Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Need help with my firewall


  • This topic is locked This topic is locked
25 replies to this topic

#1 TimL

TimL

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:56 PM

Posted 15 November 2013 - 01:20 PM

I have scanned my computer for virus and malwares. I can't start my firewall and that's the main problem.



BC AdBot (Login to Remove)

 


#2 TimL

TimL
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:56 PM

Posted 15 November 2013 - 01:22 PM

My FRST.txt:

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2013
Ran by Tim (administrator) on TIM-DATOR on 15-11-2013 18:49:42
Running from C:\Users\Tim\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Swedish
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~2\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareService.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Acer Incorporated) C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareTray.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\Tim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\AVG Secure Search\vprot.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(PasswordBox, Inc.) C:\Program Files (x86)\PasswordBox\pbbtnService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(Acer Group) C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
(Voddler) C:\Program Files (x86)\voddler\service\voddler.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.2\ToolbarUpdater.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.2\loggingserver.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [SBRegRebootCleaner] - "C:\Program Files (x86)\Ad-Aware Antivirus\SBRC.exe"
HKLM\...\Run: [itype] - C:\Program Files\Microsoft IntelliType Pro\itype.exe [2345848 2009-11-05] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [] - [x]
HKLM\...\Run: [AdAwareTray] - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareTray.exe [2493272 2013-10-18] ()
HKLM-x32\...\Winlogon: [Shell] tim.exe [ ] () <=== ATTENTION
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20474528 2013-10-02] (Skype Technologies S.A.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Tim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-17] (Spotify Ltd)
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_117_Plugin.exe -update plugin [829832 2013-10-08] (Adobe Systems Incorporated)
MountPoints2: {1a221890-70d2-11e0-bbc7-4487fcf7f4d3} - J:\Startme.exe
MountPoints2: {413fd04b-40cd-11e1-99d9-806e6f6e6963} - E:\OblivionLauncher.exe
MountPoints2: {413fd04c-40cd-11e1-99d9-806e6f6e6963} - F:\OblivionLauncher.exe
MountPoints2: {91a32a3d-400c-11e1-aa4d-4487fcf7f4d3} - J:\OblivionLauncher.exe
MountPoints2: {a2f7c79d-73e4-11e0-8a26-4487fcf7f4d3} - K:\OblivionLauncher.exe
MountPoints2: {d137eb40-86b9-11e1-bd6f-4487fcf7f4d3} - F:\Razor1911_Installer.exe
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4908592 2013-10-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Ad-Aware Browsing Protection] - C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [554384 2013-07-15] (Lavasoft)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG Secure Search\vprot.exe [2420248 2013-11-11] ()
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\eMachines\Screensaver\run_eMachines.exe [162336 2009-07-22] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\eMachines\Screensaver\run_eMachines.exe [162336 2009-07-22] ()
HKU\Gäst\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
HKU\Gäst\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation)
HKU\Gäst\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\Gäst\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20474528 2013-10-02] (Skype Technologies S.A.)
HKU\Gäst\...\Run: [MyWebSearch Email Plugin] - C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwsoemon.exe
HKU\Gäst\...\Run: [Sony Ericsson PC Companion] - "C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /Background
HKU\Gäst\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\Gäst\...\Run: [EA Core] - C:\Program Files (x86)\Electronic Arts\EADM\Core.exe -silent
HKU\Gäst\...\Run: [Spotify Web Helper] - C:\Users\Tim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-17] (Spotify Ltd)
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [ ] ()
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [ ] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_4&ent=hp&u=E57A0046578C78576F73105234131477
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=041d&m=et1862&r=17361210b306pe485v1k5r47m1s59s
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=041d&m=et1862&r=17361210b306pe485v1k5r47m1s59s
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=041d&m=et1862&r=17361210b306pe485v1k5r47m1s59s
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=041d&m=et1862&r=17361210b306pe485v1k5r47m1s59s
