26 09:21 - 2013-06-26 09:21 - 00000000 ____D C:\Users\Anna\AppData\Local\{E17C377E-CF89-49FF-B3B9-E7E0DB3416CB}

2013-06-25 16:12 - 2013-06-25 16:12 - 00000000 ____D C:\Users\Anna\AppData\Local\{8482F556-00F6-480B-8297-274C3203DE36}

2013-06-22 09:56 - 2013-06-22 09:56 - 00000000 ____D C:\Users\Anna\AppData\Local\{12344D84-56C5-4004-B0CF-212C0E69EF24}

2013-06-21 20:56 - 2013-06-21 20:56 - 00000000 ____D C:\ProgramData\WindowsSearch

2013-06-21 10:37 - 2013-06-21 10:37 - 00000000 ____D C:\Users\Anna\AppData\Local\{0EF8A2A7-1DBD-4D75-853F-3E96BE4B1424}

2013-06-20 20:49 - 2013-06-20 20:49 - 00000000 ____D C:\Users\Anna\AppData\Local\{909E8661-CC35-4DA3-89BE-DD129DF598DE}

2013-06-20 08:48 - 2013-06-20 08:49 - 00000000 ____D C:\Users\Anna\AppData\Local\{15C01E4F-D9D9-4815-BE5F-676CBE54C1D7}

2013-06-19 20:48 - 2013-06-19 20:48 - 00000000 ____D C:\Users\Anna\AppData\Local\{1D11C49D-7022-4916-AFD2-1FAE11A49B68}

2013-06-19 08:43 - 2013-06-19 08:43 - 00000000 ____D C:\Users\Anna\AppData\Local\{E99D4311-99A0-4DA7-AD2D-62EB8C9C5C37}

2013-06-18 14:06 - 2013-06-18 14:06 - 00000000 ____D C:\Users\Anna\AppData\Local\{19CEE134-AEA9-4C14-BA98-EDE6B9E5B5C0}

2013-06-17 11:38 - 2013-06-17 11:39 - 00000000 ____D C:\Users\Anna\AppData\Local\{D6909C70-8889-4071-9A82-1635D51368D4}

2013-06-17 11:36 - 2013-05-08 05:37 - 00905576 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys

2013-06-17 11:36 - 2013-05-02 05:04 - 00443904 _____ (Microsoft Corporation) C:\Windows\System32\win32spl.dll

2013-06-17 11:36 - 2013-05-02 05:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\System32\printcom.dll

2013-06-17 07:57 - 2013-06-17 07:57 - 00000000 ____D C:\Users\Anna\AppData\Local\{9E07B48F-B698-42AC-8E46-29CCD7DBA172}

2013-06-16 17:50 - 2013-06-16 17:50 - 00000000 ____D C:\Users\Anna\AppData\Local\{9309CCC7-9461-40B0-8CC9-26C7264EA563}

2013-06-15 20:29 - 2013-06-15 20:29 - 00000000 ____D C:\Users\Anna\AppData\Local\{CCE2FE15-730D-4146-9D75-362B7AEE2284}

2013-06-14 21:32 - 2013-06-14 21:32 - 00000000 ____D C:\Users\Anna\AppData\Local\{B082B4B9-0852-4BAE-9922-ECFF38558CF8}

2013-06-14 08:57 - 2013-06-14 08:57 - 00000000 ____D C:\Users\Anna\AppData\Local\{2C323536-3B91-4D3E-9806-F8E867075601}

2013-06-13 20:56 - 2013-06-13 20:57 - 00000000 ____D C:\Users\Anna\AppData\Local\{15D73CE6-A362-4D22-BEE6-40518B9335E3}

2013-06-13 08:56 - 2013-06-13 08:56 - 00000000 ____D C:\Users\Anna\AppData\Local\{E0B6B397-7077-4DDE-82CD-A312E477517E}

2013-06-13 04:54 - 2013-06-13 04:54 - 00000000 ____D C:\30269cb3e1045cd9ca

2013-06-12 20:34 - 2013-06-12 20:35 - 00000000 ____D C:\Users\Anna\AppData\Local\{56379DE9-17D3-4272-86F3-CA02494654BD}

2013-06-12 08:38 - 2013-05-02 23:03 - 03603832 _____ (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe

2013-06-12 08:38 - 2013-05-02 23:03 - 03551096 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe

2013-06-12 08:38 - 2013-04-24 05:00 - 00985600 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll

2013-06-12 08:38 - 2013-04-24 05:00 - 00133120 _____ (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll

2013-06-12 08:38 - 2013-04-24 05:00 - 00098304 _____ (Microsoft Corporation) C:\Windows\System32\cryptnet.dll

2013-06-12 08:38 - 2013-04-24 05:00 - 00041984 _____ (Microsoft Corporation) C:\Windows\System32\certenc.dll

2013-06-12 08:38 - 2013-04-24 02:46 - 00812544 _____ (Microsoft Corporation) C:\Windows\System32\certutil.exe

2013-06-12 08:38 - 2013-04-17 13:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll

2013-06-12 08:34 - 2013-06-12 08:34 - 00000000 ____D C:\Users\Anna\AppData\Local\{D424C3F1-EBFB-4106-BEFC-DF54D91231AF}
 

==================== One Month Modified Files and Folders =======
 

2013-07-12 08:41 - 2013-07-12 08:41 - 00000000 ____D C:\FRST

2013-07-12 07:26 - 2008-01-21 08:16 - 01445546 _____ C:\Windows\System32\PerfStringBackup.INI

2013-07-12 07:26 - 2008-01-21 02:35 - 01685413 _____ C:\Windows\WindowsUpdate.log

2013-07-12 07:26 - 2006-11-02 13:47 - 00003712 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-07-12 07:26 - 2006-11-02 13:47 - 00003712 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-07-11 22:54 - 2012-12-03 22:10 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-07-11 22:44 - 2011-07-30 18:53 - 00000000 ____D C:\users\Anna

2013-07-11 21:22 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-07-11 20:32 - 2006-11-02 11:22 - 19398656 _____ C:\Windows\System32\config\SYSTEM.BAK

2013-07-11 19:28 - 2013-07-11 19:27 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp

2013-07-11 19:27 - 2013-07-11 18:29 - 193362412 _____ C:\Windows\MEMORY.DMP

2013-07-11 19:27 - 2013-07-11 18:29 - 00000000 ____D C:\Windows\Minidump

2013-07-11 19:22 - 2013-07-11 19:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp

2013-07-11 18:29 - 2013-07-11 18:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp

2013-07-11 18:22 - 2013-07-11 18:22 - 00000000 ____D C:\ProgramData\HitmanPro

2013-07-11 05:35 - 2006-11-02 13:47 - 00372168 _____ C:\Windows\System32\FNTCACHE.DAT

2013-07-11 05:33 - 2011-08-25 17:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-07-11 05:32 - 2006-11-02 13:37 - 00000000 ____D C:\Windows\System32\XPSViewer

2013-07-11 05:24 - 2006-11-02 11:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\System32\mrt.exe

2013-07-11 05:13 - 2006-11-02 13:37 - 00000000 ____D C:\Program Files\Windows Journal

2013-07-10 08:56 - 2013-07-10 08:56 - 00000000 ____D C:\Users\Anna\AppData\Local\{4D4C01C9-758E-4287-BC78-525110F96E28}

2013-07-09 12:05 - 2013-07-09 12:05 - 00000000 ____D C:\Users\Anna\AppData\Local\{972D5C66-ABBE-4299-BEC2-0AB1697EDFCA}

2013-07-08 10:17 - 2013-07-08 10:17 - 00000000 ____D C:\Users\Anna\AppData\Local\{76AA8DA7-A0CA-4B64-8161-5F70E9314C52}

2013-07-07 20:14 - 2013-07-07 20:13 - 00000000 ____D C:\Users\Anna\AppData\Local\{052E06E5-BB70-423F-BCD6-CE10447904D6}

2013-07-05 11:07 - 2013-07-05 11:07 - 00000000 ____D C:\Users\Anna\AppData\Local\{5E8BAA18-B059-4DFC-B145-9F953F9BA906}

2013-07-04 19:49 - 2013-07-04 19:49 - 00000000 ____D C:\Users\Anna\AppData\Local\{350F4CE9-E1AF-4E8D-8222-12F57D801274}

2013-07-03 16:10 - 2013-07-03 16:10 - 00000000 ____D C:\Users\Anna\AppData\Local\{9E7E6922-CD5E-4DF0-99CF-B1577E87F527}

2013-07-02 19:30 - 2013-07-02 19:30 - 00000000 ____D C:\Users\Anna\AppData\Local\{107D0085-EDCD-4028-B27A-921164322B23}

2013-07-01 12:09 - 2012-08-30 11:03 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-07-01 11:50 - 2013-07-01 11:50 - 00000000 ____D C:\Users\Anna\AppData\Local\{C50E8972-0969-443D-9617-574BB869F1E5}

2013-06-30 16:32 - 2013-06-30 16:32 - 00000000 ____D C:\Users\Anna\AppData\Local\{9FB6E802-C0B9-4CC0-A303-0E7DFEC18093}

2013-06-29 14:23 - 2013-06-29 14:23 - 00000000 ____D C:\Users\Anna\AppData\Local\{74CA5688-C18F-4E53-B329-926648ABE73E}

2013-06-28 16:22 - 2013-06-28 16:22 - 00000000 ____D C:\Users\Anna\AppData\Local\{00A83E1D-9BAB-4DE4-8409-8188E70B61FA}

2013-06-27 08:55 - 2013-06-27 08:55 - 00000000 ____D C:\Users\Anna\AppData\Local\{743A058F-28BD-44D7-BFFD-C17A24F3A10E}

2013-06-26 15:18 - 2012-09-20 14:33 - 00000000 ____D C:\Users\Anna\Desktop\Noah

2013-06-26 09:21 - 2013-06-26 09:21 - 00000000 ____D C:\Users\Anna\AppData\Local\{E17C377E-CF89-49FF-B3B9-E7E0DB3416CB}

2013-06-25 16:12 - 2013-06-25 16:12 - 00000000 ____D C:\Users\Anna\AppData\Local\{8482F556-00F6-480B-8297-274C3203DE36}

2013-06-22 10:09 - 2013-05-29 12:43 - 00000000 ____D C:\Users\Anna\Desktop\Dzemo in Ostfriesland

2013-06-22 09:56 - 2013-06-22 09:56 - 00000000 ____D C:\Users\Anna\AppData\Local\{12344D84-56C5-4004-B0CF-212C0E69EF24}

2013-06-21 20:56 - 2013-06-21 20:56 - 00000000 ____D C:\ProgramData\WindowsSearch

2013-06-21 10:37 - 2013-06-21 10:37 - 00000000 ____D C:\Users\Anna\AppData\Local\{0EF8A2A7-1DBD-4D75-853F-3E96BE4B1424}

2013-06-20 20:49 - 2013-06-20 20:49 - 00000000 ____D C:\Users\Anna\AppData\Local\{909E8661-CC35-4DA3-89BE-DD129DF598DE}

2013-06-20 08:49 - 2013-06-20 08:48 - 00000000 ____D C:\Users\Anna\AppData\Local\{15C01E4F-D9D9-4815-BE5F-676CBE54C1D7}

2013-06-19 20:48 - 2013-06-19 20:48 - 00000000 ____D C:\Users\Anna\AppData\Local\{1D11C49D-7022-4916-AFD2-1FAE11A49B68}

2013-06-19 08:43 - 2013-06-19 08:43 - 00000000 ____D C:\Users\Anna\AppData\Local\{E99D4311-99A0-4DA7-AD2D-62EB8C9C5C37}

2013-06-18 20:16 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache

2013-06-18 14:06 - 2013-06-18 14:06 - 00000000 ____D C:\Users\Anna\AppData\Local\{19CEE134-AEA9-4C14-BA98-EDE6B9E5B5C0}

2013-06-17 11:39 - 2013-06-17 11:38 - 00000000 ____D C:\Users\Anna\AppData\Local\{D6909C70-8889-4071-9A82-1635D51368D4}

2013-06-17 11:22 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\System32\Msdtc

2013-06-17 11:05 - 2006-11-02 11:22 - 41418752 _____ C:\Windows\System32\config\software_previous

2013-06-17 11:05 - 2006-11-02 11:22 - 19398656 _____ C:\Windows\System32\config\system_previous

2013-06-17 11:04 - 2006-11-02 12:18 - 00000000 __RSD C:\Windows\Media

2013-06-17 11:04 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\System32\spool

2013-06-17 11:03 - 2011-07-31 13:21 - 00000000 ____D C:\ProgramData\McAfee Security Scan

2013-06-17 11:03 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\registration

2013-06-17 10:59 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\System32\config\default_previous

2013-06-17 10:58 - 2006-11-02 11:22 - 36438016 _____ C:\Windows\System32\config\components_previous

2013-06-17 10:14 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\System32\config\security_previous

2013-06-17 10:13 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\System32\config\sam_previous

2013-06-17 07:57 - 2013-06-17 07:57 - 00000000 ____D C:\Users\Anna\AppData\Local\{9E07B48F-B698-42AC-8E46-29CCD7DBA172}

2013-06-16 17:50 - 2013-06-16 17:50 - 00000000 ____D C:\Users\Anna\AppData\Local\{9309CCC7-9461-40B0-8CC9-26C7264EA563}

2013-06-15 20:29 - 2013-06-15 20:29 - 00000000 ____D C:\Users\Anna\AppData\Local\{CCE2FE15-730D-4146-9D75-362B7AEE2284}

2013-06-14 21:32 - 2013-06-14 21:32 - 00000000 ____D C:\Users\Anna\AppData\Local\{B082B4B9-0852-4BAE-9922-ECFF38558CF8}

2013-06-14 12:29 - 2013-01-01 16:25 - 00000000 ____D C:\Users\Anna\Desktop\Neuer Ordner

2013-06-14 08:57 - 2013-06-14 08:57 - 00000000 ____D C:\Users\Anna\AppData\Local\{2C323536-3B91-4D3E-9806-F8E867075601}

2013-06-13 20:57 - 2013-06-13 20:56 - 00000000 ____D C:\Users\Anna\AppData\Local\{15D73CE6-A362-4D22-BEE6-40518B9335E3}

2013-06-13 08:56 - 2013-06-13 08:56 - 00000000 ____D C:\Users\Anna\AppData\Local\{E0B6B397-7077-4DDE-82CD-A312E477517E}

2013-06-13 04:56 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\System32\de-DE

2013-06-13 04:54 - 2013-06-13 04:54 - 00000000 ____D C:\30269cb3e1045cd9ca

2013-06-12 20:35 - 2013-06-12 20:34 - 00000000 ____D C:\Users\Anna\AppData\Local\{56379DE9-17D3-4272-86F3-CA02494654BD}

2013-06-12 08:34 - 2013-06-12 08:34 - 00000000 ____D C:\Users\Anna\AppData\Local\{D424C3F1-EBFB-4106-BEFC-DF54D91231AF}
 

==================== Known DLLs (Whitelisted) ============
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 

==================== EXE ASSOCIATION =====================
 

HKLM\...\.exe: exefile => OK

HKLM\...\exefile\DefaultIcon: %1 => OK

HKLM\...\exefile\open\command: "%1" %* => OK
 

==================== Restore Points  =========================
 

Restore point made on: 2013-05-16 08:21:49

Restore point made on: 2013-05-17 12:38:37

Restore point made on: 2013-05-20 15:45:55

Restore point made on: 2013-05-21 18:10:39

Restore point made on: 2013-05-23 09:36:52

Restore point made on: 2013-05-25 09:06:35

Restore point made on: 2013-05-31 08:15:57

Restore point made on: 2013-06-04 08:58:18

Restore point made on: 2013-06-07 14:41:03

Restore point made on: 2013-06-09 15:25:20

Restore point made on: 2013-06-11 07:58:44

Restore point made on: 2013-06-12 13:17:12

Restore point made on: 2013-06-13 04:52:24

Restore point made on: 2013-06-13 07:29:44

Restore point made on: 2013-06-17 10:27:31

Restore point made on: 2013-06-17 10:58:16

Restore point made on: 2013-06-17 11:36:54

Restore point made on: 2013-06-17 11:41:06

Restore point made on: 2013-06-21 10:42:34

Restore point made on: 2013-06-25 16:10:31

Restore point made on: 2013-06-29 14:23:45

Restore point made on: 2013-07-03 16:15:20

Restore point made on: 2013-07-09 12:40:53

Restore point made on: 2013-07-10 09:14:52

Restore point made on: 2013-07-11 05:12:07
 

==================== Memory info =========================== 
 

Percentage of memory in use: 11%

Total physical RAM: 4085.5 MB

Available physical RAM: 3614.41 MB

Total Pagefile: 3826.14 MB

Available Pagefile: 3663.87 MB

Total Virtual: 2047.88 MB

Available Virtual: 1963.1 MB
 

==================== Drives ================================
 

Drive c: (BOOT) (Fixed) (Total:278.57 GB) (Free:198.56 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (RECOVER) (Fixed) (Total:19.5 GB) (Free:12.8 GB) FAT32

Drive e: (MEDHPSP1DEU) (CDROM) (Total:2.53 GB) (Free:0 GB) CDFS

Drive f: (STORE N GO) (Removable) (Total:3.73 GB) (Free:3.72 GB) FAT32

Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: F98D6E74)

Partition 1: (Active) - (Size=279 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=20 GB) - (Type=0C)
 

========================================================

Disk: 1 (Size: 4 GB) (Disk ID: 00000000)

Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)
 
 

LastRegBack: 2013-07-12 07:26
 

==================== End Of Log ============================

--- --- ---

Danke :)

Drücke bitte die

+ R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

HKU\Anna\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\Anna\AppData\Local\Temp\cesexmuolejicawli.exe [x] <===== ATTENTION

HKU\Anna\...\Winlogon: [Shell] cmd.exe [ 2008-01-21] (Microsoft Corporation) <==== ATTENTION 

HKU\Anna\...\Command Processor: "C:\Users\Anna\AppData\Local\Temp\cesexmuolejicawli.exe" <===== ATTENTION!

C:\Users\Anna\AppData\Local\Temp\cesexmuolejicawli.exe

Speichere diese bitte als Fixlist.txt auf deinem USB Stick.

Starte deinen Rechner erneut in die Reparaturoptionen
Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.

neu booten, freuen :D

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 12-07-2013 01

Ran by SYSTEM at 2013-07-12 09:52:52 Run:1

Running from F:\

Boot Mode: Recovery
 

==============================================
 

HKU\Anna\Software\Microsoft\Windows\CurrentVersion\Run\\qcgce2mrvjq91kk1e7pnbb19m52fx => Value deleted successfully.

HKU\Anna\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully.

HKU\Anna\Software\Microsoft\Command Processor\\AutoRun => Value deleted successfully.

"C:\Users\Anna\AppData\Local\Temp\cesexmuolejicawli.exe" => File/Directory not found.
 

==== End of Fixlog ====

Es geht, juhu! :)

Hast du einen Tipp, was man machen kann, um sowas demnächst zu umgehen? Also spezielle Software?

Danke, danke, danke :)

Machen wir nachher, erst noch Kontrollscans im normalen Modus :)

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Nach dem Booten ist die WLan-Verbindung hinüber. Per Lan habe ich eine Verbindung, das Netzwerk wird aber nicht gefunden, wenn ich es über WLan probiere. Woran kann das liegen?