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://search.gboxapp.com/?pid=388&src=ie1&r=2013/03/18&hid=394711163&lg=EN&cc=SE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://search.toggle.com/?lang=sv&q={searchTerms}
URLSearchHook: HKCU - Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll ()
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - DefaultScope {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = http://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_4&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=SE&userid=71cbe26c-c56d-4a3b-b3c2-444cbc5c5b3d&searchtype=ds&q={searchTerms}&installDate=23/03/2013
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://search.conduit.com/Results.aspx?ctid=CT3312375&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP763F3050-C254-4FBC-94D8-923FC59E7924&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&r=704
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=44444&tt=gc_&babsrc=SP_ss&mntrId=A4834487FCF7F4D3
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = http://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_4&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=360&chn=retail&geo=SE&ver=20&locale=sv_SE&gct=sb&qsrc=2869
SearchScopes: HKCU - {C3E9B9D3-2839-45B5-AEC8-A026C368526A} URL = http://www.mysearchresults.com/search?c=4005&t=14&q={searchTerms}
BHO: No Name - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -  No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: No Name - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -  No File
BHO-x32: Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll ()
BHO-x32: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSBAR.DLL No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
Toolbar: HKLM-x32 - Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll ()
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
Toolbar: HKCU - No Name - {07B18EA9-A523-4961-B6BB-170DE4475CCA} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {E6F480FC-BD44-4CBA-B74A-89AF7842937D} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.3.1.0.cab
Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} -  No File
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.1.2\ViProtocol.dll (AVG Secure Search)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\i1p3xebi.default-1365779578448
FF user.js: detected! => C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\i1p3xebi.default-1365779578448\user.js
FF Homepage: hxxp://search.conduit.com/?ctid=CT3312375&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP763F3050-C254-4FBC-94D8-923FC59E7924
FF SelectedSearchEngine: Conduit Search
FF NewTab: hxxp://search.conduit.com/?ctid=CT3312375&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=EB_SSPV&Lay=1&UM=2&UP=SP763F3050-C254-4FBC-94D8-923FC59E7924
FF SelectedSearchEngine: SecureSearch
FF Homepage: hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_4&ent=hp&u=E57A0046578C78576F73105234131477
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.2.1 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.2.1 - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\17.1.2\\npsitesafety.dll (AVG Technologies)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @mywebsearch.com/Plugin - C:\Program Files (x86)\MyWebSearch\bar\1.bin\NPMyWebS.dll No File
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Tim\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Tim\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Tim\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: wondershare.com/FantashowPlugin - C:\Program Files (x86)\Wondershare\Fantashow Plus\npFantashowPlugin.dll (Wondershare)
FF SearchPlugin: C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\i1p3xebi.default-1365779578448\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\i1p3xebi.default-1365779578448\searchplugins\delta.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\adawaretb.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\allaannonser-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\prisjakt-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\tyda-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-sv-SE.xml
FF Extension: Ad-Aware Security Add-on - C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\i1p3xebi.default-1365779578448\Extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c}
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
FF HKLM-x32\...\Firefox\Extensions: [m3ffxtbr@mywebsearch.com] - C:\Program Files (x86)\MyWebSearch\bar\1.bin
FF Extension: My Web Search - C:\Program Files (x86)\MyWebSearch\bar\1.bin
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\17.1.2.1
FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\17.1.2.1
FF HKCU\...\Firefox\Extensions: [firefox@passwordbox.com] - C:\Program Files (x86)\PasswordBox\Firefox
FF Extension: PasswordBox - C:\Program Files (x86)\PasswordBox\Firefox

Chrome:
=======
CHR HomePage: hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_4&ent=hp&u=E57A0046578C78576F73105234131477
CHR RestoreOnStartup: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_4&ent=hp&u=E57A0046578C78576F73105234131477", "hxxp://search.conduit.com/?ctid=CT3312375&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP763F3050-C254-4FBC-94D8-923FC59E7924"
CHR DefaultSearchURL: (SecureSearch) - http://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_4&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
CHR DefaultSuggestURL: (SecureSearch) -       "suggest_url": "",
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll (AVG Technologies)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java™ Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
CHR Plugin: (My Web Search Plugin Stub) - C:\Program Files (x86)\MyWebSearch\bar\1.bin\NPMyWebS.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (WildTangent Games App V2 Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Fantashow Plugin) - C:\Program Files (x86)\Wondershare\Fantashow Plus\npFantashowPlugin.dll (Wondershare)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Unity Player) - C:\Users\Tim\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Docs) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (1Click Downloader) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\jplinpmadfkdgipabgcdchbdikologlh\1.6_0
CHR Extension: (continuetosave) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\kimdlhdfalmkcdpjmmojjcceffadcbol\3.9_0
CHR Extension: (wxDownload) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjafngncbkkjfbomdoigpckhkfdlhfla\4_0
CHR Extension: (Google Wallet Service) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.9_0
CHR Extension: (Lavasoft NewTab) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\oejkcgajlodefenbbjdnaiahmbnnoole\0.12_0
CHR Extension: (Gmail) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [bbffdhejhaoiflnpooogkckfdcmmjppn] - C:\Program Files (x86)\FTDownloader.com\FTDownloader10.crx
CHR HKLM-x32\...\Chrome\Extension: [clbfjfbnelcflpgpklppgplejolacbej] - C:\Program Files (x86)\BrowserCompanion\blabbers-ch.crx
CHR HKLM-x32\...\Chrome\Extension: [jplinpmadfkdgipabgcdchbdikologlh] - C:\Program Files (x86)\1ClickDownload\1click12.crx
CHR HKLM-x32\...\Chrome\Extension: [kimdlhdfalmkcdpjmmojjcceffadcbol] - C:\ProgramData\continuetosave\kimdlhdfalmkcdpjmmojjcceffadcbol.crx
CHR HKLM-x32\...\Chrome\Extension: [kjafngncbkkjfbomdoigpckhkfdlhfla] - C:\ProgramData\wxDownload\kjafngncbkkjfbomdoigpckhkfdlhfla.crx
CHR HKLM-x32\...\Chrome\Extension: [nbmafkdmkkckhggblphicnnhlgljnoje] - C:\Program Files (x86)\TornTV.com\torn2_10.crx
CHR HKLM-x32\...\Chrome\Extension: [nohfdhapjjlndfgjnmdlcabloeembdkj] - C:\Users\Tim\AppData\Roaming\BabSolution\CR\delta2.crx
CHR HKLM-x32\...\Chrome\Extension: [oejkcgajlodefenbbjdnaiahmbnnoole] - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\chrome-newtab-search.crx