Diese Malware verbiegt gerne noch en paar Einstellungen. Richten wir im Anschluss :)

Der JRT-Code

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 5.0.7 (07.11.2013:1)

OS: Windows Vista (TM) Home Premium x86

Ran by Anna on 12.07.2013 at 13:26:23,37

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{8D527BD2-87A1-49EB-8E14-29038C3D3658}
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{007B88DF-8835-4C71-8271-808BF8FE16CD}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{009396BA-19E3-4915-B8F8-1F066C0D0482}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{00A83E1D-9BAB-4DE4-8409-8188E70B61FA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{016A0D39-51D0-4AA1-893E-BED359DB5BE9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{020E90B0-5340-4901-9647-8461FC5A637C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0382E63D-F32D-464A-BDCE-6A72AE026216}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{03859908-722D-4DBF-A325-E1A872F38808}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{03AA0A0F-C8A0-495E-ADF6-8D249ED0FCC8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{03C2F8FE-AF2B-4274-B98A-339B2845836D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{03DF4CB8-D64D-4CD5-9AE0-11A9453A6A3F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{04819A12-2407-477C-90B7-F4C63C1C536A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{04C36AE3-60B5-4F49-95D9-1341E4F224EA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{051A3D38-D6D7-44DE-9BCE-0B34B3C9FB0C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{052E06E5-BB70-423F-BCD6-CE10447904D6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{05CDC5AC-6E32-4C89-B656-161BF717A88B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{073462FB-CCCB-42B9-857E-A0C241187251}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0898248F-BBF5-49C7-822E-912921FBF292}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{08B0EE70-51EF-4BF7-9FA5-C57C0616009C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{08EB226C-3BDB-4B6C-B7F3-07B909714735}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{091BFEDD-1835-4A10-8206-E4E9D8FD8697}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0A6FAB9B-7109-4380-B169-FCE4FE216725}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0C0C643F-B981-425C-8747-449178A60374}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0C219DAD-7371-46A1-AE3E-74D22E31FC27}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0C316823-26AA-46D6-AC9A-CBE7ACCDFB4A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0C613DE3-7A3E-4157-9D12-1FC39A67ADA2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0C7E5117-1085-435C-AD49-D97F2F81CD48}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0D4B897A-61ED-4946-9515-50F15E6A7063}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0E23508F-F76E-4E31-A5E8-CC6CDF4D496C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0E511339-9AE6-4467-B057-30ABAC8F1B43}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0EA45E42-B42C-4F8A-9258-A4E7E870006C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0EBEF401-9BCE-4188-BECD-791F73D211CC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0ECF8291-B355-4A7D-A52F-E5ACDFF186AB}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0EF8A2A7-1DBD-4D75-853F-3E96BE4B1424}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0F5173B2-994F-4604-BA7E-8A84429D6D6C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0F5D7392-47FC-49D1-ACC8-A88D4F06E4B5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0FC132CA-8CDA-4ED3-B395-0319A060CA1B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{0FE29143-EDE4-48F9-97B1-A310050B9104}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1010FC54-47E2-43DE-9665-D2B296F91294}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{10746C80-CBEA-4A80-AB02-426F05F06374}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{107D0085-EDCD-4028-B27A-921164322B23}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{109AE8E9-CE9F-4759-9DEB-8792F5B97FAB}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{10F498FC-86A0-4928-A973-DB77FE57DCAF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{114DD16C-A6CB-47CE-BCCA-9A8B003F15B4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{11F9CECD-46DC-4CC9-B628-7971CB228520}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{12344D84-56C5-4004-B0CF-212C0E69EF24}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{123D196E-C78E-439F-AC07-F3548BAEB17E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{12E1F57B-29A6-47B6-95D5-0D79AB8583A8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{13B554E4-87C7-4D72-9A08-228BE8D05408}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{13B820A1-6CE3-4EA0-AD4C-86D8FE6CE157}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{144AA651-A344-4E08-99B6-704446AE77C9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{14824D58-2ADF-4545-9484-E0F2AED2A771}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{157F3C06-6AAE-4D3C-B8AE-85BE6053CF35}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{15C01E4F-D9D9-4815-BE5F-676CBE54C1D7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{15D73CE6-A362-4D22-BEE6-40518B9335E3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{15E3BF25-51B8-4A0B-846D-78EA95ADB9DF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{160BBC4B-C6F8-477C-AA65-E03F0D2B44AA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1665F30E-FD70-40A3-A3E9-9F636197511B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1682B2F1-D479-494D-8B2E-59360E24D4E0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{16C7B44C-E743-4B4C-BC15-3912C953F30C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{16D0BDC6-1982-45D1-8B53-04EC51A47DD8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{17343541-B078-411C-BF26-EDE26B61E256}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{17A98FEA-7F87-4921-B9DA-BDA2AF2C3ADA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{181B4C05-AC79-4CAD-B8E1-5D044D8DD97F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{187D8071-4905-4F7D-8A2C-97C795295266}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{188119F0-06BC-471E-9082-FB7D9A646213}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{18899B08-3C5F-4026-861E-36BAB38A4DD7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{18D50863-46B7-42E8-969B-1D4C7274E5F4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{198541B0-1086-4B10-A177-ED30EB1FB3B1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{19C57BCA-4F53-4B41-B4A2-EA172A9757F8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{19CEE134-AEA9-4C14-BA98-EDE6B9E5B5C0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{19DA2CBE-8912-4F01-8306-0412C01921B6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1A50BB5E-1317-4BEE-A17F-157A9BC130C4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1ABAF2A7-B2A7-48FF-BA1A-8729383BC747}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1AE8BC79-854C-44F9-8627-900BE339346E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1B3FBED4-E9E4-4E93-A549-FE6EB7043723}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1B92BA9F-50DB-47EB-BF08-F5987ACC3F38}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1C14A75F-BDA9-491F-81C2-52CAD68F0854}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1C822FEF-15FD-41B4-A77A-271FCA927CD6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1C82B4DC-4C29-4B3B-8388-4C0DD76B13F1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1CB08237-E9F0-4C13-AB9D-8199CA97CDF7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1D11C49D-7022-4916-AFD2-1FAE11A49B68}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1D63CD09-B0C0-4768-8D96-55C5F30160EF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1D7DE9DE-F63C-453A-B6B0-478494F7F603}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1DBE9EA5-DF7C-4688-8128-E68770613367}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1DD48320-0EFE-4A94-A5FD-AC5FEE6FE838}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1E0729D4-8783-419D-BA91-2B950D80ADCF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1E0FC961-8474-464C-B034-2BAE881C9BD1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1E1530F4-B6AE-4189-BCDA-C7775CB9CD78}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1E191E41-CC4A-47E2-A919-BD7A7376D80A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1E70EB93-DFDE-4B7E-AFA8-AF434BBDA9AE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1ECB8E41-E5E3-4E64-8063-55A6C6923AD4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1F45D5DE-3E09-479C-89FB-731B0A2DB78F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{1F49FC72-0E38-490C-9238-1043816E7772}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{20EAFBE0-4F3A-4FCE-81E0-D87F71AAD257}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{213B09BC-F8AB-480C-94AB-F5F77BF5B5C0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{21441EFF-C74E-4E49-8E19-7E4C65CAB24F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{21AF14AB-C38D-45A3-9B2B-253BF057F577}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{21BC91BA-98A4-4DAA-BDE2-4CC2126DD124}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{225A3CBB-A369-4FBB-BC6A-A283D8D1C5AF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{23CAD4C6-F05D-4DD4-86CC-AC93CDE0F32D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{23EA9D14-D14A-4A15-89B8-54A46031C8EE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{24896E5E-9753-49AB-983E-6FF22F99A64F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{250479C9-D407-4074-B91E-1D6E96AD62B9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{260E1AE3-AA3E-47A2-AA83-DD19EDB8BCE4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{262B5C99-72B9-4560-8EB9-C12D9EA8F3C3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{264C2309-61E7-42CC-8AB7-EE8A933794B2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{266D53C1-129F-4D48-8F80-3B6886FC077C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2682D22D-2E51-4847-ACF2-04774767246B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{26C2A668-FEBB-49E0-8E12-5090166332FF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{26D0711B-6850-4226-A2CA-3E02E8C9FD97}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{27AC661A-7E7C-46C9-B5FF-EC903D985BD9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{28091822-8630-43C6-8C2A-0AF3633E4FAB}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2827B23A-0B64-4048-9246-0DD1E0E18391}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2827C404-0FF7-4BDB-9D9B-4175959EA5EE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{28B34025-224D-493F-8908-019B152B493F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{28F5C578-25E5-495A-B128-DE84381DB3F1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{291088B7-4AA6-40E2-A4CA-8E5BDD6EF838}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{29390A1F-8F94-4612-8E58-AD10F0B8F09E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2967289E-2492-4A0C-989A-7A90A801D7EE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{297AC3A8-0463-4732-A6D3-E988E0107DAB}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{29D0EBBD-A3BB-49E2-900C-BCF647AB1A87}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2A3E0515-65E9-42E3-97F4-F24A5A274DD0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2AD8313F-3437-46F1-A4BC-D34D2C2CA1C4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2BBAE166-A0B1-43F9-A605-F504B7A2DE97}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2C323536-3B91-4D3E-9806-F8E867075601}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2C37214F-AA42-4C6B-906A-CE1678A8D2A2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2C7B4176-18EF-4EEE-A758-A51999F92122}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2CCAEDE0-E79E-4381-96C1-9E123E691CF6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2D8DEA64-729C-4DAE-9F6E-BB4D1356B30C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2D9E42FF-EE61-485E-A9F8-9AB4CC8BD803}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2DB42821-33E9-4949-B55C-72A072779B5F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2DBDE85C-14D5-4579-B1F2-1B7120123333}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2DF46AEC-5567-4086-AE68-BA45401AD2A2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2E5BD05F-6081-465E-AB44-AB3D0726A16D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2F114444-5C03-4B60-BC5F-1A90AC8D8990}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2F410904-2237-4017-9BD0-DD7E9037AB2F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2F454BDD-72F0-4492-9FD0-6DCA6A3D31C8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{2F9560AB-F1FE-4ED5-8AC1-0EB380E1DC0E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3096416C-EC29-430A-B6BE-9879F6855858}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3182775D-4F21-4AD7-B1B0-1B1312A563AB}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{324A3C52-DDF7-4E88-BD0F-CD7AC9D98339}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{32D57235-4BB0-4E00-B185-3D0EFA2521E5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3393CD09-F896-4751-A060-B169E1DDBB56}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{339DBFEC-E19F-4910-A42F-0B02A9E4AB4E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{33DCAA36-B171-41BA-8C94-73FD5A1048C2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{340637BD-69E0-489A-9876-A3F534A2DCD5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{34885BAE-464F-42D8-B624-C501436096D1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{349EA470-F3F8-4C5D-8BA3-D8D2C42882D2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{34B03791-D9BB-47BA-B2F1-8009DE8E21D2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{34B6EEB1-5734-4CA8-986D-DA4E7402D634}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{34C4E8F6-4F87-414C-8035-CAA5F58DEFFC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{350F4CE9-E1AF-4E8D-8222-12F57D801274}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3574B8AF-BE17-4B62-80CA-1186B614AF09}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{35D92669-E3F4-4FB4-9116-48F1CE67D905}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{365575D3-0D56-44F6-BD3E-8662ED9A7949}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{366FD285-E73D-4640-8670-79338C868538}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{37195135-5435-4E75-9EDD-7367A5B26A4B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{372DD52D-2CF2-47FA-9D7B-6EEACC58114D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{373C3BBB-09BC-4E00-8443-8B4CFE919CD0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{37584391-6F42-4B91-8830-B209D97BD02A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{37651553-FE6F-4E2E-993B-DC2BDD858A7C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3784D521-D517-4F87-8CB1-E173A08EC5E9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{378EC7D1-5877-49F2-B5FA-BB4C03240D1B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{37BC03AD-E709-44B8-BFC8-47D218EFDAFA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{37E6599B-A4B7-4C62-B532-D41721BFBFFC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{388C8904-96B5-49EA-BE40-CF49B5103213}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{38A34611-FFDE-49E3-B257-CBD7F11F7FFC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3921D586-5292-4B40-8087-E934578A3548}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{392A2356-3731-4806-8708-AA6548377925}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3934BA35-DED9-4DE1-910D-16108D19A314}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{39F37754-5B7C-4F6F-9948-A633FC18FF15}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3AB28680-EAA3-4178-B817-D6A14F508FA7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3B3D0838-85D8-417B-AEF6-1635F2C16951}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3B908940-3FDC-4848-8A9E-33BDF075E3D8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3BC9AB64-B8AB-49AC-B38F-FB1FFDAFA0DE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3C60430F-DCB9-4A16-AF6E-F0B25B5DF6A3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3CD68A35-1C17-48EA-BB53-D842D1238976}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3CEE3CA6-7A97-4819-AAA6-59CE58D65BE4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3DB53889-4F91-43AC-BA3C-0045DEC0221B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3E140D86-EC0A-4D63-931B-313447021F4F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3E188DCA-8146-4042-BEAB-FFAB0B1D6563}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3E1EC007-9FF2-45C2-8BF1-80B25C7A4776}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3E2B2E17-5A4A-4D14-87B0-DD3BACF3D204}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3E65BB1C-6860-42C3-AAB7-AF56DAB73216}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3EC7E98A-73A0-4889-A2D4-3AFBA2680C98}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3EF267A3-6736-462E-BC7D-07C6323FD887}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3F07B6CA-854D-4AB6-A913-DE545CE4126C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3F12D454-8FF1-4D8A-9BC6-A69C44AFB434}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3F425BB9-EDB2-4C24-A91B-B01771049310}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3F6EDEC3-3F06-44E6-AB1C-F5DD63696D9B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3F83FA85-8F29-4911-AB2F-D80DDF63FFED}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3FC313C4-5DD6-48DC-BF9A-54DD8C9009B8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{3FFB2A7F-601B-4B4D-90C1-27112E727E79}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4017C4C9-F0D6-48FD-8F0D-9D6CB38A0D68}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{40771451-1736-4554-8C69-1D1458DA1722}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{40B22F3F-6025-4181-8F61-403E085608C6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{40F81636-9765-413B-BD31-A13DBB2B217A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{411F3635-B4D1-42E0-BB2B-5E2D1B1C441B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{41F2AA9F-2873-44C0-8AB2-3078C398037A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{42CCDC2E-16D6-44F7-9F0C-857EF6952C77}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{432A619F-99DB-45B2-AE9A-7CAFB0543FA6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4397DBBA-74D3-4D91-9B37-A7B656FA6670}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{439F984D-72AA-446C-9795-04C4D58DCE65}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{43F9C8BF-1BA7-4C89-8174-F2D213655A7B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{44ED1E80-762E-4AE7-A648-B9C877043B77}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{450BEBE1-7B9A-4079-A4BF-15684A9851F9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4541D914-9DE1-4458-889A-DF4792981371}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{46051DCF-D495-45B6-B689-C548AE8162F2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4630CCCB-1D6E-445D-9D57-B6F3E1AC0ABA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4682210D-1A76-46C3-9D5F-455C4965224D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{46B8305B-8484-4429-99B4-30FFDA726409}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{46BC8414-EEE4-441C-8FBE-3D743976FC90}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{46C8151E-1B2C-40DD-852B-89FF6215976D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{46CB659A-2580-44EA-9D19-18C8E7175932}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{47273DE3-9C60-4DED-81CA-89660E40A746}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{478A52F6-9A39-42B8-BD7D-A545796614E0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{47D43BFD-772F-479F-8E6C-FBA4F3B690FF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{47DA6D4B-FED7-400B-9CF7-B1BE7F8DB574}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{482821ED-811E-4C8F-AC62-8CCA33BD926D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4844BB93-AE7A-4309-BF38-DC9D13B7700F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{485626AF-871C-44C2-AC60-ADFF37A4F685}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{48C1A004-62C6-4F53-B366-418090D4EAE0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{49B501E7-4CC2-4AB3-86C0-E672A0AAA2B8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{49FF7463-9E86-44A2-B99E-E5F6BB6707A3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4A7A6523-CD65-41D9-83EB-F276112FA0D9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4B4D6CC2-5B44-4BA0-8B17-E956C91D1B94}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4BCF0EB4-5AE9-4B35-B0F0-C95313950C07}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4BE1833C-9F23-4A7D-B87B-82AC75315A40}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4C48EE6C-EFA8-40CB-8968-30F78DEC7197}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4CBEBC36-525D-4A22-8053-986EC298F3D6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4D0C2A8B-F3A7-4D84-BF1D-DEE8AB7BA316}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4D4C01C9-758E-4287-BC78-525110F96E28}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4DAA2995-CD79-401E-B5DC-38EAF56B2978}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4E1BFD6D-741A-45D1-99D2-E280211B7843}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4E97F046-C2BC-46B8-8F08-13EB04A15E60}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{4EB4B279-5AA2-436A-9BDE-3442EBF33815}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5047DE4D-99CE-4C2C-AA80-C9727D8B3CA7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{504D4EE7-000D-4893-A11A-CCB5F59F87BC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{50D01439-2F1F-4EE2-B361-04FE08A9466B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{50E7273D-74EB-4431-90D1-FE8EF2143918}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{523CB762-DF38-46B5-8104-76BFAE3AC2AE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{529BE0DE-CEB1-44B4-A4A9-6BA45DBB03F7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{531B5493-73B7-4207-BF50-C7C9117D74A1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{53628E22-2674-4770-8482-2D0F831F0EAD}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{53A6B4A3-4FE5-424F-989F-3E29508170C6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{53BF3441-A402-4FBB-8EA5-5E358851C2BF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{540CD9B4-0CE6-4BDC-8C8D-8C15BB1C23D2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5457A1E4-0A4B-4A00-A64E-4F699A8624BF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{54B1F954-34D5-439A-ACF2-2A1166C19FB4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5514A6D9-083F-4F0F-9EE3-465B50E065BF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5521CE12-0790-408A-B74A-890946F417BF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{55B2454C-7277-40CB-8FD4-64E24B8465A2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{55C71101-E2B4-4C59-B4E4-FFD09FC515E2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{56379DE9-17D3-4272-86F3-CA02494654BD}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{56383E70-2AFD-4A03-8999-120AE777AABA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{56464A89-8BFA-4D91-AA7D-89E4745AF7AB}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{565693BB-7A01-4302-97EF-4E2DDE2DF52A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5675DFDF-DD5D-48EA-BC60-ACCDE09778A1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{56959C9C-9AAA-4A2B-B874-CBF661EE094A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{56C02079-8BB5-4AC6-9124-2A262362C57F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{572275DF-B905-466B-9273-597BC6675731}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{57F6CB2D-9B34-4575-81AF-44F259BC1F51}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5806A739-207B-4397-8BAE-D501AD1E95D7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5817BA9C-1935-4CC8-ACE1-8FA585AEC617}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5879CEA7-96D5-4E80-BE41-21766C9890D0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{589E883D-69CD-4020-A63E-FB4F82FF3F1E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{58FF0AFA-4A65-4130-BCFE-7BB56E2E8627}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{59C4850C-82E0-4B69-9406-6A49ACDAB748}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5A76146F-5C26-41D2-9A55-657BAF48BB1C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5A8B11B6-7AD9-4259-BC60-E9991B4865C8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5ABD3D11-10F3-42E4-BCEF-639082D00C43}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5AD5A542-56FC-4F55-890C-E6B35A4BCF6F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5AE254C8-8265-4B4E-B8AD-FE318B0F9DD1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5B15C7D2-E283-490D-BE67-CE31CBF250D4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5B28CCDE-F224-4AFF-A8B0-939374783647}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5B54DF0D-45CA-4A9C-919F-0AEEAB714561}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5C124A42-C9DF-45C4-91CA-A412C3EEE3CA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5C788D39-954B-4D3C-AA09-F6ED24519952}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5C84A2FF-9372-40CF-9BB2-EA7ACBED2CA5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5D0BE715-BC9A-4569-8410-0AB43BE44589}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5D75B503-2DCC-49A4-8600-DCD1C6CFFFCF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5DBF72C3-B951-4514-BBE7-3FB91321A8AC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5DCECCC6-CD8B-40DB-83C4-A4095C21D2FE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5E2FDE59-EFEE-409A-9A95-BF7EDC298F7A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5E392663-7A81-413F-958B-91EC54C07A0C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5E3C4A04-FFE2-41DB-A4AA-ED88C0945339}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5E8BAA18-B059-4DFC-B145-9F953F9BA906}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5EBBEE0E-3717-4CF3-9EC3-9FCB5F89FF14}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5ED4E1D3-1B7A-4CAA-B7C3-9CA90A768E87}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5F0B87DB-FC8C-4143-9BC7-A73928BECCF2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5FA07E7F-9B1E-41D9-8FA2-796F4F2C4E5A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{5FD00CE8-B0E7-4B33-B8B9-AA4D905E4A8B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6001A26F-6638-467F-BC46-58584F16FA9A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{601ADF64-9EBF-4A85-933F-FED71D723445}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{606174A5-3834-44C9-AF8E-16C4C7473AE9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6061C03F-32F6-4A0E-B81B-57F52C5F1ADC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{60A98AE7-64EF-4109-94BC-EA5FD61CA23F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{60EC0AD0-3624-46AA-BFD2-93B74D6D9F85}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{60F40DFB-6165-4056-AC3A-9A850DF0C175}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{61F6AE2B-629A-4661-BA78-678E5A451249}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{623815BF-E45D-458B-ACC1-D354B2D5AC47}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{627307BE-4B7E-4DCD-829D-6DAF0DB6C870}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6290A9EB-16F1-4BBC-A584-B8EBB8FF01DA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6371FBB2-3CFB-4981-ABB3-E47BB06A609A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{638993E7-A99E-48CF-9629-90947A2D9B52}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{641A0BCF-7F9E-47F7-AC03-A361FF3DD821}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6471F75C-F069-4E52-A3B8-D05314FBBFB9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{649ED86F-200D-4894-AFB4-54710B4B802A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{653EBBE6-6C59-458D-B875-81E289482DEB}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{654CC781-FA1C-422A-B0DB-449A0AB25B85}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{65739262-4CE4-4447-A931-6B5D826FEB5D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{65C31DF3-F126-4BA9-8826-9B061D91E141}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{666875E4-2FEB-4296-B744-932B520CA389}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6671CBFE-815B-4AFE-A371-76E3D7B01E08}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{66BD181E-76E9-4336-AEDB-30FE3D73CAB9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{66C4B250-30DA-44EC-BB07-8E390E6B3EA7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{66EABF2F-B4E6-426C-A567-02072C65999C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6747B6C2-5311-4C6F-BF81-9757A4F5222B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{676F3A67-F333-4EA5-8EC7-3105591709F4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{67B29F3C-EAE5-42AF-9B03-6818E60E518B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{67CA11D2-77A6-4933-B648-1BE3F0DE4CE2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{680A2FDF-5315-4BB6-B986-1FD9130C1F80}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6833D125-2D2D-4F5B-A950-00F79D0FD29E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6852244E-DFD0-4E7B-8109-393582AF3EFC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6A9E53A9-EB3A-4F33-8D00-0A095E75D1A3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6AA8BA07-F623-440F-AE1C-998DF414676C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6B32B2CD-FB2E-4799-8D00-686DBEC633D5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6B68FE6F-858D-498A-9D91-1B3F7D43E77D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6C333670-1735-43EE-AC17-BE4B30326A45}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6CF3CEC0-5DDD-403C-99D0-FAE2B9BCAAA1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6D0B60AB-8A94-4306-965A-3E29E6EBDE5D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6D6DB4BB-8955-495E-BABC-FDA8CA4C0EC2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6D91A79B-B324-4985-ADD6-81448E7669FE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6DCAF2CD-C5A2-4982-85F3-350EEA01A476}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6DDFD55D-5DCE-430C-AA4E-CB1855806065}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6E9E027D-B14B-451B-9EB8-3B67B416A9F6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6F20CE41-1942-475E-8EBE-8F649745C338}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{71134193-DFFF-4F6D-B8B8-42054B163A7A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{71294A3E-1CF6-44D5-BE29-1B5ECD340AA3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7154EA16-FDDD-4ACA-84CE-8A684D3C64C9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{71D908FA-D236-4808-9958-37DE6B335D3E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{722EB5EA-A35E-4BF3-8206-726C9D7E2435}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7240F561-1691-4275-AF04-2EC0D4048E53}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{728232BF-4B78-4BD5-81DE-113B96A2DEB6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{72896A9F-753D-41CF-8D47-73DC0D1F30EB}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7325E0FC-ED95-4782-B365-5185A41A5FA9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7355C33C-BA2C-4977-AAC7-604869542CA2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{73B8822E-50A7-41C2-A211-4592074DEA8F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{74137D7F-2FE8-45CF-86F7-6BE6F997E6A0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{743A058F-28BD-44D7-BFFD-C17A24F3A10E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{743E3361-C18A-4242-B074-FF989C78E9F4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{749167F9-D549-457F-AB90-A6DB9D429E21}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{74C350C6-7024-4A30-BC9E-EC4B9059C703}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{74CA5688-C18F-4E53-B329-926648ABE73E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{753B7665-8D42-4E7E-9AF3-5253BAFB1720}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{75F000AF-D1A8-4907-AD15-764459DE992B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{75F86B67-F0A0-44BA-8F4E-51FE01FBEA0D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7666580E-E820-42EA-AC4E-E939560BD28D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{76AA8DA7-A0CA-4B64-8161-5F70E9314C52}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7709A8FF-14C5-45F6-99B2-22D47BBABC69}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{772A6E3D-626B-4D02-8DC8-81C5BF6C32A1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{774AD82A-185B-484F-BA3D-0C753F77B555}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{781EAD49-2ADF-48B4-93A5-4CA8688B7956}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{78BB1165-3207-4855-B45D-0F5EAFF40CDA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{78CA24DE-32E5-4A18-8341-54FE07CEDB1E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{79189FB5-A515-47F9-A8EB-E55139275115}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7949A90F-761E-45E8-BEDA-F9AF5FA41350}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{795721A0-7DBC-41CB-86FA-1AB20349A331}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{797EF5D9-93A9-4484-96FF-186169A70FDE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{79FBE455-06B1-42BD-B344-A4C9EB9E55BC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7A2C0A16-B0D3-4714-AB2D-D43FA4978343}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7AF74266-10BE-4A68-90B0-E1C3926704EF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7AFC9E89-C63D-4DF5-BF4B-141A568B05A9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7B9D68D8-9C72-4EA2-B010-1A08E48AD4A4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7BCA2086-86CE-462C-A0CD-ECDC238DF18E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7C4A6984-1759-4022-AAAF-C19608FE6072}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7D9FDA55-4349-4CB0-8EAD-9316B53B7D0E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7DB0840C-CB49-4F75-92CE-173CDD48F007}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7E211013-8F1B-4D28-8BB0-4179B0F7C957}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7FF7EAF1-169E-4C5F-B74E-DA73E74F044A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{7FF92877-A617-426D-997A-53C25E72E845}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{802E25D8-7B6C-40C9-AC82-B8FE1130AF61}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{80751CB4-B265-4CD5-9B73-699C490A9E43}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{80C53FFA-58ED-40FA-AA64-C836A2639BE4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{810AFE49-81AD-4D72-B76F-4320