==================== Services (Whitelisted) =================

S3 AVG Security Toolbar Service; C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe [947528 2011-03-18] ()
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3538480 2013-10-03] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [301152 2013-09-25] (AVG Technologies CZ, s.r.o.)
R2 Greg_Service; C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated)
R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareService.exe [517344 2013-10-18] ()
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [58345832 2011-09-22] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [3979632 2010-12-07] (INCA Internet Co., Ltd.)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-08] (NVIDIA Corporation)
R2 PasswordBox; C:\Program Files (x86)\PasswordBox\pbbtnService.exe [67584 2013-09-13] (PasswordBox, Inc.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-27] ()
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [431464 2011-09-22] (Microsoft Corporation)
R2 Updater Service; C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
R2 VoddlerNet; C:\Program Files (x86)\voddler\service\voddler.exe [2365512 2012-05-30] (Voddler)
R2 vToolbarUpdater17.1.2; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.2\ToolbarUpdater.exe [1734680 2013-11-11] (AVG Secure Search)
S3 aspnet_state; %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [x]
S2 CltMngSvc; C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe [x]
S2 MyWebSearchService; C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwssvc.exe [x]

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-08-21] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [148792 2013-09-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-09-02] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-08] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-11-11] (AVG Technologies)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-24] (DT Soft Ltd)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-09-14] (GFI Software)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-08-21] ()
S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4774 2012-02-02] (INCA Internet Co., Ltd.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation)
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3557248 2009-06-03] ()
R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)
S3 dump_wmimmc; \??\C:\gPotato.eu\Dragonica\Release\GameGuard\dump_wmimmc.sys [x]
S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-15 18:49 - 2013-11-15 18:50 - 00034943 _____ C:\Users\Tim\Desktop\FRST.txt
2013-11-15 18:49 - 2013-11-15 18:49 - 01957794 _____ (Farbar) C:\Users\Tim\Desktop\FRST64.exe
2013-11-15 18:49 - 2013-11-15 18:49 - 00000000 ____D C:\FRST
2013-11-15 17:04 - 2013-11-15 17:04 - 00347304 _____ (Microsoft Corporation) C:\Users\Tim\Downloads\MicrosoftFixit.WindowsFirewall.RNP.33307958411304968.1.1.Run.exe
2013-11-13 16:18 - 2013-11-13 16:26 - 00000000 ____D C:\Users\Tim\AppData\Local\PMB Files
2013-11-13 16:18 - 2013-11-13 16:18 - 00000000 ____D C:\ProgramData\PMB Files
2013-11-13 16:18 - 2013-11-13 16:18 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2013-11-13 16:17 - 2013-11-14 19:04 - 00000000 ____D C:\Users\Tim\AppData\Roaming\Riot Games
2013-11-13 16:17 - 2013-11-13 17:01 - 34249488 _____ (Riot Games) C:\Users\Tim\Downloads\LeagueofLegends_EUNE_Installer_06_17_13.exe
2013-11-13 16:15 - 2013-11-13 16:15 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-11-12 19:14 - 2013-11-12 19:14 - 00000000 ____D C:\Users\Tim\AppData\Local\NVIDIA Corporation
2013-11-12 19:12 - 2013-11-12 19:12 - 00000000 ____D C:\Users\Tim\AppData\Local\NVIDIA
2013-11-06 17:29 - 2013-11-06 17:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-04 15:45 - 2013-11-04 15:48 - 00000000 ____D C:\Users\Tim\Desktop\Musik från SD
2013-11-02 21:20 - 2013-11-02 21:30 - 00000059 _____ C:\Users\Tim\Desktop\Jultidningar.txt
2013-11-02 09:51 - 2013-11-02 09:51 - 00001336 _____ C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2013-11-02 09:51 - 2013-11-02 09:51 - 00000000 ____D C:\Program Files\Lavasoft
2013-11-02 00:00 - 2013-11-02 00:00 - 00001695 _____ C:\Users\Tim\Desktop\Terraria.exe - genväg.lnk
2013-11-01 23:21 - 2013-11-01 23:27 - 00000000 ____D C:\Users\Tim\AppData\Roaming\FreeBurner
2013-11-01 23:21 - 2011-09-28 09:20 - 00152848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMDLG32.OCX
2013-11-01 23:21 - 2011-09-28 09:20 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCFR.DLL
2013-11-01 23:21 - 2011-09-28 09:20 - 00119568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6FR.DLL
2013-11-01 23:21 - 2011-09-28 09:20 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6STKIT.DLL
2013-11-01 23:21 - 2011-09-28 09:20 - 00040960 _____ (vbAccelerator) C:\Windows\SysWOW64\SSubTmr6.dll
2013-11-01 23:21 - 2011-09-28 09:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CMDLGFR.DLL
2013-11-01 23:21 - 2011-09-28 09:20 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetfr.DLL
2013-11-01 23:13 - 2013-11-01 23:28 - 00000000 ____D C:\Program Files (x86)\Free Easy CD DVD Burner
2013-11-01 23:13 - 2013-11-01 23:13 - 01208336 _____ (Koyote-Lab Inc) C:\Users\Tim\Downloads\FreeEasyCDDVDBurnerSetup-r101-w-bf.exe
2013-11-01 22:17 - 2013-11-01 23:20 - 00000000 ____D C:\Users\Tim\Desktop\Mamma och pappa projektet
2013-11-01 22:16 - 2013-11-01 22:16 - 00000000 ____D C:\Users\Tim\AppData\Local\{62133D7A-058E-4FBA-A2C8-9BC4483A0A40}
2013-11-01 21:51 - 2013-11-01 21:51 - 00000000 ____D C:\Users\Tim\AppData\Roaming\Canneverbe Limited
2013-11-01 21:51 - 2013-11-01 21:51 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-11-01 21:49 - 2013-11-01 21:49 - 05283736 _____ (Canneverbe Limited                                          ) C:\Users\Tim\Downloads\cdbxp_setup_4.5.2.4291.exe
2013-11-01 21:38 - 2013-11-01 21:38 - 00000000 ____D C:\Users\Tim\AppData\Local\{FD5B2076-DADE-4CDA-BF5E-7B1BB5DA8AF0}
2013-11-01 20:36 - 2013-11-01 20:36 - 01010176 _____ C:\Users\Tim\Downloads\MicrosoftFixit50884.msi
2013-11-01 20:29 - 2013-11-01 20:29 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2013-11-01 20:28 - 2013-11-01 20:28 - 01724552 _____ C:\Users\Tim\Downloads\Adaware_Installer.exe
2013-11-01 18:19 - 2013-11-01 18:19 - 01528184 _____ (Microsoft Corporation) C:\Users\Tim\Downloads\GenuineCheck.exe
2013-11-01 18:19 - 2013-11-01 18:19 - 00000000 ____D C:\ProgramData\Windows Genuine Advantage
2013-11-01 16:37 - 2013-11-01 16:37 - 00000000 ____D C:\Users\Tim\AppData\Local\DriverTuner
2013-11-01 16:36 - 2013-11-01 16:36 - 02816072 _____ (LionSea SoftWare                                            ) C:\Users\Tim\Downloads\setup.exe
2013-11-01 16:31 - 2013-11-01 16:34 - 00001163 _____ C:\Users\Tim\Desktop\Find Drivers with DriverAgent.lnk
2013-11-01 16:31 - 2013-11-01 16:31 - 05511528 _____ (Copyright © 2013 eSupport.com, Inc • All Rights Reserved    ) C:\Users\Tim\Downloads\driveragent-setup-avg-987.exe
2013-11-01 16:31 - 2013-11-01 16:31 - 00001183 _____ C:\Users\Public\Desktop\Find Drivers with DriverAgent.lnk
2013-11-01 16:31 - 2013-11-01 16:31 - 00000000 ____D C:\Program Files (x86)\eSupport.com
2013-10-31 12:08 - 2013-10-31 12:08 - 00000000 ____D C:\Users\Tim\Documents\Arktos
2013-10-30 09:24 - 2013-10-30 20:16 - 00000375 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-10-30 06:54 - 2013-10-30 06:54 - 03820328 _____ C:\Users\Tim\Desktop\battlelog-web-plugins_2.3.0_119.exe
2013-10-30 04:24 - 2013-10-30 04:24 - 00001179 _____ C:\Users\Public\Desktop\Battlefield 1942.lnk
2013-10-30 03:27 - 2013-10-30 03:27 - 00000000 ____D C:\Users\Tim\Downloads\survivors
2013-10-30 03:05 - 2013-10-30 03:05 - 00000222 _____ C:\Users\Tim\Desktop\Haunted Memories.url
2013-10-29 23:59 - 2013-10-29 23:59 - 00000745 _____ C:\Windows\DXError.log
2013-10-29 21:24 - 2013-11-08 21:47 - 01064224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-10-29 21:24 - 2013-11-08 21:47 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-10-29 21:23 - 2013-10-29 21:23 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-10-29 21:22 - 2013-10-29 21:22 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Start-meny
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Skrivare
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Nätverket
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Mina dokument
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Mallar
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Lokala inställningar
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Mina videoklipp
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Mina bilder
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Min musik
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Program
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Tidigare
2013-10-29 21:22 - 2013-01-31 16:12 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\TuneUp Software
2013-10-29 21:22 - 2012-12-02 02:35 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2013-10-29 21:22 - 2012-08-08 20:45 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Google
2013-10-29 21:22 - 2012-06-28 16:23 - 00000000 ____D C:\Users\UpdatusUser\AppData\LocalGoogle
2013-10-29 21:22 - 2011-11-27 20:08 - 00000000 ____D C:\Users\UpdatusUser\Documents\Visual Studio 2010