EDCF60CC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{810C23FA-30C7-4D21-A6BD-126E3AD330F3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{81464468-2C76-46FA-A4E6-E59C82490AA9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{814BB116-7D72-49A2-BD36-6B894CABA04B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{81C8D124-7DA9-43F3-B987-B2F03D66E4F8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{81E2504C-9EB9-4B0B-B47B-354D283BEDC2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{82015A16-4B20-48B6-B72C-7D862EAB8FB4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{828E9AF1-DF67-4FB8-9229-4D4CFD52678B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{84251D19-A6B1-408D-A0E1-AA3FAF19C61B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{84347C9E-0EDB-4F60-A2D8-4475035CAF89}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8482F556-00F6-480B-8297-274C3203DE36}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8498FF69-C51A-4038-BFD1-64C5663CEBF0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{84A1242B-B00D-452A-9E4A-FF00D367D3F6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{856C8A85-9216-431F-91AE-6079EC6250FB}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{85DD36BC-F2BC-4CD8-A201-1EBCC4FF3FBB}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8610175F-7600-47A5-BC28-5703449533B2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{862BE2B4-751F-46DA-BF52-41F60E429BFD}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{866CA3AB-2C2F-49F5-ACA0-AEA05058C60C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8671776F-C890-47FF-B93B-6ED6591A1DA4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{86BEBA58-471F-4713-9D46-A86B65F08F1B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{87CBBFCB-9789-4E01-A30C-933CB987EE49}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{88210373-B98B-4E9A-A1C6-A856E849BD4F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{88738A60-C418-4B54-B9F8-CA72904ADF1D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{888F9269-E8C3-449C-8763-B8330CEC9C53}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{88E69C75-7F3D-4CAE-AEB9-3A7FF7EF78A5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{88E980B2-E0DA-45A0-BD58-480B34311682}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8946B5E2-1773-4470-8731-5484200D4122}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{894C9D70-7235-4344-87D7-6EADB40477DF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8954FDFC-CAC3-4C8A-97FC-9573447E89FE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{896141DB-0E61-49C4-A74F-E6F9A476EF18}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{89D13794-41D0-4119-BCBB-CD6668C1694A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8A075FD5-D403-42C2-8D0B-4A5612AFEA4C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8BB97A91-4A05-4A89-91AD-7C38EE0BC4D8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8C696454-76C7-4169-B162-C95B0C862E67}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8C91DCB2-B483-4367-8063-138A63FC4948}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8CD278C5-D968-4A56-88DF-991E2FE09371}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8D72C27F-B49F-489F-B382-F53ED120AEBA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8DB8728D-E8E8-42D7-8D02-D3B270050240}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8E0E3999-5E22-4B59-814A-4CA6255EB193}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8E5A70BF-B94C-4EE7-BD59-2208A0BBFEA6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8EAD2FE3-E038-4D5C-A5C8-DCB0F00926B1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{8EB35F07-C74E-4E01-9F78-1530E151CA07}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{909E8661-CC35-4DA3-89BE-DD129DF598DE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{91498F6B-DA74-4268-A1B8-DE44AACDF635}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{917E6951-18D0-43AD-8759-1D5531BB4923}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{91FA0EFE-4F6E-4858-A5A6-1677323C36AD}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{92FB4D9D-1960-4E96-9928-41972ECFC2D5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{930199B5-57F6-4368-AEF2-ABD6CBE5AC28}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9309CCC7-9461-40B0-8CC9-26C7264EA563}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9326CE79-B8D9-46CC-A3EB-4A29C6C28DC0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{932C53AA-B68B-40EA-BF6F-6A0A03282EE5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{934C2439-2A10-4025-AD64-7DA8518929A7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9386EFA3-CAD3-42C9-BF3A-A58CE48B582A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9395D076-FAAA-4557-AEF4-6D7E93FD758E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{93C22340-AD4F-4451-9049-FA7311BF5105}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{943AA535-94AC-4043-9FE8-EFFAD4CE3E3C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{94459298-D5D8-4F65-81E4-0E6989F2F833}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{94572CBA-426D-4418-B89C-5FAAE460EBCF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{94803069-A61C-4002-8D2B-3315993A5C43}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9484DF85-4795-45EC-8A03-93B13887BB15}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{95DFC3B0-B49F-48D5-A0E9-7EE22D7D3A80}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{95FC53B1-EB01-4D33-A892-9AB52B9B4AFA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{962249A4-92E4-4F63-890B-BCBB0D1EC507}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{964276B0-9676-4441-AD20-70E1DB58C736}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{964BF20A-FE15-47D5-A148-EEFF799F0242}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{966EF0DD-2990-4CF1-8F22-EF981706E941}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{96C55633-6038-4316-9726-BAAC61C0BD6A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{972D5C66-ABBE-4299-BEC2-0AB1697EDFCA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{976C532D-98A2-494A-9F94-67F87CB72BA1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{978ECD92-6358-48F3-AB8A-C2D4D6F55E62}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{979947D3-AB6D-442D-8283-FCE7D9B80E11}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{97AC9CB3-9A56-4252-88B3-7800BE8CCF89}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9809E839-DD72-4C32-94A6-3089063D7F84}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{984EB2D6-63E4-4BBA-B105-39C9180A8AF4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{98F636D7-8B11-42BB-A5E2-546AD1D7E663}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{99334836-097C-4B4B-8AA1-2D7AD5F51529}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{99FC7BA7-92C5-4FBA-ACD5-EC5FF730771D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9A0CCCF4-1692-4764-9E09-664232EC351B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9A58A382-2510-42BC-9711-95E0A9C226C2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9A608FD3-19DC-4EFF-9344-59F872673D91}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9AF3EBA1-38D6-4694-8A8D-A42FED26DB90}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9B59E7CB-0C32-48B5-91FB-DEAE2880D438}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9C16BCDD-BB00-4D1C-9742-5E5AC12574C6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9C4D7380-2B85-4D30-9ADD-D120C66CB72A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9C621700-7255-403D-8976-C916E983A24F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9CCF6878-E85C-4856-90D5-26A988EF587E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9CE790DF-347F-4305-99EA-60B3299401D4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9D1A23A2-5246-4FAE-B360-DA9B573E3F97}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9D268B41-8D32-4E47-B12D-8E27850FBF4D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9E07B48F-B698-42AC-8E46-29CCD7DBA172}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9E1DFDAC-7CE7-45A9-947F-4EA6F1C2B7FC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9E7E6922-CD5E-4DF0-99CF-B1577E87F527}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9E966F8E-D0FC-49AC-B0B0-526D2D87709A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9EC898DB-A2CE-4225-ADFD-38EDF61DB5D1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9ED5CDC3-2172-4AE9-926A-507F0D9A71B3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9EF88C07-A370-4EBA-BC14-31AD0112AB0A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9F5B9D1B-6E47-43F4-B123-74CFFA716BED}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{9FB6E802-C0B9-4CC0-A303-0E7DFEC18093}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A08BEC55-CEF1-4AC0-B3C7-ADD65E0FF4B8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A0BC4EBA-47C5-4F4D-8F03-B568B9F389DC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A0CBA31D-618D-4E3A-8257-BB4DC474DC8B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A0D55AEC-9D5B-40BD-BB15-39D19E3CD6FC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A1223A83-5338-4618-AFF4-0A5CBE38998B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A1302A08-19AF-42A3-86E5-CA7DBC639888}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A1A49A1A-D925-4F2E-967D-45633CD11327}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A1E811B7-0C91-499B-9A1C-ACF62215BA70}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A24BB3F9-174C-4C0E-94B5-654CB172B2BC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A2C272B1-7BCC-4BE6-99C2-C27828264AA7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A330132E-B299-438C-A1C7-4B5DA0BC7AD8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A346B967-2EB2-4AF6-B999-25123EFB70F0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A366FE5B-7895-4B7B-98F9-F6D95FCECAB4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A398F6D5-D5A2-4A1A-AC33-0851C7BD4668}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A48D8BB3-C834-489D-A25D-5774631BB729}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A500DEF3-B846-4024-AB6B-67548FF7D9F4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A558F8D7-D454-4B9E-BB53-30E6C1326DD5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A5AB5DC5-E176-421D-9C52-D8D4F657FCD1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A5E1F38B-1828-4923-BE77-F395DEF65D6C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A66914F5-54C8-45C6-BF28-B70DD512A02B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A690C760-B452-4606-9D3B-1CF07405E3B3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A6EC4244-5CD0-418A-B837-C106236F640D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A70A22D4-C9D1-46BF-9D95-8B048D3FF3A3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A7302D83-A2C7-45FE-A649-CEB5C611070A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A74BE44A-A6F3-4B0F-A876-AF97686B5E13}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A8E1CB16-54BA-4EEA-A2BC-D45322173FA3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{A9B8B4E2-31DE-4E43-BAA7-56C62EA482D8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AA9D3A48-EB56-4791-A33C-4C7EA1B837E5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AAA5E43C-CF79-47D5-BF3B-E92FD4F7590F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AB1D9A1B-D5B5-4F0E-90ED-27632ABE7904}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AB244A08-9710-426D-99EA-2D4E5C9DB22F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AB32D8B3-D5F3-4F9E-91EE-A25522F96A46}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AB9E6EB0-558D-4128-B545-8D0D4E716D8E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AC833ADE-7C14-4770-ABB0-BA28CB0408C3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{ACCE3DFC-7D00-4DE4-81F4-237003AE9C41}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AD0BEC59-95A2-40A1-BDDB-01636FBA572E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AD3C5D6A-E07E-4D7D-89B4-CF6F55BC07A2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AD8ED272-94C8-4B5E-8231-FBE650DFB0C1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{ADA50D01-0519-46AD-A745-195C4654C21C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AE02FF2D-A592-47A6-9817-DD775CD46526}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AE4A5C32-30EB-402C-A919-92D7422D46D3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AE91C372-A4D4-4FBF-90E6-26971846C0D5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AE9C8951-4E90-4C9B-8710-FC681DB42ED2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AED0FAC4-F3A1-4777-A172-FF732F8F262B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AEEEEBEC-FB97-461F-AF6B-35FD2ACCFD08}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AEF670B4-7F6F-4889-9EE7-8D406277FDA6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{AFCB4DF1-88E5-4227-9E2C-A110FB6F4F17}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B05608CA-F9A6-47BE-B6FA-E80BD6026B6D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B082B4B9-0852-4BAE-9922-ECFF38558CF8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B137CD5B-CC09-4D28-98F5-731FE4ACADD3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B1A7911E-7EA4-4B66-A9F8-EA443BF56848}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B1BAB68A-F054-4390-BDF9-92E8A25769F9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B2233AD3-E781-40D9-86CA-88CB4207B28D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B29F2786-6321-4A99-83E8-22CCBC744494}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B2F685AC-1AB9-4DE4-AB1A-2A8D155B863B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B34E1779-3965-40BE-8C82-7C8A577DDD2C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B3E429D7-40F1-4759-8BD4-A91F43904D36}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B3E6982E-FDF8-4B48-91BF-80E8DEA32364}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B4DD9394-2185-4F1C-9831-7AE69A3BABF4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B5363323-D0F1-4C65-94BD-D8C5BB423E56}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B55F0F01-58D8-4CD4-AE08-41427C24B76F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B6C8369E-9531-428D-AB7E-DE031D3E76A6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B71B14D9-7F2E-4E99-8601-C8FF953C4826}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B78F4244-7E2A-46F0-B66B-EAF352ECFD84}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B7D3A128-1F61-4607-B005-43AC9916F248}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B86AF4FA-3427-4CD9-B4EB-88AA0AEBCB31}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B8973B77-37FE-4618-980D-51C38F095E8B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B8BD2446-675A-476A-B9DE-2D32D49D3070}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B952C230-990C-42FD-BC6D-D71C2BEF6B85}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{B997B5ED-2D70-4A43-A4AD-201366BE159E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BA024075-5DF8-4DA8-AFEE-D509B32FCBBB}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BA149856-68FA-404B-97D7-D8384702CB98}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BA54E7D1-DA07-464F-A1B6-A23975ECAA24}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BA5ECC49-06C2-46D2-92DD-DCBDAEDF7DD9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BA665DF4-5C4A-4881-8EB3-D35E3AD6EB3D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BA7CF77D-FD38-4FCA-BB67-F282F2BD1021}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BB8DDA8E-C926-49F1-B8DD-79F7A78730A5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BB9CBDC9-B9D4-4990-BAD7-9F184754D195}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BBB64A4F-3053-4043-BC2B-6A35122C397C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BC0D44C8-7F1F-49F5-A91A-7F78205B6B45}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BCD00BB5-2BF6-4F59-BD08-8FEC8D9E48D5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BD0D5E51-137E-453E-9DB9-B28EE370CB63}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BD18543C-97EF-4C50-AE5D-7E86DDAF2A50}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BD396F4E-7801-466B-A27F-A4BD3E1290C1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BDD1DBDB-8E35-4B1A-BC72-CDC3B9C000DC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BE6ED310-2C93-452A-912A-8D4CE16C34FD}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BECD1AA6-80D8-4772-9C05-D4A20B748A62}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BED86724-806D-4F45-BBCC-93692AF7776C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BEDC2950-102D-4E94-B79A-89A694F779B3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BF49D838-DC03-4257-8AEA-3EC46DAD6A7A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{BF76C3AD-E150-4A19-8825-14630AA13DBE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C0BC6B7B-6EFD-40F4-B310-3D9A89FCCF23}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C0F393C7-4EEC-44C2-BD2C-68DC39A6BAD3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C0F4C71C-74B2-430E-BEDF-C9877545A609}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C14808C4-79EE-4F86-BA07-EE9EF8A283F4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C17A947E-F530-4A52-B37F-B629EAA90D68}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C24218AC-0A46-4BAF-AB88-DF5F8D2A6904}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C2A33372-80B4-4DE0-9AB9-2DECA7C55925}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C2D0F70E-D811-42DA-85E4-7AD9F1BEFA78}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C407F716-4B90-4563-8EC8-3B9962FCBE94}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C415395B-52F3-4716-A9ED-844414235408}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C45E32D9-ECB6-4016-9D1E-CDB216B9A936}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C4602D3E-EA18-4F6F-A848-DF1F7425FD84}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C4BD1CA2-FAEF-42A2-8D3A-CDF0C5E0AFC6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C4DE3F98-8A78-4B03-8572-E7184734AC5D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C50E8972-0969-443D-9617-574BB869F1E5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C518D511-27D6-4E07-82C9-9DB84E13795F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C55A020B-5CA5-4120-870D-DF6837565AAA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C6596A7A-8254-4C18-94AD-ABEAEB44E692}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C68130BE-D410-4E6A-89CD-04E92BDB6AD3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C6BA1F27-67FC-4788-BCB7-A35BBC4D38B1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C6E5FEFE-9302-4427-B65A-6C7075F7F833}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C6FC0909-368E-4D32-B3C4-9E5CE3DCCF16}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C7ADB0BF-B1A1-4C75-8B88-905E460935C3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C7F84AE5-BB74-4BB2-AF86-74FBF2F0D295}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C8301A1B-BC9D-4705-BF65-F2E78D2FC66F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C83CE103-9D36-4A8B-A191-5344F41D0A84}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{C883ACCD-818C-4422-A871-61EB7C59EF28}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CA30DDE1-6B98-4564-9A6A-600365861946}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CAAEA92D-1360-4A2E-ACA1-F9CECD4AE867}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CB323C71-DF23-4CD9-9148-9CDF248866C0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CB5FC314-649D-4C76-A715-23757D8FF950}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CB69E4D3-C9A5-41BB-A0C2-C23FD3341C90}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CBA9BF81-5D89-467B-875D-23CC64F41205}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CC2A3BD2-C557-47F5-BCB6-16A878597951}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CC3F1B61-8349-4B3F-9DE1-2691412EF43C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CCE2FE15-730D-4146-9D75-362B7AEE2284}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CCF7AB03-ECA9-4A27-93C7-AD60A560FE7B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CD4B49EF-A3FD-4E91-AFE9-7BAF629CFDA7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CDAB6C39-9CF6-4FD0-928E-CCF5BD1A74D3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CEF0D87B-0630-47BA-98E7-AE7EE9B45C6D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CF2B2061-7B37-4F7C-95AC-BA86F3AA6B3F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CFA64292-BB08-47EE-92A1-083E3CD7DE88}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{CFBBE53C-4EFF-4C03-B7F2-125B35F5F984}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D00625F7-103F-4AEE-853D-76E0A20F401B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D122ACA2-0C67-4BD2-A999-93A9ACBF8210}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D1432F88-D805-4FFA-A666-2F4B35F2CB79}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D19A61E7-970F-4B47-9A45-796B15B1C16B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D1B0C127-6662-4D9E-9BDD-E0F540DC34D8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D23393FF-DC53-4DB4-BBE8-FB031F3D5D73}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D2B9E054-5909-4D60-83C8-86CDA6E4499A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D373DAED-EC18-441C-B7D1-83D0473B3D8C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D3CE3CE5-1491-4638-BCFD-8D0BC660FA95}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D3D41948-21E7-4771-B260-23E7CCF04C90}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D3EB507A-600E-4DDE-AB39-F0D3FB45D1D7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D424C3F1-EBFB-4106-BEFC-DF54D91231AF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D42DBC63-E2FF-41D1-804E-8957E7780A80}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D432A750-3703-4538-8295-ADC19548CB6E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D4683CAA-C5B5-4822-B04F-8F51BDDDE5A2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D46B1CB1-3096-4409-A00D-8DE51B4E8CA1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D4C21EEA-29F7-4001-9EC6-B6E997213CF8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D4DD2B72-78A6-4BC5-9D80-B91169CC1B50}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D599D05B-351B-4BF4-9B7F-EC256493086C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D659AADD-991F-4534-B917-EFA628189F0C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D67AD5DA-B187-4381-9111-9143FFC84CF2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D68C1E1D-6412-4F1F-9C12-87D0D6FE53CF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D6909C70-8889-4071-9A82-1635D51368D4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D6F86165-A18C-45FC-8862-12567A38753A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D77A592D-E085-48B4-BB40-AF434427E8D0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D79B7DCC-2A4B-4FAA-8F7B-062459F81540}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D7D4DB14-55BC-4BD6-9D91-8A2767CDD872}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D83B3349-9E76-454A-B2D3-FFC496A8D99B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D83B8411-DE44-4BA6-9CD7-A7046C9D567E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D86D7EE7-BC55-4E58-B21B-255364FA79B5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D8C10452-165A-4079-9BF0-B2AE4C53B7FD}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D8E609E0-1373-447E-B533-CF64E6D5E6F1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D91FD460-47F5-495A-BA6F-333019A725A4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{D9824283-A9A7-4AF7-9976-5B7C875DD71F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DA632630-A71A-4F37-8E14-52B3144C9298}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DA9E8404-43D2-4710-A28D-BED13220EAD8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DB55AA5A-C03B-4668-87D3-2D2DC6B4E016}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DB8C09A3-FA9F-49B8-857E-AC2046D9CB4E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DBD33A89-4076-459C-A9DD-247FEC86410A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DC18A2F6-FF65-41A8-BF5B-B8D39F4615AE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DD850EAA-7841-478A-A3CC-D7638AC526FA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DDA59068-1BEB-41E9-8AC9-5AD11A3796C9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DDCB0A75-9B6D-4E07-A15C-7CDED07AD172}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DE6BB4E4-8C95-4054-A15E-605FD78D7AC7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DEAF6BBB-59F3-4431-A0F6-1880117C850B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DEC947FC-AE37-4909-9D6D-9FD36987A06B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{DFDCC631-2358-4CB6-8652-7DE16BF3A5D0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E0B6B397-7077-4DDE-82CD-A312E477517E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E1066EC2-87D8-4053-A793-0E6D6DCEA723}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E131328D-7A2B-4D66-B20B-F2E3BA2B5A41}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E1506737-8169-424A-8C8E-DDD864306CBA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E17C377E-CF89-49FF-B3B9-E7E0DB3416CB}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E1C86835-FEBC-45CB-8290-19EEB5A2D457}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E213E4F5-3BEF-414F-BF46-E3B8D4727519}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E23299F9-15B6-4D88-9FE8-6C03BDA94086}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E268D889-CF90-472B-B198-57DF0F3F03DA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E271D989-5CA9-4AFD-AC93-6F6DCCE6F557}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E2A7E98B-B26D-458A-89EE-60FD2429586A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E2AFDAF4-6639-4457-99F0-8ADC50D1DE95}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E2E7826C-1E1E-40F1-BDE2-88E5CA4E289A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E4294902-4A19-4F7F-9A3A-D3DEEBBDF35B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E44CF572-9A58-4984-93DC-3A358E014FB6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E44D88BB-E50F-4DB3-9623-5B46A203C22D}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E5C9D661-5288-43E6-840B-EA72BF51BBD9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E63FA1D1-6A37-4FC0-9E6C-49E8AFC1BF84}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E64171B7-C6FD-4A91-B72C-A52AFA837599}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E6E81FF1-1ED3-459E-AA9F-5248F59B67C7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E6EBC335-8E47-46D9-9705-C66080F97446}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E73F02C7-7BEC-4A4D-A88D-E2B472AA1423}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E79BF772-EB03-4032-A27D-790460E0DBF8}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E7AD35AB-8733-4996-81B8-DEBD9B1AC588}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E8284F2C-CE54-4FCB-855F-0877C2E85912}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E8474648-8FDB-437B-9413-84168F20E0CD}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E86862B8-96EB-4491-9ED0-A5ADDAF52303}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E8934F1F-1EDA-4A85-B33B-B84052208CC6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E8BF25C6-9B50-4ADA-BEB3-08B8E836C0A1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E8C18897-F213-4C9B-B067-C2011F921289}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E939FE64-229D-4D69-8AB3-FA7C48F2554E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E968C2AC-FFD6-4BAF-ACE4-EC136FB67D41}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E99D4311-99A0-4DA7-AD2D-62EB8C9C5C37}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{E9ECE04C-79DA-4592-8752-95816FE64308}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EA45BC70-D880-4E89-A32E-F15B36B3F408}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EA60E73D-C3BF-4404-9E0E-DDF36F26D819}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EA6AB6EF-0CF9-4180-9B9E-8835D2747BDE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EA9578FD-DBA2-425A-8002-2019D97486E0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EAA93276-094A-4C93-8562-0498BE234505}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EC259DE4-3059-47BC-94D2-05EFA588557E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EC5D4F37-DEAC-4319-BF43-43EFB0833569}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{ED0A41DA-A112-48FE-BF8B-F12A9173AAB9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{ED2122CB-321D-4C4B-9FE6-06262B82C57A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{ED3340C2-C7E4-4708-A1C1-AA1EB54EEF68}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{ED94D2BB-6C90-4847-B8D8-5AAD2DE33D7F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EDA48AC6-D2E3-4C11-A538-BD84EEEAE85A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EDE3F7B6-4C78-4326-BBF2-BF2A6810B1E2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EDEEFD5A-CFD0-4B87-99A9-20C7D9DCD4E3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EE00464F-FE4D-493A-9A88-680D05CBFCE9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EE5ABA8D-680F-4081-860F-26949BACBDB9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EE6ACCC4-6BE9-418C-82B7-5E6992F16C4C}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EE760B9B-BBD8-4C27-B491-F255D7D89094}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EE8E414E-92E6-4271-93D6-68E5C82863AA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EEE02649-6F6B-4E46-8FB3-C68D06EA5C73}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EF431286-8F72-4F0A-925D-2BD193020CD9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EF6C6A17-0823-4BBD-A17E-461106318E3B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EF6CF904-556E-4072-BC87-2C3B75CAF5C3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EF73BE3F-9BA4-45C6-9017-593590C14EE7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EF781525-7B19-42B8-8405-C08F1B64D089}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EFAE451A-C4A6-4E36-B775-A45038407893}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EFEE256B-EFE5-45E6-AADC-B556D027DC7E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F0110CD1-1F6A-4F02-97FC-08B2EE31D333}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F0534589-13D2-418B-912C-10428A96D176}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F0704BDD-E7AB-49FB-994C-92B0FBA96680}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F0FA8CDC-4BCC-4032-8CD8-5BE21D11A328}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F1070566-4E99-4214-B700-3DA778F4AF8A}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F1646478-E63C-4F1B-B07A-CBACEBA5527F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F188A8E9-F425-46DD-8299-B2C93435C05E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F222B573-D089-4130-B3DA-03DE39B778D7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F24B7523-AA0D-4154-AFEE-639FBE40A6B2}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F2A14F01-19E8-4A57-843F-C4E85A8A72F9}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F2BF5006-E090-4813-9D41-F0ADEA39AA6E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F323E877-3543-4065-8ADE-743B30C2E7C6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F38BA397-6919-45F1-AF5A-426476E7F494}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F39BBF4E-D8E2-4B30-A508-243953E872EF}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F3EACBF6-1385-4C9D-9AC0-3B707288B52B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F47C0FE0-5BB0-4BF4-8076-0F4AE949B4E7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F48BB268-D4EF-4863-A4E2-C29FFDBF37DD}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F5A1B0E2-E506-4A15-AA3C-F93E22A1E619}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F5FD6A22-D997-4A6F-A904-2BEFCB89E095}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F618371E-584F-4BF4-B631-0EFEAC8D84F0}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F672E524-6519-46BC-A335-B9F13DE38A9F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F6C08C8B-42B3-40D9-89E0-435089E6F107}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F6ECECEF-C5D6-4A3C-8E0D-C301BADC5A8F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F6F303FC-667D-4C43-B962-332E5E6ED59E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F8837D76-8155-4D2E-B20B-FBAC29F41EE3}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F93A02D9-C57A-4E41-97A3-5D01E4679A8E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F96B8552-0C83-4BAA-8BB8-013CDA9175D7}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F9887C86-0F13-42CE-8AB0-A0A2A25A5307}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{F9A0CDD0-ECE0-4395-A32F-B0CA6BD0C346}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FA254160-64C1-43E7-B845-222BA1A290E6}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FA46DA75-CD4E-4BDF-BA8B-6B8ACE0B9A1B}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FAF085D6-A52A-4CCA-966D-75FDB46094FA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FB39546E-B731-4FDB-A9C9-B083C92214ED}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FB4FBAF3-0E07-4C00-B6AE-CFC5E8F558D5}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FB8689FA-D739-4984-8EA3-C936BA09FFDA}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FBD516B4-99B4-4B24-A961-1EC512CB5567}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FC0BC07D-E450-46EB-85D6-7E7300233FBE}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FD418B75-2C5C-4BEB-88F0-27A3E663BC5E}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FDA47721-3392-4145-9A03-FD31AA499086}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FDD69365-E95A-4185-A283-F52DB1FA34AC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FDEC2FC6-7AEB-4D77-AAB6-B7F92FAF0558}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FE12DCC6-A194-4005-996B-38CF52DB24FB}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FE382E6C-C66B-46C9-9D29-410C8438ABD4}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FE516C4C-9C7E-476E-B115-0996CBB88438}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FE92532B-7478-46C7-89A4-CB30C442B1A1}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FE941F2D-3029-4585-AC9D-48275C16D337}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FEAFA95F-CC8B-46CB-A5A4-E012B8514DEC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FECAED10-C977-4A94-9983-83D00D02E423}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FEEEE2D8-2E55-472A-AC64-2AA75F69A2BC}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FF39F159-1C59-481E-80E6-A6175BDAF43F}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FF3F4C33-36F7-492B-AD5F-87A2B60E0671}

Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{FF48F502-7B46-4A55-8289-D281C7F2E732}
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 12.07.2013 at 13:28:50,05

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST-Code

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-07-2013 01

Ran by Anna (administrator) on 12-07-2013 13:31:24

Running from C:\Users\Anna\Desktop

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe

() C:\Program Files\Launch Manager\OSDCtrl.exe

(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEUPDT.EXE

(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_287_ActiveX.exe

(Microsoft Corporation) C:\Windows\system32\conime.exe

(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Defender] - %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [LMgrOSD] - "C:\Program Files\Launch Manager\OSDCtrl.exe" [241664 2006-08-29] ()

HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon [1637496 2011-08-04] (CANON INC.)

HKLM\...\Run: [avgnt] - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-07-01] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s [11672208 2012-08-31] (Realtek Semiconductor)

HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [141848 2009-09-23] (Intel Corporation)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [173592 2009-09-23] (Intel Corporation)

HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [150552 2009-09-23] (Intel Corporation)

HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1233920 2009-04-10] (Microsoft Corporation)

HKCU\...\Policies\system: [DisableRegistryTools] 0

HKCU\...\Policies\system: [DisableTaskMgr] 0

MountPoints2: {08176035-94eb-11e1-b4fe-001f162248de} - F:\KODAK_Software_Downloader.exe

MountPoints2: {37d6588f-130e-11e2-bdb7-001f162248de} - F:\KODAK_Software_Downloader.exe

HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation)

HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation)

Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)

Startup: C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk

ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" No File

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" No File

Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

========================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG)

R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [140456 2011-09-06] ()

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)

S3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [113152 2009-03-04] (Wistron Corp.)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-03-27] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-03-27] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-27] (Avira Operations GmbH & Co. KG)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

S1 HWiNFO32; \??\F:\DIAG\HWINFO32\HWiNFO32.SYS [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S3 USBAAPL; System32\Drivers\usbaapl.sys [x]

S3 uxddrv; \??\F:\uxddrv86.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-07-12 13:30 - 2013-07-12 13:30 - 01218598 _____ (Farbar) C:\Users\Anna\Desktop\FRST.exe

2013-07-12 13:28 - 2013-07-12 13:28 - 00082262 _____ C:\Users\Anna\Desktop\JRT.txt

2013-07-12 13:26 - 2013-07-12 13:26 - 00000000 ____D C:\Windows\ERUNT

2013-07-12 13:24 - 2013-07-12 13:25 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Anna\Desktop\JRT.exe

2013-07-12 13:21 - 2013-07-12 13:21 - 00001082 _____ C:\AdwCleaner[S1].txt

2013-07-12 13:20 - 2013-07-12 13:20 - 00662345 _____ C:\Users\Anna\Desktop\adwcleaner.exe

2013-07-12 09:41 - 2013-07-12 09:41 - 00000000 ____D C:\FRST

2013-07-11 20:27 - 2013-07-11 20:28 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp

2013-07-11 20:22 - 2013-07-11 20:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp

2013-07-11 19:29 - 2013-07-11 20:27 - 193362412 _____ C:\Windows\MEMORY.DMP

2013-07-11 19:29 - 2013-07-11 20:27 - 00000000 ____D C:\Windows\Minidump

2013-07-11 19:29 - 2013-07-11 19:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp

2013-07-11 19:22 - 2013-07-11 19:22 - 00000000 ____D C:\ProgramData\HitmanPro

2013-07-11 06:22 - 2013-05-29 03:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-07-11 06:22 - 2013-05-29 03:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-07-11 06:22 - 2013-05-29 03:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-07-11 06:22 - 2013-05-29 03:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-07-11 06:22 - 2013-05-29 03:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-07-11 06:22 - 2013-05-29 03:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-07-11 06:22 - 2013-05-29 03:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-07-11 06:22 - 2013-05-29 03:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-07-11 06:22 - 2013-05-29 03:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-07-11 06:22 - 2013-05-29 03:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-07-11 06:22 - 2013-05-29 03:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-07-11 06:22 - 2013-05-29 03:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-07-11 06:22 - 2013-05-29 03:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-07-11 06:22 - 2013-05-29 03:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-07-11 06:22 - 2013-05-29 03:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-07-11 06:22 - 2013-05-29 03:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-07-10 11:17 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-07-10 11:17 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2013-07-10 11:17 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-07-10 11:17 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2013-07-10 11:17 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2013-07-10 11:17 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2013-07-10 11:17 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2013-07-10 11:17 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2013-07-10 11:17 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2013-07-10 11:17 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2013-07-10 11:17 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-07-10 11:17 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2013-06-21 21:56 - 2013-06-21 21:56 - 00000000 ____D C:\ProgramData\WindowsSearch

2013-06-17 12:36 - 2013-05-08 06:37 - 00905576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-06-17 12:36 - 2013-05-02 06:04 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2013-06-17 12:36 - 2013-05-02 06:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\printcom.dll

2013-06-13 05:54 - 2013-06-13 05:54 - 00000000 ____D C:\30269cb3e1045cd9ca

2013-06-12 09:38 - 2013-05-03 00:03 - 03603832 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2013-06-12 09:38 - 2013-05-03 00:03 - 03551096 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-06-12 09:38 - 2013-04-24 06:00 - 00985600 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-06-12 09:38 - 2013-04-24 06:00 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-06-12 09:38 - 2013-04-24 06:00 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-06-12 09:38 - 2013-04-24 06:00 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll

2013-06-12 09:38 - 2013-04-24 03:46 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe

2013-06-12 09:38 - 2013-04-17 14:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
 

==================== One Month Modified Files and Folders =======
 

2013-07-12 13:30 - 2013-07-12 13:30 - 01218598 _____ (Farbar) C:\Users\Anna\Desktop\FRST.exe

2013-07-12 13:29 - 2006-11-02 14:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-07-12 13:29 - 2006-11-02 14:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-07-12 13:28 - 2013-07-12 13:28 - 00082262 _____ C:\Users\Anna\Desktop\JRT.txt

2013-07-12 13:26 - 2013-07-12 13:26 - 00000000 ____D C:\Windows\ERUNT

2013-07-12 13:25 - 2013-07-12 13:24 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Anna\Desktop\JRT.exe

2013-07-12 13:22 - 2013-05-01 21:31 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-07-12 13:22 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-07-12 13:21 - 2013-07-12 13:21 - 00001082 _____ C:\AdwCleaner[S1].txt

2013-07-12 13:21 - 2008-01-21 03:35 - 01705375 _____ C:\Windows\WindowsUpdate.log

2013-07-12 13:21 - 2006-11-02 15:01 - 00032534 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-07-12 13:20 - 2013-07-12 13:20 - 00662345 _____ C:\Users\Anna\Desktop\adwcleaner.exe

2013-07-12 13:01 - 2013-05-01 21:31 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-07-12 09:41 - 2013-07-12 09:41 - 00000000 ____D C:\FRST

2013-07-12 08:26 - 2008-01-21 09:16 - 01445546 _____ C:\Windows\system32\PerfStringBackup.INI

2013-07-11 23:54 - 2012-12-03 23:10 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-07-11 23:44 - 2011-07-30 19:53 - 00000000 ____D C:\Users\Anna

2013-07-11 22:22 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-07-11 21:32 - 2006-11-02 12:22 - 19398656 _____ C:\Windows\system32\config\SYSTEM.BAK

2013-07-11 20:28 - 2013-07-11 20:27 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp

2013-07-11 20:27 - 2013-07-11 19:29 - 193362412 _____ C:\Windows\MEMORY.DMP

2013-07-11 20:27 - 2013-07-11 19:29 - 00000000 ____D C:\Windows\Minidump

2013-07-11 20:22 - 2013-07-11 20:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp

2013-07-11 19:29 - 2013-07-11 19:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp

2013-07-11 19:22 - 2013-07-11 19:22 - 00000000 ____D C:\ProgramData\HitmanPro

2013-07-11 06:35 - 2006-11-02 14:47 - 00372168 _____ C:\Windows\system32\FNTCACHE.DAT

2013-07-11 06:33 - 2011-08-25 18:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-07-11 06:32 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer

2013-07-11 06:24 - 2006-11-02 12:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2013-07-11 06:13 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal

2013-07-01 13:09 - 2012-08-30 12:03 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-06-26 16:18 - 2012-09-20 15:33 - 00000000 ____D C:\Users\Anna\Desktop\Noah

2013-06-22 11:09 - 2013-05-29 13:43 - 00000000 ____D C:\Users\Anna\Desktop\Dzemo in Ostfriesland

2013-06-21 21:56 - 2013-06-21 21:56 - 00000000 ____D C:\ProgramData\WindowsSearch

2013-06-18 21:16 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache

2013-06-17 12:22 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\Msdtc

2013-06-17 12:05 - 2006-11-02 12:22 - 41418752 _____ C:\Windows\system32\config\software_previous

2013-06-17 12:05 - 2006-11-02 12:22 - 19398656 _____ C:\Windows\system32\config\system_previous

2013-06-17 12:04 - 2006-11-02 13:18 - 00000000 __RSD C:\Windows\Media

2013-06-17 12:04 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\spool

2013-06-17 12:03 - 2011-07-31 14:21 - 00000000 ____D C:\ProgramData\McAfee Security Scan

2013-06-17 12:03 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\registration

2013-06-17 11:59 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\default_previous

2013-06-17 11:58 - 2006-11-02 12:22 - 36438016 _____ C:\Windows\system32\config\components_previous

2013-06-17 11:14 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\security_previous

2013-06-17 11:13 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\sam_previous

2013-06-14 13:29 - 2013-01-01 17:25 - 00000000 ____D C:\Users\Anna\Desktop\Neuer Ordner

2013-06-13 05:56 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE

2013-06-13 05:54 - 2013-06-13 05:54 - 00000000 ____D C:\30269cb3e1045cd9ca
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-07-12 13:29
 

==================== End Of Log ============================

--- --- ---

und der Addition-Code

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-07-2013 01

Ran by Anna at 2013-07-12 13:32:29

Running from C:\Users\Anna\Desktop

Boot Mode: Normal

==========================================================
 

Adobe Flash Player 11 ActiveX (Version: 11.4.402.287)

Adobe Flash Player 11 Plugin (Version: 11.3.300.262)

Adobe Reader X (10.1.0) - Deutsch (Version: 10.1.0)

Avira Free Antivirus (Version: 13.0.0.3737)

Bing Bar (Version: 7.0.619.0)

Bonjour (Version: 3.0.0.2)

Canon Easy-PhotoPrint EX

Canon Easy-WebPrint EX

Canon Inkjet Printer/Scanner/Fax Extended Survey Program

Canon Kurzwahlprogramm

Canon MP Navigator EX 5.1

Canon MX370 series Benutzerregistrierung

Canon MX370 series MP Drivers

Canon MX370 series On-screen Manual

Canon My Printer

Canon Solution Menu EX

CCScore (Version: 8.02.0000.0001)

D3DX10 (Version: 15.4.2368.0902)

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition

EVEREST Home Edition v2.20 (Version: 2.20)

Free Realms

Google Earth Plug-in (Version: 7.1.1.1580)

Google Update Helper (Version: 1.3.21.149)

Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.1930)

Intel(R) TV Wizard

Java(TM) 6 Update 37 (Version: 6.0.370)

Junk Mail filter update (Version: 15.4.3502.0922)

Kodak EasyShare Software

Launch Manager V1.5.0.2 (Version: 1.5.0.2)

McAfee Security Scan Plus (Version: 3.0.318.3)

Microsoft .NET Framework 3.5 Language Pack SP1 - DEU

Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft Application Error Reporting (Version: 12.0.6012.5000)

Microsoft Office 2010 Service Pack 1 (SP1)

Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Professional 2010 (Version: 14.0.6029.1000)

Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)

Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)

Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000)

Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Single Image 2010 (Version: 14.0.6029.1000)

Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)

MSVCRT (Version: 15.4.2862.0708)

MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)

MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)

netbrdg (Version: 7.01.0000.0001)

Picasa 3 (Version: 3.9)

Realtek Ethernet Controller Driver For Windows Vista (Version: 6.239.531.2010)

Realtek High Definition Audio Driver (Version: 6.0.1.6733)

Segoe UI (Version: 15.4.2271.0615)

SFR (Version: 8.01.0000.0001)

Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)

Update for Microsoft Office 2010 (KB2553065)

Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition

Update for Microsoft Office 2010 (KB2566458)

Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition

Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition

Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition

Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition

Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition

Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition

Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition

Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition

Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition

Virtual Garden

Windows Live Communications Platform (Version: 15.4.3502.0922)

Windows Live Essentials (Version: 15.4.3502.0922)

Windows Live Essentials (Version: 15.4.3555.0308)

Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)

Windows Live Installer (Version: 15.4.3502.0922)

Windows Live Mail (Version: 15.4.3502.0922)

Windows Live MIME IFilter (Version: 15.4.3502.0922)

Windows Live Photo Common (Version: 15.4.3502.0922)

Windows Live PIMT Platform (Version: 15.4.3508.1109)

Windows Live SOXE (Version: 15.4.3502.0922)

Windows Live SOXE Definitions (Version: 15.4.3502.0922)

Windows Live UX Platform (Version: 15.4.3502.0922)

Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)

Windows Live Writer (Version: 15.4.3502.0922)

Windows Live Writer Resources (Version: 15.4.3502.0922)

WinRAR 4.01 (32-Bit) (Version: 4.01.0)

 
 

==================== Restore Points  =========================
 

17-05-2013 11:38:20 Geplanter Prüfpunkt

21-05-2013 17:10:05 Windows Update

23-05-2013 08:36:37 Geplanter Prüfpunkt

25-05-2013 08:05:56 Windows Update

31-05-2013 07:15:22 Windows Update

04-06-2013 07:57:45 Windows Update

07-06-2013 13:40:50 Geplanter Prüfpunkt

09-06-2013 14:24:38 Windows Update

11-06-2013 06:58:32 Geplanter Prüfpunkt

12-06-2013 12:16:57 Geplanter Prüfpunkt

13-06-2013 03:51:30 Windows Update

13-06-2013 06:28:49 Windows Update

17-06-2013 09:27:04 Windows Update

17-06-2013 09:58:11 Wiederherstellungsvorgang

17-06-2013 10:36:34 Windows Update

17-06-2013 10:40:53 Windows Update

21-06-2013 09:42:02 Windows Update

25-06-2013 15:09:53 Windows Update

29-06-2013 13:22:35 Windows Update

03-07-2013 15:14:28 Windows Update

09-07-2013 11:40:14 Geplanter Prüfpunkt

10-07-2013 08:14:22 Windows Update

11-07-2013 04:11:41 Windows Update
 

==================== Hosts content: ==========================
 

2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

::1             localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {1C3A65F4-A452-4BD5-8596-ED9F721760C3} - System32\Tasks\Microsoft\Windows\Defrag\ManualDefrag => C:\Windows\system32\defrag.exe [2008-01-21] (Microsoft Corp.)

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM

Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI

Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages

Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)

Task: {4EC2D714-078C-4519-BD7F-B1AAD8F304BE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-05-01] (Google Inc.)

Task: {635CBECC-13AC-4EDC-924B-F6435204F374} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)

Task: {99322A3A-5061-47E0-B9D5-1AD57686FAFF} - System32\Tasks\User_Feed_Synchronization-{9D47A29C-FF9E-4948-A4EF-B60A1BD1978B} => C:\Windows\system32\msfeedssync.exe [2012-06-09] (Microsoft Corporation)

Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-21] (Microsoft Corporation)

Task: {A6E4393F-44BB-4E78-948F-B149351E6B96} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)

Task: {A723F1A9-3E95-4FB3-A53B-F66D8832FDDB} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task

Task: {B3AE75F9-225B-4579-AD49-0A10590A43DE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-05-01] (Google Inc.)

Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()

Task: {E6F675EC-F3E6-4FFC-90CF-AA5450EE19DA} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-21] (Microsoft Corporation)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================
 

System errors:

=============
 

Microsoft Office Sessions:

=========================
 

CodeIntegrity Errors:

===================================

  Date: 2011-07-31 14:31:38.503

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2011-07-31 14:31:38.425

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2011-07-31 14:31:38.347

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2011-07-31 14:31:38.253

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2011-07-31 14:31:38.159

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 38%

Total physical RAM: 3061.5 MB

Available physical RAM: 1894.33 MB

Total Pagefile: 6325.29 MB

Available Pagefile: 5106.59 MB

Total Virtual: 2047.88 MB

Available Virtual: 1915.29 MB
 

==================== Drives ================================
 

Drive c: (BOOT) (Fixed) (Total:278.57 GB) (Free:199.5 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (RECOVER) (Fixed) (Total:19.5 GB) (Free:12.8 GB) FAT32
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: F98D6E74)

Partition 1: (Active) - (Size=279 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=20 GB) - (Type=0C)
 

==================== End Of Log ============================

und AdwCleaner?

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

und ein frisches FRST log bitte. Welche Probleme bestehen noch?

Oh, der wurde nicht eingefügt!

Hier der Nachtrag:

Code:

# AdwCleaner v2.305 - Datei am 12/07/2013 um 13:21:32 erstellt

# Aktualisiert am 11/07/2013 von Xplode

# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)

# Benutzer : Anna - ANNA-PC

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\Anna\Downloads\adwcleaner.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 

Datei Gelöscht : C:\user.js

Ordner Gelöscht : C:\Users\Anna\AppData\LocalLow\Softonic

Ordner Gelöscht : C:\Users\Anna\AppData\Roaming\dvdvideosoftiehelpers
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v9.0.8112.16496
 

[OK] Die Registrierungsdatenbank ist sauber.
 

*************************
 

AdwCleaner[S1].txt - [954 octets] - [12/07/2013 13:21:32]
 

########## EOF - C:\AdwCleaner[S1].txt - [1013 octets] ##########

Dann obiges bitte :)

ESET

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=26ebefd4e658b547bdbe0cd3fda47db7

# engine=14364

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-07-12 01:49:36

# local_time=2013-07-12 03:49:36 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=6.0.6002 NT Service Pack 2

# compatibility_mode=1799 16775165 100 97 9384 239060266 2153 0

# compatibility_mode=5892 16776573 100 100 192852 211169704 0 0

# scanned=96364

# found=0

# cleaned=0

# scan_time=4556

ESETSmartInstaller@High as downloader log:

Can not open internetESETSmartInstaller@High as downloader log:

Can not open internetCan not open internetESETSmartInstaller@High as downloader log:

Can not open internetCan not open internetESETSmartInstaller@High as downloader log:

Can not open internetCan not open internetESETSmartInstaller@High as downloader log:

Can not open internetCan not open internetESETSmartInstaller@High as downloader log:

Can not open internetCan not open internetESETSmartInstaller@High as downloader log:

Can not open internetESETSmartInstaller@High as downloader log:

Can not open internet# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=26ebefd4e658b547bdbe0cd3fda47db7

# engine=14364

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-07-12 02:55:16

# local_time=2013-07-12 04:55:16 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=6.0.6002 NT Service Pack 2

# compatibility_mode=1799 16775165 100 97 13324 239064206 6093 0

# compatibility_mode=5892 16776573 100 100 196792 211173644 0 0

# scanned=144628

# found=0

# cleaned=0

# scan_time=3767

SecurityCheck

Code:

UNSUPPORTED OPERATING SYSTEM! ABORTED!

FFS

Code:

Farbar Service Scanner Version: 10-07-2013 01

Ran by Anna (administrator) on 12-07-2013 at 17:00:09

Running from "C:\Users\Anna\Desktop"

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86)

Boot Mode: Normal

****************************************************************
 

Internet Services:

============
 

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo.com is accessible.
 
 

Windows Firewall:

=============
 

Firewall Disabled Policy: 

==================
 
 

System Restore:

============
 

System Restore Disabled Policy: 

========================
 
 

Security Center:

============
 
 

Windows Update:

============
 

Windows Autoupdate Disabled Policy: 

============================
 
 

Windows Defender:

==============
 

Other Services:

==============
 
 

File Check:

========

C:\Windows\system32\nsisvc.dll => MD5 is legit

C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit

C:\Windows\system32\dhcpcsvc.dll => MD5 is legit

C:\Windows\system32\Drivers\afd.sys => MD5 is legit

C:\Windows\system32\Drivers\tdx.sys => MD5 is legit

C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit

C:\Windows\system32\dnsrslvr.dll => MD5 is legit

C:\Windows\system32\mpssvc.dll => MD5 is legit

C:\Windows\system32\bfe.dll => MD5 is legit

C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit

C:\Windows\system32\SDRSVC.dll => MD5 is legit

C:\Windows\system32\vssvc.exe => MD5 is legit

C:\Windows\system32\wscsvc.dll => MD5 is legit

C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit

C:\Windows\system32\wuaueng.dll => MD5 is legit

C:\Windows\system32\qmgr.dll => MD5 is legit

C:\Windows\system32\es.dll => MD5 is legit

C:\Windows\system32\cryptsvc.dll

[2013-06-12 09:38] - [2013-04-24 06:00] - 0133120 ____A (Microsoft Corporation) 3EDE4C1F9672C972479201544969ADCB
 

C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit

C:\Windows\system32\ipnathlp.dll => MD5 is legit

C:\Windows\system32\iphlpsvc.dll => MD5 is legit

C:\Windows\system32\svchost.exe => MD5 is legit

C:\Windows\system32\rpcss.dll => MD5 is legit
 
 

**** End of log ****

FRST

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-07-2013 01

Ran by Anna (administrator) on 12-07-2013 17:00:53

Running from C:\Users\Anna\Desktop

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe

() C:\Program Files\Launch Manager\OSDCtrl.exe

(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEUPDT.EXE

(Microsoft Corporation) C:\Windows\system32\conime.exe

(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Defender] - %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [LMgrOSD] - "C:\Program Files\Launch Manager\OSDCtrl.exe" [241664 2006-08-29] ()

HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon [1637496 2011-08-04] (CANON INC.)