2013-10-29 21:22 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-10-29 21:22 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-10-29 21:19 - 2013-09-28 00:01 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-10-29 21:19 - 2013-09-28 00:01 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-10-29 21:19 - 2013-09-28 00:01 - 00028960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 30344480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 22933792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 18286416 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 18199872 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 12572960 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-10-29 21:18 - 2013-10-23 11:30 - 11426568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 11374520 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 09524088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 09480328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 03131680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 03124512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 02946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 02747168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433165.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433165.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 00655136 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-10-29 21:18 - 2013-10-23 11:30 - 00560416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-10-29 21:18 - 2013-06-16 13:38 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-10-29 21:18 - 2013-06-16 13:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-10-29 21:18 - 2013-01-29 09:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2013-10-29 20:28 - 2013-10-29 20:29 - 00000000 ____D C:\Users\Tim\AppData\Roaming\Tunngle
2013-10-29 20:28 - 2013-10-29 20:28 - 00000000 ____D C:\Users\Tim\Documents\Tunngle
2013-10-29 20:12 - 2013-10-29 20:23 - 255073208 _____ (NVIDIA Corporation) C:\Users\Tim\Downloads\331.65-desktop-win8-win7-winvista-64bit-international-whql.exe
2013-10-29 19:18 - 2013-10-29 19:19 - 00000000 ____D C:\Users\Tim\Documents\GTA3 User Files
2013-10-29 18:19 - 2013-10-29 23:16 - 00001076 _____ C:\Users\Tim\Desktop\Wolfenstein (Single Player).lnk
2013-10-29 18:19 - 2013-10-29 18:19 - 00001042 _____ C:\Users\Gäst\Desktop\Wolfenstein (Single Player).lnk
2013-10-29 18:19 - 2013-10-29 18:19 - 00001042 _____ C:\Users\Gäst\Desktop\Wolfenstein (Multiplayer).lnk
2013-10-29 18:19 - 2013-10-29 18:19 - 00000000 ____D C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Return to Castle Wolfenstein
2013-10-29 18:17 - 2013-10-29 18:19 - 00000000 ____D C:\Program Files (x86)\Return to Castle Wolfenstein
2013-10-29 18:14 - 2013-10-29 18:19 - 00000810 _____ C:\Windows\Rtcw.INI
2013-10-29 18:14 - 2001-06-19 17:53 - 00266293 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.000
2013-10-29 11:42 - 2013-10-29 11:43 - 00000000 ____D C:\Program Files (x86)\Terraria
2013-10-29 09:25 - 2013-10-29 09:25 - 00000003 _____ C:\Windows\system32\HRUPPROG.TXT
2013-10-29 09:25 - 2013-10-29 09:25 - 00000003 _____ C:\Windows\system32\HRUPPROG.DIE.NOW
2013-10-28 17:11 - 2013-10-28 17:11 - 00000000 ____D C:\Users\Tim\Documents\Microsoft Hardware
2013-10-28 17:05 - 2013-10-28 17:05 - 00002677 _____ C:\Users\Public\Desktop\Microsoft Keyboard.lnk
2013-10-28 17:03 - 2013-10-28 17:04 - 00000000 ____D C:\Program Files\Microsoft IntelliType Pro
2013-10-27 15:51 - 2013-10-27 15:51 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-27 13:40 - 2013-10-27 13:40 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 13:40 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-10-27 13:39 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-10-27 13:39 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-10-27 13:39 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-10-27 13:38 - 2013-10-27 13:39 - 00004864 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-10-26 21:22 - 2013-10-26 21:22 - 00000000 ____D C:\Users\Tim\AppData\Local\The Lord of the Rings Online
2013-10-26 08:46 - 2013-10-26 21:32 - 00000000 ____D C:\Users\Tim\Documents\The Lord of the Rings Online
2013-10-26 08:43 - 2013-10-26 21:17 - 00000000 ____D C:\Users\Tim\AppData\Local\Turbine
2013-10-26 08:42 - 2013-11-15 18:42 - 00001453 _____ C:\Windows\DtcInstall.log
2013-10-23 03:02 - 2013-10-23 03:02 - 00589600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-10-17 18:53 - 2013-10-17 18:53 - 00000000 ____D C:\Program Files\McAfee Security Scan
2013-10-17 18:42 - 2013-10-17 18:42 - 00000990 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cecb6045c391fb.job
2013-10-16 17:41 - 2013-10-30 21:24 - 00000000 ____D C:\Users\Tim\AppData\Roaming\.minecraft
2013-10-16 17:40 - 2013-10-16 17:40 - 00675988 _____ C:\Users\Tim\Desktop\Minecraft.exe