HKLM\...\Run: [avgnt] - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-07-01] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s [11672208 2012-08-31] (Realtek Semiconductor)

HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [141848 2009-09-23] (Intel Corporation)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [173592 2009-09-23] (Intel Corporation)

HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [150552 2009-09-23] (Intel Corporation)

HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1233920 2009-04-10] (Microsoft Corporation)

HKCU\...\Policies\system: [DisableRegistryTools] 0

HKCU\...\Policies\system: [DisableTaskMgr] 0

MountPoints2: {08176035-94eb-11e1-b4fe-001f162248de} - F:\KODAK_Software_Downloader.exe

MountPoints2: {37d6588f-130e-11e2-bdb7-001f162248de} - F:\KODAK_Software_Downloader.exe

HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation)

HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation)

Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)

Startup: C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk

ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" No File

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" No File

Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

========================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG)

R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [140456 2011-09-06] ()

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)

S3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [113152 2009-03-04] (Wistron Corp.)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-03-27] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-03-27] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-27] (Avira Operations GmbH & Co. KG)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

S1 HWiNFO32; \??\F:\DIAG\HWINFO32\HWiNFO32.SYS [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S3 USBAAPL; System32\Drivers\usbaapl.sys [x]

S3 uxddrv; \??\F:\uxddrv86.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-07-12 17:00 - 2013-07-12 17:00 - 00002191 _____ C:\Users\Anna\Desktop\FSS.txt

2013-07-12 14:31 - 2013-07-12 14:31 - 00000000 ____D C:\Program Files\ESET

2013-07-12 14:29 - 2013-07-12 14:29 - 00890988 _____ C:\Users\Anna\Desktop\SecurityCheck.exe

2013-07-12 14:29 - 2013-07-12 14:29 - 00356693 _____ (Farbar) C:\Users\Anna\Desktop\FSS.exe

2013-07-12 14:28 - 2013-07-12 14:28 - 02347384 _____ (ESET) C:\Users\Anna\Desktop\esetsmartinstaller_enu.exe

2013-07-12 13:32 - 2013-07-12 13:34 - 00012223 _____ C:\Users\Anna\Desktop\Addition.txt

2013-07-12 13:30 - 2013-07-12 13:30 - 01218598 _____ (Farbar) C:\Users\Anna\Desktop\FRST.exe

2013-07-12 13:28 - 2013-07-12 13:28 - 00082262 _____ C:\Users\Anna\Desktop\JRT.txt

2013-07-12 13:26 - 2013-07-12 13:26 - 00000000 ____D C:\Windows\ERUNT

2013-07-12 13:24 - 2013-07-12 13:25 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Anna\Desktop\JRT.exe

2013-07-12 13:21 - 2013-07-12 13:21 - 00001082 _____ C:\AdwCleaner[S1].txt

2013-07-12 13:20 - 2013-07-12 13:20 - 00662345 _____ C:\Users\Anna\Desktop\adwcleaner.exe

2013-07-12 09:41 - 2013-07-12 09:41 - 00000000 ____D C:\FRST

2013-07-11 20:27 - 2013-07-11 20:28 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp

2013-07-11 20:22 - 2013-07-11 20:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp

2013-07-11 19:29 - 2013-07-11 20:27 - 193362412 _____ C:\Windows\MEMORY.DMP

2013-07-11 19:29 - 2013-07-11 20:27 - 00000000 ____D C:\Windows\Minidump

2013-07-11 19:29 - 2013-07-11 19:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp

2013-07-11 19:22 - 2013-07-11 19:22 - 00000000 ____D C:\ProgramData\HitmanPro

2013-07-11 06:22 - 2013-05-29 03:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-07-11 06:22 - 2013-05-29 03:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-07-11 06:22 - 2013-05-29 03:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-07-11 06:22 - 2013-05-29 03:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-07-11 06:22 - 2013-05-29 03:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-07-11 06:22 - 2013-05-29 03:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-07-11 06:22 - 2013-05-29 03:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-07-11 06:22 - 2013-05-29 03:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-07-11 06:22 - 2013-05-29 03:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-07-11 06:22 - 2013-05-29 03:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-07-11 06:22 - 2013-05-29 03:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-07-11 06:22 - 2013-05-29 03:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-07-11 06:22 - 2013-05-29 03:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-07-11 06:22 - 2013-05-29 03:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-07-11 06:22 - 2013-05-29 03:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-07-11 06:22 - 2013-05-29 03:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-07-10 11:17 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-07-10 11:17 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2013-07-10 11:17 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-07-10 11:17 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2013-07-10 11:17 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2013-07-10 11:17 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2013-07-10 11:17 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2013-07-10 11:17 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2013-07-10 11:17 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2013-07-10 11:17 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2013-07-10 11:17 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-07-10 11:17 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2013-06-21 21:56 - 2013-06-21 21:56 - 00000000 ____D C:\ProgramData\WindowsSearch

2013-06-17 12:36 - 2013-05-08 06:37 - 00905576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-06-17 12:36 - 2013-05-02 06:04 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2013-06-17 12:36 - 2013-05-02 06:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\printcom.dll

2013-06-13 05:54 - 2013-06-13 05:54 - 00000000 ____D C:\30269cb3e1045cd9ca

2013-06-12 09:38 - 2013-05-03 00:03 - 03603832 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2013-06-12 09:38 - 2013-05-03 00:03 - 03551096 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-06-12 09:38 - 2013-04-24 06:00 - 00985600 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-06-12 09:38 - 2013-04-24 06:00 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-06-12 09:38 - 2013-04-24 06:00 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-06-12 09:38 - 2013-04-24 06:00 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll

2013-06-12 09:38 - 2013-04-24 03:46 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe

2013-06-12 09:38 - 2013-04-17 14:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
 

==================== One Month Modified Files and Folders =======
 

2013-07-12 17:01 - 2013-05-01 21:31 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-07-12 17:00 - 2013-07-12 17:00 - 00002191 _____ C:\Users\Anna\Desktop\FSS.txt

2013-07-12 15:52 - 2008-01-21 03:35 - 01709767 _____ C:\Windows\WindowsUpdate.log

2013-07-12 15:22 - 2006-11-02 14:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-07-12 15:22 - 2006-11-02 14:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-07-12 14:31 - 2013-07-12 14:31 - 00000000 ____D C:\Program Files\ESET

2013-07-12 14:29 - 2013-07-12 14:29 - 00890988 _____ C:\Users\Anna\Desktop\SecurityCheck.exe

2013-07-12 14:29 - 2013-07-12 14:29 - 00356693 _____ (Farbar) C:\Users\Anna\Desktop\FSS.exe

2013-07-12 14:28 - 2013-07-12 14:28 - 02347384 _____ (ESET) C:\Users\Anna\Desktop\esetsmartinstaller_enu.exe

2013-07-12 13:34 - 2013-07-12 13:32 - 00012223 _____ C:\Users\Anna\Desktop\Addition.txt

2013-07-12 13:30 - 2013-07-12 13:30 - 01218598 _____ (Farbar) C:\Users\Anna\Desktop\FRST.exe

2013-07-12 13:28 - 2013-07-12 13:28 - 00082262 _____ C:\Users\Anna\Desktop\JRT.txt

2013-07-12 13:26 - 2013-07-12 13:26 - 00000000 ____D C:\Windows\ERUNT

2013-07-12 13:25 - 2013-07-12 13:24 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Anna\Desktop\JRT.exe

2013-07-12 13:22 - 2013-05-01 21:31 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-07-12 13:22 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-07-12 13:21 - 2013-07-12 13:21 - 00001082 _____ C:\AdwCleaner[S1].txt

2013-07-12 13:21 - 2006-11-02 15:01 - 00032534 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-07-12 13:20 - 2013-07-12 13:20 - 00662345 _____ C:\Users\Anna\Desktop\adwcleaner.exe

2013-07-12 09:41 - 2013-07-12 09:41 - 00000000 ____D C:\FRST

2013-07-12 08:26 - 2008-01-21 09:16 - 01445546 _____ C:\Windows\system32\PerfStringBackup.INI

2013-07-11 23:54 - 2012-12-03 23:10 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-07-11 23:44 - 2011-07-30 19:53 - 00000000 ____D C:\Users\Anna

2013-07-11 22:22 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-07-11 21:32 - 2006-11-02 12:22 - 19398656 _____ C:\Windows\system32\config\SYSTEM.BAK

2013-07-11 20:28 - 2013-07-11 20:27 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp

2013-07-11 20:27 - 2013-07-11 19:29 - 193362412 _____ C:\Windows\MEMORY.DMP

2013-07-11 20:27 - 2013-07-11 19:29 - 00000000 ____D C:\Windows\Minidump

2013-07-11 20:22 - 2013-07-11 20:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp

2013-07-11 19:29 - 2013-07-11 19:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp

2013-07-11 19:22 - 2013-07-11 19:22 - 00000000 ____D C:\ProgramData\HitmanPro

2013-07-11 06:35 - 2006-11-02 14:47 - 00372168 _____ C:\Windows\system32\FNTCACHE.DAT

2013-07-11 06:33 - 2011-08-25 18:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-07-11 06:32 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer

2013-07-11 06:24 - 2006-11-02 12:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2013-07-11 06:13 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal

2013-07-01 13:09 - 2012-08-30 12:03 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-06-26 16:18 - 2012-09-20 15:33 - 00000000 ____D C:\Users\Anna\Desktop\Noah

2013-06-22 11:09 - 2013-05-29 13:43 - 00000000 ____D C:\Users\Anna\Desktop\Dzemo in Ostfriesland

2013-06-21 21:56 - 2013-06-21 21:56 - 00000000 ____D C:\ProgramData\WindowsSearch

2013-06-18 21:16 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache

2013-06-17 12:22 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\Msdtc

2013-06-17 12:05 - 2006-11-02 12:22 - 41418752 _____ C:\Windows\system32\config\software_previous

2013-06-17 12:05 - 2006-11-02 12:22 - 19398656 _____ C:\Windows\system32\config\system_previous

2013-06-17 12:04 - 2006-11-02 13:18 - 00000000 __RSD C:\Windows\Media

2013-06-17 12:04 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\spool

2013-06-17 12:03 - 2011-07-31 14:21 - 00000000 ____D C:\ProgramData\McAfee Security Scan

2013-06-17 12:03 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\registration

2013-06-17 11:59 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\default_previous

2013-06-17 11:58 - 2006-11-02 12:22 - 36438016 _____ C:\Windows\system32\config\components_previous

2013-06-17 11:14 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\security_previous

2013-06-17 11:13 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\sam_previous

2013-06-14 13:29 - 2013-01-01 17:25 - 00000000 ____D C:\Users\Anna\Desktop\Neuer Ordner

2013-06-13 05:56 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE

2013-06-13 05:54 - 2013-06-13 05:54 - 00000000 ____D C:\30269cb3e1045cd9ca
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-07-12 13:29
 

==================== End Of Log ============================

--- --- ---

Stunden später :D
Ich hoffe ich habs bald geschafft ;)

Ja! :( Es werden keine WLan-Netzwerke angezeigt, Lan funktioniert weiter fehlerfrei und mit meinem Macbook mit ich über WLan verbunden. Wenn ich auf 'Warum können keine Netzwerke gefunden werden?' klicke, kommt ein Diagnose-Fenster mit der Info 'Aktivieren Sie die Drahtlosfunktion'. Das müsste per Fn+F1 (Medion Akoya) funktionieren, allerdings tut sich nichts.
Unter 'Drahtlosnetzwerke verwalten' finde ich das Netzwerk und der Adapter funktioniert laut den Eigenschaften einwand frei.

hi,

Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

Hier der Code! Außerdem kommt beim Start-Vorgang vor dem 'Wilkommen'-Screen, ein schwarzer Screen, mit blauen Streifen in der oberen Bildschirmhälfte.

Code:

Farbar Service Scanner Version: 10-07-2013 01

Ran by Anna (administrator) on 12-07-2013 at 19:26:10

Running from "C:\Users\Anna\Desktop"

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86)

Boot Mode: Normal

****************************************************************
 

Internet Services:

============
 

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo.com is accessible.
 
 

Windows Firewall:

=============
 

Firewall Disabled Policy: 

==================

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall"=DWORD:0
 
 

System Restore:

============
 

System Restore Disabled Policy: 

========================
 
 

Security Center:

============
 
 

Windows Update:

============
 

Windows Autoupdate Disabled Policy: 

============================
 
 

Windows Defender:

==============
 

Other Services:

==============
 
 

File Check:

========

C:\Windows\system32\nsisvc.dll => MD5 is legit

C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit

C:\Windows\system32\dhcpcsvc.dll => MD5 is legit

C:\Windows\system32\Drivers\afd.sys => MD5 is legit

C:\Windows\system32\Drivers\tdx.sys => MD5 is legit

C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit

C:\Windows\system32\dnsrslvr.dll => MD5 is legit

C:\Windows\system32\mpssvc.dll => MD5 is legit

C:\Windows\system32\bfe.dll => MD5 is legit

C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit

C:\Windows\system32\SDRSVC.dll => MD5 is legit

C:\Windows\system32\vssvc.exe => MD5 is legit

C:\Windows\system32\wscsvc.dll => MD5 is legit

C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit

C:\Windows\system32\wuaueng.dll => MD5 is legit

C:\Windows\system32\qmgr.dll => MD5 is legit

C:\Windows\system32\es.dll => MD5 is legit

C:\Windows\system32\cryptsvc.dll

[2013-06-12 09:38] - [2013-04-24 06:00] - 0133120 ____A (Microsoft Corporation) 3EDE4C1F9672C972479201544969ADCB
 

C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit

C:\Windows\system32\ipnathlp.dll => MD5 is legit

C:\Windows\system32\iphlpsvc.dll => MD5 is legit

C:\Windows\system32\svchost.exe => MD5 is legit

C:\Windows\system32\rpcss.dll => MD5 is legit
 
 

**** End of log ****

Ist der Treiber denn laut Eigenschaften aktiv oder nicht?

Ja, hatte ich vorher schon gecheckt und er ist aktiv

Kanst Du mir nen Handybild von dem schwarzen Bild machen?

Das Problem mit dem Screen besteht scheinbar schon seit ein paar Tagen...

Poste mal bitte ein frisches FRST log :)

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-07-2013 01

Ran by Anna (administrator) on 13-07-2013 13:35:48

Running from C:\Users\Anna\Desktop

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe

() C:\Program Files\Launch Manager\OSDCtrl.exe

(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEUPDT.EXE

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Defender] - %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [LMgrOSD] - "C:\Program Files\Launch Manager\OSDCtrl.exe" [241664 2006-08-29] ()

HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon [1637496 2011-08-04] (CANON INC.)

HKLM\...\Run: [avgnt] - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-07-01] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s [11672208 2012-08-31] (Realtek Semiconductor)

HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [141848 2009-09-23] (Intel Corporation)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [173592 2009-09-23] (Intel Corporation)

HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [150552 2009-09-23] (Intel Corporation)

HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1233920 2009-04-10] (Microsoft Corporation)

HKCU\...\Policies\system: [DisableRegistryTools] 0

HKCU\...\Policies\system: [DisableTaskMgr] 0

MountPoints2: {08176035-94eb-11e1-b4fe-001f162248de} - F:\KODAK_Software_Downloader.exe

MountPoints2: {37d6588f-130e-11e2-bdb7-001f162248de} - F:\KODAK_Software_Downloader.exe

HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation)

HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation)

Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)

Startup: C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk

ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" No File

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" No File

Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

========================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG)

R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [140456 2011-09-06] ()

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)

S3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [113152 2009-03-04] (Wistron Corp.)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-03-27] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-03-27] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-27] (Avira Operations GmbH & Co. KG)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

S1 HWiNFO32; \??\F:\DIAG\HWINFO32\HWiNFO32.SYS [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S3 USBAAPL; System32\Drivers\usbaapl.sys [x]

S3 uxddrv; \??\F:\uxddrv86.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-07-13 13:35 - 2013-07-13 13:35 - 01218386 _____ (Farbar) C:\Users\Anna\Downloads\FRST.exe

2013-07-12 18:14 - 2013-07-12 18:14 - 00002703 _____ C:\Windows\system32\RaCoInst.log

2013-07-12 17:00 - 2013-07-12 19:26 - 00002328 _____ C:\Users\Anna\Desktop\FSS.txt

2013-07-12 14:29 - 2013-07-12 14:29 - 00890988 _____ C:\Users\Anna\Desktop\SecurityCheck.exe

2013-07-12 14:29 - 2013-07-12 14:29 - 00356693 _____ (Farbar) C:\Users\Anna\Desktop\FSS.exe

2013-07-12 14:28 - 2013-07-12 14:28 - 02347384 _____ (ESET) C:\Users\Anna\Desktop\esetsmartinstaller_enu.exe

2013-07-12 13:32 - 2013-07-12 13:34 - 00012223 _____ C:\Users\Anna\Desktop\Addition.txt

2013-07-12 13:30 - 2013-07-12 13:30 - 01218598 _____ (Farbar) C:\Users\Anna\Desktop\FRST.exe

2013-07-12 13:28 - 2013-07-12 13:28 - 00082262 _____ C:\Users\Anna\Desktop\JRT.txt

2013-07-12 13:26 - 2013-07-12 13:26 - 00000000 ____D C:\Windows\ERUNT

2013-07-12 13:24 - 2013-07-12 13:25 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Anna\Desktop\JRT.exe

2013-07-12 13:21 - 2013-07-12 13:21 - 00001082 _____ C:\AdwCleaner[S1].txt

2013-07-12 13:20 - 2013-07-12 13:20 - 00662345 _____ C:\Users\Anna\Desktop\adwcleaner.exe

2013-07-12 09:41 - 2013-07-12 09:41 - 00000000 ____D C:\FRST

2013-07-11 20:27 - 2013-07-11 20:28 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp

2013-07-11 20:22 - 2013-07-11 20:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp

2013-07-11 19:29 - 2013-07-11 20:27 - 193362412 _____ C:\Windows\MEMORY.DMP

2013-07-11 19:29 - 2013-07-11 20:27 - 00000000 ____D C:\Windows\Minidump

2013-07-11 19:29 - 2013-07-11 19:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp

2013-07-11 19:22 - 2013-07-11 19:22 - 00000000 ____D C:\ProgramData\HitmanPro

2013-07-11 06:22 - 2013-05-29 03:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-07-11 06:22 - 2013-05-29 03:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-07-11 06:22 - 2013-05-29 03:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-07-11 06:22 - 2013-05-29 03:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-07-11 06:22 - 2013-05-29 03:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-07-11 06:22 - 2013-05-29 03:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-07-11 06:22 - 2013-05-29 03:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-07-11 06:22 - 2013-05-29 03:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-07-11 06:22 - 2013-05-29 03:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-07-11 06:22 - 2013-05-29 03:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-07-11 06:22 - 2013-05-29 03:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-07-11 06:22 - 2013-05-29 03:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-07-11 06:22 - 2013-05-29 03:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-07-11 06:22 - 2013-05-29 03:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-07-11 06:22 - 2013-05-29 03:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-07-11 06:22 - 2013-05-29 03:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-07-10 11:17 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-07-10 11:17 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2013-07-10 11:17 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-07-10 11:17 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2013-07-10 11:17 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2013-07-10 11:17 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2013-07-10 11:17 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2013-07-10 11:17 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2013-07-10 11:17 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2013-07-10 11:17 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2013-07-10 11:17 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-07-10 11:17 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2013-06-21 21:56 - 2013-06-21 21:56 - 00000000 ____D C:\ProgramData\WindowsSearch

2013-06-17 12:36 - 2013-05-08 06:37 - 00905576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-06-17 12:36 - 2013-05-02 06:04 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2013-06-17 12:36 - 2013-05-02 06:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\printcom.dll

2013-06-13 05:54 - 2013-06-13 05:54 - 00000000 ____D C:\30269cb3e1045cd9ca
 

==================== One Month Modified Files and Folders =======
 

2013-07-13 13:35 - 2013-07-13 13:35 - 01218386 _____ (Farbar) C:\Users\Anna\Downloads\FRST.exe

2013-07-13 13:33 - 2013-05-01 21:31 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-07-13 12:14 - 2008-01-21 03:35 - 01782852 _____ C:\Windows\WindowsUpdate.log

2013-07-13 12:10 - 2013-05-01 21:31 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-07-13 12:10 - 2006-11-02 14:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-07-13 12:10 - 2006-11-02 14:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-07-13 12:09 - 2006-11-02 15:01 - 00032534 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-07-13 12:09 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-07-13 09:29 - 2013-05-29 13:41 - 00000000 ____D C:\Users\Anna\Desktop\Dzemos Bilder

2013-07-12 19:26 - 2013-07-12 17:00 - 00002328 _____ C:\Users\Anna\Desktop\FSS.txt

2013-07-12 18:40 - 2008-01-21 09:16 - 01445546 _____ C:\Windows\system32\PerfStringBackup.INI

2013-07-12 18:19 - 2006-11-02 14:47 - 00372168 _____ C:\Windows\system32\FNTCACHE.DAT