==================== One Month Modified Files and Folders =======

2013-11-15 18:50 - 2013-11-15 18:49 - 00034943 _____ C:\Users\Tim\Desktop\FRST.txt
2013-11-15 18:49 - 2013-11-15 18:49 - 01957794 _____ (Farbar) C:\Users\Tim\Desktop\FRST64.exe
2013-11-15 18:49 - 2013-11-15 18:49 - 00000000 ____D C:\FRST
2013-11-15 18:47 - 2009-07-14 05:45 - 00009920 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-15 18:47 - 2009-07-14 05:45 - 00009920 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-15 18:43 - 2010-09-17 06:07 - 01605289 _____ C:\Windows\WindowsUpdate.log
2013-11-15 18:42 - 2013-10-26 08:42 - 00001453 _____ C:\Windows\DtcInstall.log
2013-11-15 18:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Registration
2013-11-15 18:39 - 2011-02-20 18:04 - 00000000 ____D C:\Users\Tim\AppData\Roaming\Skype
2013-11-15 18:39 - 2011-02-13 10:12 - 00000000 ____D C:\Users\Tim\AppData\Local\LogMeIn Hamachi
2013-11-15 18:39 - 2010-12-25 16:31 - 00000994 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-15 18:38 - 2013-08-30 20:46 - 00012279 _____ C:\Windows\setupact.log
2013-11-15 18:38 - 2010-09-17 06:11 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-15 18:38 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-15 18:38 - 2009-07-14 05:45 - 00332544 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-15 18:07 - 2012-04-03 07:58 - 00000868 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-15 17:46 - 2011-02-24 08:31 - 00000000 ____D C:\ProgramData\MFAData
2013-11-15 17:44 - 2011-10-21 15:18 - 00000000 ____D C:\voddler
2013-11-15 17:04 - 2013-11-15 17:04 - 00347304 _____ (Microsoft Corporation) C:\Users\Tim\Downloads\MicrosoftFixit.WindowsFirewall.RNP.33307958411304968.1.1.Run.exe
2013-11-14 19:04 - 2013-11-13 16:17 - 00000000 ____D C:\Users\Tim\AppData\Roaming\Riot Games
2013-11-14 07:41 - 2013-03-24 08:46 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro
2013-11-13 17:01 - 2013-11-13 16:17 - 34249488 _____ (Riot Games) C:\Users\Tim\Downloads\LeagueofLegends_EUNE_Installer_06_17_13.exe
2013-11-13 16:26 - 2013-11-13 16:18 - 00000000 ____D C:\Users\Tim\AppData\Local\PMB Files
2013-11-13 16:18 - 2013-11-13 16:18 - 00000000 ____D C:\ProgramData\PMB Files
2013-11-13 16:18 - 2013-11-13 16:18 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2013-11-13 16:15 - 2013-11-13 16:15 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-11-12 21:50 - 2013-08-31 02:00 - 00592013 _____ C:\Windows\IE10_main.log
2013-11-12 19:14 - 2013-11-12 19:14 - 00000000 ____D C:\Users\Tim\AppData\Local\NVIDIA Corporation
2013-11-12 19:12 - 2013-11-12 19:12 - 00000000 ____D C:\Users\Tim\AppData\Local\NVIDIA
2013-11-11 15:10 - 2013-05-17 19:09 - 00003725 _____ C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2013-11-11 15:10 - 2013-05-17 19:09 - 00000000 ____D C:\Program Files (x86)\AVG Secure Search
2013-11-11 15:10 - 2012-07-24 09:39 - 00046368 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-11-10 21:12 - 2010-12-25 12:08 - 00000000 ____D C:\Program Files (x86)\Steam
2013-11-10 18:01 - 2013-09-14 08:57 - 00000000 ____D C:\Program Files (x86)\PasswordBox
2013-11-08 21:47 - 2013-10-29 21:24 - 01064224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-08 21:47 - 2013-10-29 21:24 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-08 19:28 - 2010-12-25 12:13 - 00000000 ____D C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-11-08 19:06 - 2010-12-25 16:32 - 00000000 ____D C:\Users\Tim\AppData\Local\CrashDumps