2013-07-12 18:14 - 2013-07-12 18:14 - 00002703 _____ C:\Windows\system32\RaCoInst.log

2013-07-12 14:29 - 2013-07-12 14:29 - 00890988 _____ C:\Users\Anna\Desktop\SecurityCheck.exe

2013-07-12 14:29 - 2013-07-12 14:29 - 00356693 _____ (Farbar) C:\Users\Anna\Desktop\FSS.exe

2013-07-12 14:28 - 2013-07-12 14:28 - 02347384 _____ (ESET) C:\Users\Anna\Desktop\esetsmartinstaller_enu.exe

2013-07-12 13:34 - 2013-07-12 13:32 - 00012223 _____ C:\Users\Anna\Desktop\Addition.txt

2013-07-12 13:30 - 2013-07-12 13:30 - 01218598 _____ (Farbar) C:\Users\Anna\Desktop\FRST.exe

2013-07-12 13:28 - 2013-07-12 13:28 - 00082262 _____ C:\Users\Anna\Desktop\JRT.txt

2013-07-12 13:26 - 2013-07-12 13:26 - 00000000 ____D C:\Windows\ERUNT

2013-07-12 13:25 - 2013-07-12 13:24 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Anna\Desktop\JRT.exe

2013-07-12 13:21 - 2013-07-12 13:21 - 00001082 _____ C:\AdwCleaner[S1].txt

2013-07-12 13:20 - 2013-07-12 13:20 - 00662345 _____ C:\Users\Anna\Desktop\adwcleaner.exe

2013-07-12 09:41 - 2013-07-12 09:41 - 00000000 ____D C:\FRST

2013-07-11 23:54 - 2012-12-03 23:10 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-07-11 23:44 - 2011-07-30 19:53 - 00000000 ____D C:\Users\Anna

2013-07-11 22:22 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-07-11 21:32 - 2006-11-02 12:22 - 19398656 _____ C:\Windows\system32\config\SYSTEM.BAK

2013-07-11 20:28 - 2013-07-11 20:27 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp

2013-07-11 20:27 - 2013-07-11 19:29 - 193362412 _____ C:\Windows\MEMORY.DMP

2013-07-11 20:27 - 2013-07-11 19:29 - 00000000 ____D C:\Windows\Minidump

2013-07-11 20:22 - 2013-07-11 20:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp

2013-07-11 19:29 - 2013-07-11 19:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp

2013-07-11 19:22 - 2013-07-11 19:22 - 00000000 ____D C:\ProgramData\HitmanPro

2013-07-11 06:33 - 2011-08-25 18:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-07-11 06:32 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer

2013-07-11 06:24 - 2006-11-02 12:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2013-07-11 06:13 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal

2013-07-01 13:09 - 2012-08-30 12:03 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-06-26 16:18 - 2012-09-20 15:33 - 00000000 ____D C:\Users\Anna\Desktop\Noah

2013-06-22 11:09 - 2013-05-29 13:43 - 00000000 ____D C:\Users\Anna\Desktop\Dzemo in Ostfriesland

2013-06-21 21:56 - 2013-06-21 21:56 - 00000000 ____D C:\ProgramData\WindowsSearch

2013-06-18 21:16 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache

2013-06-17 12:22 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\Msdtc

2013-06-17 12:05 - 2006-11-02 12:22 - 41418752 _____ C:\Windows\system32\config\software_previous

2013-06-17 12:05 - 2006-11-02 12:22 - 19398656 _____ C:\Windows\system32\config\system_previous

2013-06-17 12:04 - 2006-11-02 13:18 - 00000000 __RSD C:\Windows\Media

2013-06-17 12:04 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\spool

2013-06-17 12:03 - 2011-07-31 14:21 - 00000000 ____D C:\ProgramData\McAfee Security Scan

2013-06-17 12:03 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\registration

2013-06-17 11:59 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\default_previous

2013-06-17 11:58 - 2006-11-02 12:22 - 36438016 _____ C:\Windows\system32\config\components_previous

2013-06-17 11:14 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\security_previous

2013-06-17 11:13 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\sam_previous

2013-06-14 13:29 - 2013-01-01 17:25 - 00000000 ____D C:\Users\Anna\Desktop\Neuer Ordner

2013-06-13 05:56 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE

2013-06-13 05:54 - 2013-06-13 05:54 - 00000000 ____D C:\30269cb3e1045cd9ca
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-07-13 12:16
 

==================== End Of Log ============================

--- --- ---

Mir wurde angezeigt, dass es ein Update gibt, ich habs runtergeladen, es ist aber nichts passiert. Ich hoffe der Scan mit der 'alten' Version reicht aus!?

Was ist Laufwerk F:?

Schauen wir mal von aussen.

Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8)

Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)

Downloade dir bitte die passende Version des Tools (im Zweifel beide) und speichere diese auf einen USB Stick: FRST 32-Bit | FRST 64-Bit

Schließe den USB Stick an das infizierte System an und boote das System in die System Reparatur Option.

Scanne jetzt nach der bebilderten Anleitung oder verwende die folgende Kurzanleitung:

Über den Boot Manager:

Starte den Rechner neu.

Während dem Hochfahren drücke mehrmals die F8 Taste

Wähle nun Computer reparieren.

Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".

Mit Windows CD/DVD (auch bei Windows 8 möglich):

Lege die Windows CD in dein Laufwerk.

Starte den Rechner neu und starte von der CD.

Wähle die Spracheinstellungen und klicke "Weiter".

Klicke auf Computerreparaturoptionen !

Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".

Wähle in den Reparaturoptionen: Eingabeaufforderung

Gib nun bitte notepad ein und drücke Enter.

Im öffnenden Textdokument: Datei > Speichern unter... und wähle Computer.
Hier wird dir der Laufwerksbuchstabe deines USB Sticks angezeigt, merke ihn dir.

Schließe Notepad wieder

Gib nun bitte folgenden Befehl ein.
e:\frst.exe bzw. e:\frst64.exe
Hinweis: e steht für den Laufwerksbuchstaben deines USB Sticks, den du dir gemerkt hast. Gegebenfalls anpassen.

Akzeptiere den Disclaimer mit Ja und klicke Untersuchen

Das Tool erstellt eine FRST.txt auf deinem USB Stick. Poste den Inhalt bitte hier nach Möglichkeit in Code-Tags (Anleitung).

Das ist ein USB-Port, habe wichtige Sachen auf einen USB-Stick gepackt, damit ich beim nächsten Mal nicht ganz aufgeschmissen bin ;)

Soll ich den Scan trotzdem nochmal machen?

ja auf jeden Fall :)

Beim Versuch, den PC von der CD oder dem USB-Stick aus zu starten, komme ich immer wieder auf den normalen Desktop, also er fährt ganz normal hoch.
Neu booten, dann (F12) in meinem Fall und dann das Medium (CD oder USB-Stick) auswählen, ist doch richtig oder?

Nein. F8 drückem um in die auswahl Bootmanager zu erhateln mit Safe Mode und Co. Dort Computer reparieren.

Falls das nicht da ist das mit der CD machen, aber Du musst von der Windows DVD booten.

In beiden Fällen ist FRST auf dem Stick, aber es wird nicht vom Stick gebootet.

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-07-2013 01

Ran by SYSTEM on 13-07-2013 20:37:43

Running from F:\

Windows Vista (TM) Home Premium Service Pack 1 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Recovery
 

The current controlset is ControlSet001
 ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and Addition.txt log.
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Defender] - %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [LMgrOSD] - "C:\Program Files\Launch Manager\OSDCtrl.exe" [241664 2006-08-29] ()

HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon [1637496 2011-08-04] (CANON INC.)

HKLM\...\Run: [avgnt] - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-07-01] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s [11672208 2012-08-31] (Realtek Semiconductor)

HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [141848 2009-09-23] (Intel Corporation)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [173592 2009-09-23] (Intel Corporation)

HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [150552 2009-09-23] (Intel Corporation)

HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation)

HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-10] (Microsoft Corporation)

Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)

Startup: C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk

ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
 

========================== Services (Whitelisted) =================
 

S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG)

S2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [140456 2011-09-06] ()

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)

S3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [113152 2009-03-04] (Wistron Corp.)
 

==================== Drivers (Whitelisted) ====================
 

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-03-27] (Avira Operations GmbH & Co. KG)

S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-03-27] (Avira Operations GmbH & Co. KG)

S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-27] (Avira Operations GmbH & Co. KG)

S1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

S1 HWiNFO32; \??\F:\DIAG\HWINFO32\HWiNFO32.SYS [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S3 USBAAPL; System32\Drivers\usbaapl.sys [x]

S3 uxddrv; \??\F:\uxddrv86.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-07-13 12:36 - 2013-07-13 12:36 - 00018566 _____ C:\Users\Anna\Desktop\FRST.txt

2013-07-13 12:35 - 2013-07-13 12:35 - 01218386 _____ (Farbar) C:\Users\Anna\Downloads\FRST.exe

2013-07-12 17:14 - 2013-07-12 17:14 - 00002703 _____ C:\Windows\System32\RaCoInst.log

2013-07-12 16:00 - 2013-07-12 18:26 - 00002328 _____ C:\Users\Anna\Desktop\FSS.txt

2013-07-12 13:29 - 2013-07-12 13:29 - 00890988 _____ C:\Users\Anna\Desktop\SecurityCheck.exe

2013-07-12 13:29 - 2013-07-12 13:29 - 00356693 _____ (Farbar) C:\Users\Anna\Desktop\FSS.exe

2013-07-12 13:28 - 2013-07-12 13:28 - 02347384 _____ (ESET) C:\Users\Anna\Desktop\esetsmartinstaller_enu.exe

2013-07-12 12:32 - 2013-07-12 12:34 - 00012223 _____ C:\Users\Anna\Desktop\Addition.txt

2013-07-12 12:30 - 2013-07-12 12:30 - 01218598 _____ (Farbar) C:\Users\Anna\Desktop\FRST.exe

2013-07-12 12:28 - 2013-07-12 12:28 - 00082262 _____ C:\Users\Anna\Desktop\JRT.txt

2013-07-12 12:26 - 2013-07-12 12:26 - 00000000 ____D C:\Windows\ERUNT

2013-07-12 12:24 - 2013-07-12 12:25 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Anna\Desktop\JRT.exe

2013-07-12 12:21 - 2013-07-12 12:21 - 00001082 _____ C:\AdwCleaner[S1].txt

2013-07-12 12:20 - 2013-07-12 12:20 - 00662345 _____ C:\Users\Anna\Desktop\adwcleaner.exe

2013-07-12 08:41 - 2013-07-12 08:41 - 00000000 ____D C:\FRST

2013-07-11 19:27 - 2013-07-11 19:28 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp

2013-07-11 19:22 - 2013-07-11 19:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp

2013-07-11 18:29 - 2013-07-11 19:27 - 193362412 _____ C:\Windows\MEMORY.DMP

2013-07-11 18:29 - 2013-07-11 19:27 - 00000000 ____D C:\Windows\Minidump

2013-07-11 18:29 - 2013-07-11 18:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp

2013-07-11 18:22 - 2013-07-11 18:22 - 00000000 ____D C:\ProgramData\HitmanPro

2013-07-11 05:22 - 2013-05-29 02:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-07-11 05:22 - 2013-05-29 02:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2013-07-11 05:22 - 2013-05-29 02:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-07-11 05:22 - 2013-05-29 02:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl

2013-07-11 05:22 - 2013-05-29 02:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll

2013-07-11 05:22 - 2013-05-29 02:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-07-11 05:22 - 2013-05-29 02:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\System32\url.dll

2013-07-11 05:22 - 2013-05-29 02:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2013-07-11 05:22 - 2013-05-29 02:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe

2013-07-11 05:22 - 2013-05-29 02:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll

2013-07-11 05:22 - 2013-05-29 02:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll

2013-07-11 05:22 - 2013-05-29 02:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2013-07-11 05:22 - 2013-05-29 02:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2013-07-11 05:22 - 2013-05-29 02:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-07-11 05:22 - 2013-05-29 02:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll

2013-07-11 05:22 - 2013-05-29 02:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll

2013-07-10 10:17 - 2013-06-04 02:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys

2013-07-10 10:17 - 2013-06-01 05:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll

2013-07-10 10:17 - 2013-05-08 05:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL

2013-07-10 10:17 - 2013-04-17 12:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\System32\d3d10.dll

2013-07-10 10:17 - 2013-04-17 12:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll

2013-07-10 10:17 - 2013-04-17 12:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\System32\d3d10core.dll

2013-07-10 10:17 - 2013-04-17 12:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll

2013-07-10 10:17 - 2013-04-17 11:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll

2013-07-10 10:17 - 2013-04-17 11:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll

2013-07-10 10:17 - 2013-04-17 11:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\System32\d2d1.dll

2013-07-10 10:17 - 2013-04-17 11:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll

2013-07-10 10:17 - 2013-04-17 11:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\System32\FntCache.dll

2013-06-21 20:56 - 2013-06-21 20:56 - 00000000 ____D C:\ProgramData\WindowsSearch

2013-06-17 11:36 - 2013-05-08 05:37 - 00905576 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys

2013-06-17 11:36 - 2013-05-02 05:04 - 00443904 _____ (Microsoft Corporation) C:\Windows\System32\win32spl.dll

2013-06-17 11:36 - 2013-05-02 05:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\System32\printcom.dll

2013-06-13 04:54 - 2013-06-13 04:54 - 00000000 ____D C:\30269cb3e1045cd9ca
 

==================== One Month Modified Files and Folders =======
 

2013-07-13 19:33 - 2008-01-21 02:35 - 01813004 _____ C:\Windows\WindowsUpdate.log

2013-07-13 19:29 - 2006-11-02 13:47 - 00003712 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-07-13 19:29 - 2006-11-02 13:47 - 00003712 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-07-13 16:01 - 2008-01-21 08:16 - 01445546 _____ C:\Windows\System32\PerfStringBackup.INI

2013-07-13 12:36 - 2013-07-13 12:36 - 00018566 _____ C:\Users\Anna\Desktop\FRST.txt

2013-07-13 12:35 - 2013-07-13 12:35 - 01218386 _____ (Farbar) C:\Users\Anna\Downloads\FRST.exe

2013-07-13 08:29 - 2013-05-29 12:41 - 00000000 ____D C:\Users\Anna\Desktop\Dzemos Bilder

2013-07-12 18:26 - 2013-07-12 16:00 - 00002328 _____ C:\Users\Anna\Desktop\FSS.txt

2013-07-12 17:19 - 2006-11-02 13:47 - 00372168 _____ C:\Windows\System32\FNTCACHE.DAT

2013-07-12 17:14 - 2013-07-12 17:14 - 00002703 _____ C:\Windows\System32\RaCoInst.log

2013-07-12 13:29 - 2013-07-12 13:29 - 00890988 _____ C:\Users\Anna\Desktop\SecurityCheck.exe

2013-07-12 13:29 - 2013-07-12 13:29 - 00356693 _____ (Farbar) C:\Users\Anna\Desktop\FSS.exe

2013-07-12 13:28 - 2013-07-12 13:28 - 02347384 _____ (ESET) C:\Users\Anna\Desktop\esetsmartinstaller_enu.exe

2013-07-12 12:34 - 2013-07-12 12:32 - 00012223 _____ C:\Users\Anna\Desktop\Addition.txt

2013-07-12 12:30 - 2013-07-12 12:30 - 01218598 _____ (Farbar) C:\Users\Anna\Desktop\FRST.exe

2013-07-12 12:28 - 2013-07-12 12:28 - 00082262 _____ C:\Users\Anna\Desktop\JRT.txt

2013-07-12 12:26 - 2013-07-12 12:26 - 00000000 ____D C:\Windows\ERUNT

2013-07-12 12:25 - 2013-07-12 12:24 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Anna\Desktop\JRT.exe

2013-07-12 12:21 - 2013-07-12 12:21 - 00001082 _____ C:\AdwCleaner[S1].txt

2013-07-12 12:20 - 2013-07-12 12:20 - 00662345 _____ C:\Users\Anna\Desktop\adwcleaner.exe

2013-07-12 08:41 - 2013-07-12 08:41 - 00000000 ____D C:\FRST

2013-07-11 22:54 - 2012-12-03 22:10 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-07-11 22:44 - 2011-07-30 18:53 - 00000000 ____D C:\users\Anna

2013-07-11 21:22 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-07-11 20:32 - 2006-11-02 11:22 - 19398656 _____ C:\Windows\System32\config\SYSTEM.BAK

2013-07-11 19:28 - 2013-07-11 19:27 - 00145232 _____ C:\Windows\Minidump\Mini071113-03.dmp

2013-07-11 19:27 - 2013-07-11 18:29 - 193362412 _____ C:\Windows\MEMORY.DMP

2013-07-11 19:27 - 2013-07-11 18:29 - 00000000 ____D C:\Windows\Minidump

2013-07-11 19:22 - 2013-07-11 19:22 - 00145232 _____ C:\Windows\Minidump\Mini071113-02.dmp

2013-07-11 18:29 - 2013-07-11 18:29 - 00145232 _____ C:\Windows\Minidump\Mini071113-01.dmp

2013-07-11 18:22 - 2013-07-11 18:22 - 00000000 ____D C:\ProgramData\HitmanPro

2013-07-11 05:33 - 2011-08-25 17:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-07-11 05:32 - 2006-11-02 13:37 - 00000000 ____D C:\Windows\System32\XPSViewer

2013-07-11 05:24 - 2006-11-02 11:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\System32\mrt.exe

2013-07-11 05:13 - 2006-11-02 13:37 - 00000000 ____D C:\Program Files\Windows Journal

2013-07-01 12:09 - 2012-08-30 11:03 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-06-26 15:18 - 2012-09-20 14:33 - 00000000 ____D C:\Users\Anna\Desktop\Noah

2013-06-22 10:09 - 2013-05-29 12:43 - 00000000 ____D C:\Users\Anna\Desktop\Dzemo in Ostfriesland

2013-06-21 20:56 - 2013-06-21 20:56 - 00000000 ____D C:\ProgramData\WindowsSearch

2013-06-18 20:16 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache

2013-06-17 11:22 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\System32\Msdtc

2013-06-17 11:05 - 2006-11-02 11:22 - 41418752 _____ C:\Windows\System32\config\software_previous

2013-06-17 11:05 - 2006-11-02 11:22 - 19398656 _____ C:\Windows\System32\config\system_previous

2013-06-17 11:04 - 2006-11-02 12:18 - 00000000 __RSD C:\Windows\Media

2013-06-17 11:04 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\System32\spool

2013-06-17 11:03 - 2011-07-31 13:21 - 00000000 ____D C:\ProgramData\McAfee Security Scan

2013-06-17 11:03 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\registration

2013-06-17 10:59 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\System32\config\default_previous

2013-06-17 10:58 - 2006-11-02 11:22 - 36438016 _____ C:\Windows\System32\config\components_previous

2013-06-17 10:14 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\System32\config\security_previous

2013-06-17 10:13 - 2006-11-02 11:22 - 00262144 _____ C:\Windows\System32\config\sam_previous

2013-06-14 12:29 - 2013-01-01 16:25 - 00000000 ____D C:\Users\Anna\Desktop\Neuer Ordner

2013-06-13 04:56 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\System32\de-DE

2013-06-13 04:54 - 2013-06-13 04:54 - 00000000 ____D C:\30269cb3e1045cd9ca
 

==================== Known DLLs (Whitelisted) ============
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 

==================== EXE ASSOCIATION =====================
 

HKLM\...\.exe: exefile => OK

HKLM\...\exefile\DefaultIcon: %1 => OK

HKLM\...\exefile\open\command: "%1" %* => OK
 

==================== Restore Points  =========================
 

Restore point made on: 2013-05-21 18:10:39

Restore point made on: 2013-05-23 09:36:52

Restore point made on: 2013-05-25 09:06:35

Restore point made on: 2013-05-31 08:15:57

Restore point made on: 2013-06-04 08:58:18

Restore point made on: 2013-06-07 14:41:03

Restore point made on: 2013-06-09 15:25:20

Restore point made on: 2013-06-11 07:58:44

Restore point made on: 2013-06-12 13:17:12

Restore point made on: 2013-06-13 04:52:24

Restore point made on: 2013-06-13 07:29:44

Restore point made on: 2013-06-17 10:27:31

Restore point made on: 2013-06-17 10:58:16

Restore point made on: 2013-06-17 11:36:54

Restore point made on: 2013-06-17 11:41:06

Restore point made on: 2013-06-21 10:42:34

Restore point made on: 2013-06-25 16:10:31

Restore point made on: 2013-06-29 14:23:45

Restore point made on: 2013-07-03 16:15:20

Restore point made on: 2013-07-09 12:40:53

Restore point made on: 2013-07-10 09:14:52

Restore point made on: 2013-07-11 05:12:07

Restore point made on: 2013-07-12 09:16:38

Restore point made on: 2013-07-12 10:04:53

Restore point made on: 2013-07-12 17:35:36
 

==================== Memory info =========================== 
 

Percentage of memory in use: 11%

Total physical RAM: 4085.5 MB

Available physical RAM: 3611.1 MB

Total Pagefile: 3826.14 MB

Available Pagefile: 3662.65 MB

Total Virtual: 2047.88 MB

Available Virtual: 1969.65 MB
 

==================== Drives ================================
 

Drive c: (BOOT) (Fixed) (Total:278.57 GB) (Free:199.96 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (RECOVER) (Fixed) (Total:19.5 GB) (Free:12.8 GB) FAT32

Drive e: (MEDHPSP1DEU) (CDROM) (Total:2.53 GB) (Free:0 GB) CDFS

Drive f: (STORE N GO) (Removable) (Total:3.73 GB) (Free:3.72 GB) FAT32

Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: F98D6E74)

Partition 1: (Active) - (Size=279 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=20 GB) - (Type=0C)
 

========================================================

Disk: 1 (Size: 4 GB) (Disk ID: 00000000)

Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)
 
 

LastRegBack: 2013-07-13 16:03
 

==================== End Of Log ============================

--- --- ---

Habs über die Windows CD gemacht.

Nö da ist alles sauber. Also von Malware kommt das nicht. Seit wann genau ist das so?

Seit ca 1 1/2 Wochen, es stört aber nicht zu sehr. Das Hauptproblem, ist die Sache mit dem WLan!

Ok. Was war jetzt nochmal genau mit dem WLAN? Was für nen Router benutzt du? Wie weit entfernt?

Nutze die FRITZ!Box 3131 und bin durchs Lan-Kabel gezwungen, direkt daneben zu sitzen. Per Lan-Kabel habe ich eine Internetverbindung, ebenso mit anderen Geräten per WLan. Sowohl mit, als auch ohne Lan-Kabel wird mir kein WLan-Netz angezeigt.

Alsoooo:

LAN geht
Ist dein WLAN Adapter aktiv am Laptop?
Kannst Du Drahtlosnetzwerke suchen?
Wenn ja steht deines dabei?

Der Adapter ist aktiv, es werden mir aber keine Netzwerke angezeigt. Wenn ich auf 'Problemlösung' (o.ä.) klicke, kommt der Hinweis, dass die Drahtlosfunktion nicht aktiviert ist. Kann aber nicht sein, da ich in den Einstellungen mehrfach nachgeschaut habe und der Adapter aktiv und die Treiber aktuell sind.
Die Tastenkombi Fn+F1 ist zum aktivieren/deaktivieren des Adapters da, wenn ich sie drücke passiert aber nichts.

Der Adapter steht definitiv auf Aktiv? Läuft der Dienst? Worüber verbindest Du? Windows oder 3rd Party Tool?

Ich hab mal ein paar Bilder gemacht...

Mir wird unter "Netzwerk und Internet" > "Netzwerkverbindungen" angezeigt, dass das Netzwerkgerät, also die 'Wireless Lan Card' aktiviert ist.
Wenn ich auf "Verbindung herstellen" klicke, wird das Fenster "Verbindung mit einem Netzwerk herstellen" geöffnet und es wird kein Netzwerk gefunden.
Klicke ich auch "Verbindung untersuchen", erscheint das Fenster mit der Info, dass die Drahtlosfunktion deaktiviert ist.
Unter "Netzwerk und Internet" > "Drahtlosnetzwerke verwalten" wird die Fritz!Box angezeigt und unter "Adaptereigenschaften" >"Konfigurieren..." steht im Gerätestatus "Das Gerät funktioniert einwandfrei."

Ich hoffe, das hilft weiter

Und andere rechner gehen im WLAN? Hast die SSID vielleicht versteckt?

Zwei, zeitweise drei, andere Laptops haben kein Problem mit dem WLan und Smartphones können sich auch immer einwählen.
Haben noch nie was an den Einstellungen geändert und bisher hatte auch sonst keiner Probleme. Mir ist grad eingefallen, dass das WLan-Problem nach dem letzten Trojaner auch bestand! Das ist aber schon Jahre her und ich weiß nicht, wies gelöst wurde. Ich meine, dass irgendwo ein Häkchen fehlte oder der Treiber nicht aktuell oder gelöscht war. Hab diesmal ja schon alles gecheckt und das kann es nicht sein

Frisches FSS log bitte.

Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

Code:

Farbar Service Scanner Version: 10-07-2013 01

Ran by Anna (administrator) on 14-07-2013 at 20:11:25

Running from "C:\Users\Anna\Desktop"

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86)

Boot Mode: Normal

****************************************************************
 

Internet Services:

============
 

Connection Status:

==============

Localhost is accessible.

There is no connection to network.

Attempt to access Google IP returned error. 

Attempt to access Google.com returned error: Other errors

Attempt to access Yahoo.com returned error: Other errors
 
 

Windows Firewall:

=============
 

Firewall Disabled Policy: 

==================
 
 

System Restore:

============
 

System Restore Disabled Policy: 

========================
 
 

Security Center:

============
 
 

Windows Update:

============
 

Windows Autoupdate Disabled Policy: 

============================
 
 

Windows Defender:

==============
 

Other Services:

==============
 
 

File Check:

========

C:\Windows\system32\nsisvc.dll => MD5 is legit

C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit

C:\Windows\system32\dhcpcsvc.dll => MD5 is legit

C:\Windows\system32\Drivers\afd.sys => MD5 is legit

C:\Windows\system32\Drivers\tdx.sys => MD5 is legit

C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit

C:\Windows\system32\dnsrslvr.dll => MD5 is legit

C:\Windows\system32\mpssvc.dll => MD5 is legit

C:\Windows\system32\bfe.dll => MD5 is legit

C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit

C:\Windows\system32\SDRSVC.dll => MD5 is legit

C:\Windows\system32\vssvc.exe => MD5 is legit

C:\Windows\system32\wscsvc.dll => MD5 is legit

C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit

C:\Windows\system32\wuaueng.dll => MD5 is legit

C:\Windows\system32\qmgr.dll => MD5 is legit

C:\Windows\system32\es.dll => MD5 is legit

C:\Windows\system32\cryptsvc.dll

[2013-06-12 09:38] - [2013-04-24 06:00] - 0133120 ____A (Microsoft Corporation) 3EDE4C1F9672C972479201544969ADCB
 

C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit

C:\Windows\system32\ipnathlp.dll => MD5 is legit

C:\Windows\system32\iphlpsvc.dll => MD5 is legit

C:\Windows\system32\svchost.exe => MD5 is legit

C:\Windows\system32\rpcss.dll => MD5 is legit
 
 

**** End of log ****

Laut Gerätemanager ist auch alles ok!

Starte bitte die FSS.exe erneut.
Gib bitte folgendes in die Search: Textbox ein

Wlansvc

und klicke auf Export Service.
Poste bitte die FSS.txt in deiner nächsten Antwort.

Ich habe die Einstellungen so gelassen, wie sie waren, also nur bei 'Internet Services' war ein Haken

Code:

Note: The export is in "Windows Registry Editor Version 5.00" format.
 

================== Result for "Wlansvc" ==================
 

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\Wlansvc]

"DisplayName"="@%SystemRoot%\\System32\\wlansvc.dll,-257"

"ErrorControl"=dword:00000001

"Group"="TDI"

"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\

  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\

  00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\

  6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,79,00,73,00,74,00,65,00,6d,\

  00,4e,00,65,00,74,00,77,00,6f,00,72,00,6b,00,52,00,65,00,73,00,74,00,72,00,\

  69,00,63,00,74,00,65,00,64,00,00,00

"Start"=dword:00000002

"Type"=dword:00000020

"Description"="@%SystemRoot%\\System32\\wlansvc.dll,-258"

"DependOnService"=hex(7):6e,00,61,00,74,00,69,00,76,00,65,00,77,00,69,00,66,00,\

  69,00,70,00,00,00,52,00,70,00,63,00,53,00,73,00,00,00,4e,00,64,00,69,00,73,\

  00,75,00,69,00,6f,00,00,00,45,00,61,00,70,00,68,00,6f,00,73,00,74,00,00,00,\

  00,00

"ObjectName"="LocalSystem"

"ServiceSidType"=dword:00000001

"RequiredPrivileges"=hex(7):53,00,65,00,43,00,68,00,61,00,6e,00,67,00,65,00,4e,\

  00,6f,00,74,00,69,00,66,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,\

  67,00,65,00,00,00,53,00,65,00,49,00,6d,00,70,00,65,00,72,00,73,00,6f,00,6e,\

  00,61,00,74,00,65,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,\

  00,00,53,00,65,00,41,00,75,00,64,00,69,00,74,00,50,00,72,00,69,00,76,00,69,\

  00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,54,00,63,00,62,00,50,00,72,00,\

  69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,44,00,65,00,62,\

  00,75,00,67,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,\

  00,00

"FailureActions"=hex:2c,01,00,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\

  00,01,00,00,00,c0,d4,01,00,01,00,00,00,e0,93,04,00,00,00,00,00,00,00,00,00
 

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\Wlansvc\Parameters]

"ServiceDllUnloadOnStop"=dword:00000001

"ServiceMain"="WlanSvcMain"

"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\

  00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\

  77,00,6c,00,61,00,6e,00,73,00,76,00,63,00,2e,00,64,00,6c,00,6c,00,00,00
 

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\Wlansvc\Parameters\OEM]
 

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\Wlansvc\Parameters\WlanAPIPermissions]

"Permit List"="O:SYG:SYD:(A;;CCRC;;;BU)(A;;CCRC;;;NO)(A;;CCDCWPSDRCWD;;;NO)(A;;CCRC;;;BA)(A;;CCDCWPSDRCWD;;;BA)(D;;FA;;;WD)"

"Deny List"="O:SYG:SYD:(A;;CCRC;;;BU)(A;;CCRC;;;NO)(A;;CCDCWPSDRCWD;;;NO)(A;;CCRC;;;BA)(A;;CCDCWPSDRCWD;;;BA)(D;;FA;;;WD)"

"AC Enabled"="O:SYG:SYD:(A;;CCRC;;;BU)(A;;CCRC;;;NO)(A;;CCDCWPSDRCWD;;;NO)(A;;CCRC;;;BA)(A;;CCDCWPSDRCWD;;;BA)(D;;FA;;;WD)"

"BC Scan Enabled"="O:SYG:SYD:(A;;CCRC;;;BU)(A;;CCDCWPSDRCWD;;;BU)(A;;CCRC;;;NO)(A;;CCDCWPSDRCWD;;;NO)(A;;CCRC;;;BA)(A;;CCDCWPSDRCWD;;;BA)(D;;FA;;;WD)"

"BSS Type"="O:SYG:SYD:(A;;CCRC;;;BU)(A;;CCRC;;;NO)(A;;CCDCWPSDRCWD;;;NO)(A;;CCRC;;;BA)(A;;CCDCWPSDRCWD;;;BA)(D;;FA;;;WD)"

"Show Denied"="O:SYG:SYD:(A;;CCRC;;;BU)(A;;CCDCWPSDRCWD;;;BU)(A;;CCRC;;;NO)(A;;CCDCWPSDRCWD;;;NO)(A;;CCRC;;;BA)(A;;CCDCWPSDRCWD;;;BA)(D;;FA;;;WD)"

"Interface Properties"="O:SYG:SYD:(A;;CCRC;;;BU)(A;;CCRC;;;NO)(A;;CCDCWPSDRCWD;;;NO)(A;;CCRC;;;BA)(A;;CCDCWPSDRCWD;;;BA)(D;;FA;;;WD)"

"Ihv Control"="O:SYG:SYD:(A;;CCRC;;;BU)(A;;CCRC;;;NO)(A;;CCDCWPSDRCWD;;;NO)(A;;CCRC;;;BA)(A;;CCDCWPSDRCWD;;;BA)(D;;FA;;;WD)"

"All User Profiles Order"="O:SYG:SYD:(A;;CCRC;;;BU)(A;;CCDCWPSDRCWD;;;BU)(A;;CCRC;;;NO)(A;;CCDCWPSDRCWD;;;NO)(A;;CCRC;;;BA)(A;;CCDCWPSDRCWD;;;BA)(D;;FA;;;WD)"

"Add New All User Profiles"="O:SYG:SYD:(A;;CCRC;;;BU)(A;;CCWPRC;;;BU)(A;;CCDCWPSDRCWD;;;BU)(A;;CCRC;;;NO)(A;;CCWPRC;;;NO)(A;;CCDCWPSDRCWD;;;NO)(A;;CCRC;;;BA)(A;;CCWPRC;;;BA)(A;;CCDCWPSDRCWD;;;BA)(D;;FA;;;WD)"

"Add New Per User Profiles"="O:SYG:SYD:(A;;CCRC;;;BU)(A;;CCDCWPSDRCWD;;;BU)(A;;CCRC;;;NO)(A;;CCDCWPSDRCWD;;;NO)(A;;CCRC;;;BA)(A;;CCDCWPSDRCWD;;;BA)(D;;FA;;;WD)"

"Media Streaming Mode Enabled"="O:SYG:SYD:(A;;CCRC;;;BU)(A;;CCDCWPSDRCWD;;;BU)(A;;CCRC;;;NO)(A;;CCDCWPSDRCWD;;;NO)(A;;CCRC;;;BA)(A;;CCDCWPSDRCWD;;;BA)(D;;FA;;;WD)"

"Current Operation Mode"="O:SYG:SYD:(A;;CCRC;;;BU)(A;;CCRC;;;NO)(A;;CCDCWPSDRCWD;;;NO)(A;;CCRC;;;BA)(A;;CCDCWPSDRCWD;;;BA)(D;;FA;;;WD)"
 
 
 

================== End Of Export =============

Start--> ausführen--> notepad (reinschreiben)--> ok

Kopiere nun bitte folgenden Text aus der Code-Box in das leere Textdokument

Code:

Windows Registry Editor Version 5.00
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Wlansvc]

"Start"=dword:00000003

"Type"=dword:00000020

Speichere es nun unter regfix.reg
achte darauf, dass bei Datei-Typ "Alle Dateien" angegeben ist
nun sollte http://image.hijackthis.eu/upload/regfix_kl.jpg auf Deinem Desktop erscheinen
Mache nun einen Doppelklick auf die Datei regfix.reg
Bestätige mit Ja, dann drücke OK
Starte den Rechner neu auf

Hier findest Du eine bebilderte Anleitung

Sag mir was nach den Fix passiert bezüglich deines WLAN

In den Netzwerkeinstellungen, war die FRITZ!Box jetzt deaktiviert, genau so wie die LAN Card.
Die FRITZ!Box konnte ich einfach aktivieren, die LAN Card nicht. Unter 'Verbindung untersuchen' wird mir angezeigt
-Drahtlosnetzwerkdienst von Windows starten
-Netzwerkadapter hat Treiber- oder Hardwareprobleme ermittelt.
-Vergewissern Sie sich, dass die Internetprotokollbindungen richtig sind ( 'Internet Protocol Version 4 (TCP/IPv4)' und 'Internet Protocol Version 6 (TCP/IPv6(' müssen in der Konfiguration des Netzwerksadapters 'Drahtlosnetzwerkverbindung' ausgewählt sein)

Arbeite ich die Punkte jetzt ab?

Es kommt wieder der Hinweis 'Aktivieren Sie die Drahtlosfunktion'! Habe dann FN+F1 gedrückt, aktualisiert und es ist nichts passiert

Windows-DVD zur hand?

Die Recovery Disc? Ja

Hm, obs mit der geht.....

Reparaturinstallation.

Entschuldige die lange Abstinenz!
Welche Option soll ich auswählen?

Systemstartreparatur :)

Hat leider nichts gebracht...

"Legen Sie die Windows-DVD ein. Sie startet automatisch, wenn DVD-ROM im BIOS ausgewählt ist. Wenn Windows durchstartet, klicken Sie das Symbol “Computer” auf dem Desktop doppelt an, um vom DVD-Laufwerk die setup.exe zu starten."

So weit komme ich schon garnicht. Auf der Recovery-CD steht unten als Zusatz ' Windows Vista Home Premium SP1', dann ist das doch auch zeitgleich die Windows-Installations-CD oder? Die ersten Bilder nach der Auswahl der CD im Bootmanager sind identisch, dann komme ich nicht weiter. Beim normalen Start ist auf der CD '(D:) RECOVERY' keine setup.exe zum öffnen!

Oh mann :)

Versuch bitte nochmal das:

Downloade dir bitte Windows Repair (All In One) von hier.

Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
Klicke auf Step 2 und drücke unter Check Disk auf Do It.

http://i1224.photobucket.com/albums/...3/Capture3.gif
Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.

http://i1224.photobucket.com/albums/...y3/Capture.gif
Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.

http://i1224.photobucket.com/albums/...3/Capture1.gif
Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
Hake Restart System when Finished an.
Drücke Start.

http://i1238.photobucket.com/albums/...eakingtool.jpg

Ich konnte keinen Advanced Mode auswählen und meine Repair Options sehen so aus. Was soll ich alles ändern?

Hake dort alles an :)

Ist immernoch alles beim alten...
Zusätzlich ist der Laptop jetzt etwas langsamer und hakt teilweise.
Langsam gebe ich auf :D

zum Mäuse melken.

Langsam würd ich eine saubere Neuinstallation empfehlen, da scheint einiges verbogen :)

Dafür muss ich erst alles extern speichern, weils sonst gelöscht wird, oder?
Mache ich das mit der Recovery-/Windows-CD?

Genau, das geht auch mit der CD. Natürlich musst Du vorher alles sichern.

Vista wurde neu aufgesetzt, Lan-Kabel eingesteckt - nichts! Unter 'Netzwerk' ein neues Netzwerk eingerichtet, unter 'Verbindung herstellen' das Netzwerk angeklickt - nichts! Normalerweise kann man im Explorer unter 'hxxp://fritz.box' ja auch auf die Benutzeroberfläche zugreifen - nichts!

Du hast nen LAN Kabel direkt vom PC zum Router und kommst nicht auf Fritz.Box?

Ist die LAN Karte im Gerätemanager zu sehen und i.O.?