2013-11-08 17:42 - 2013-09-14 08:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-07 16:50 - 2010-09-10 08:25 - 00737590 _____ C:\Windows\system32\perfh01D.dat
2013-11-07 16:50 - 2010-09-10 08:25 - 00172274 _____ C:\Windows\system32\perfc01D.dat
2013-11-07 16:50 - 2009-07-14 06:13 - 01792428 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-06 17:29 - 2013-11-06 17:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-05 17:51 - 2010-12-26 20:42 - 00000000 ____D C:\Users\Tim\AppData\Roaming\Spotify
2013-11-05 17:45 - 2010-12-26 20:42 - 00000000 ____D C:\Users\Tim\AppData\Local\Spotify
2013-11-04 15:52 - 2011-02-27 13:22 - 00000000 ____D C:\Users\Tim\AppData\Roaming\vlc
2013-11-04 15:48 - 2013-11-04 15:45 - 00000000 ____D C:\Users\Tim\Desktop\Musik från SD
2013-11-02 21:30 - 2013-11-02 21:20 - 00000059 _____ C:\Users\Tim\Desktop\Jultidningar.txt
2013-11-02 09:51 - 2013-11-02 09:51 - 00001336 _____ C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2013-11-02 09:51 - 2013-11-02 09:51 - 00000000 ____D C:\Program Files\Lavasoft
2013-11-02 09:47 - 2013-09-02 16:48 - 01302170 _____ C:\Windows\PFRO.log
2013-11-02 01:37 - 2012-06-11 10:43 - 00000000 ____D C:\Users\Tim\AppData\Roaming\uTorrent
2013-11-02 00:00 - 2013-11-02 00:00 - 00001695 _____ C:\Users\Tim\Desktop\Terraria.exe - genväg.lnk
2013-11-01 23:28 - 2013-11-01 23:13 - 00000000 ____D C:\Program Files (x86)\Free Easy CD DVD Burner
2013-11-01 23:27 - 2013-11-01 23:21 - 00000000 ____D C:\Users\Tim\AppData\Roaming\FreeBurner
2013-11-01 23:20 - 2013-11-01 22:17 - 00000000 ____D C:\Users\Tim\Desktop\Mamma och pappa projektet
2013-11-01 23:13 - 2013-11-01 23:13 - 01208336 _____ (Koyote-Lab Inc) C:\Users\Tim\Downloads\FreeEasyCDDVDBurnerSetup-r101-w-bf.exe
2013-11-01 22:16 - 2013-11-01 22:16 - 00000000 ____D C:\Users\Tim\AppData\Local\{62133D7A-058E-4FBA-A2C8-9BC4483A0A40}
2013-11-01 21:51 - 2013-11-01 21:51 - 00000000 ____D C:\Users\Tim\AppData\Roaming\Canneverbe Limited
2013-11-01 21:51 - 2013-11-01 21:51 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-11-01 21:49 - 2013-11-01 21:49 - 05283736 _____ (Canneverbe Limited                                          ) C:\Users\Tim\Downloads\cdbxp_setup_4.5.2.4291.exe
2013-11-01 21:38 - 2013-11-01 21:38 - 00000000 ____D C:\Users\Tim\AppData\Local\{FD5B2076-DADE-4CDA-BF5E-7B1BB5DA8AF0}
2013-11-01 21:31 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-11-01 21:08 - 2011-01-15 08:29 - 00000000 ____D C:\Users\Tim\AppData\Local\Windows Live
2013-11-01 20:36 - 2013-11-01 20:36 - 01010176 _____ C:\Users\Tim\Downloads\MicrosoftFixit50884.msi
2013-11-01 20:30 - 2013-09-14 08:42 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-11-01 20:29 - 2013-11-01 20:29 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2013-11-01 20:28 - 2013-11-01 20:28 - 01724552 _____ C:\Users\Tim\Downloads\Adaware_Installer.exe
2013-11-01 20:28 - 2013-09-14 08:42 - 00000000 ____D C:\ProgramData\Lavasoft
2013-11-01 18:19 - 2013-11-01 18:19 - 01528184 _____ (Microsoft Corporation) C:\Users\Tim\Downloads\GenuineCheck.exe
2013-11-01 18:19 - 2013-11-01 18:19 - 00000000 ____D C:\ProgramData\Windows Genuine Advantage
2013-11-01 17:54 - 2009-07-14 06:08 - 00032514 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-01 16:37 - 2013-11-01 16:37 - 00000000 ____D C:\Users\Tim\AppData\Local\DriverTuner
2013-11-01 16:36 - 2013-11-01 16:36 - 02816072 _____ (LionSea SoftWare                                            ) C:\Users\Tim\Downloads\setup.exe
2013-11-01 16:34 - 2013-11-01 16:31 - 00001163 _____ C:\Users\Tim\Desktop\Find Drivers with DriverAgent.lnk
2013-11-01 16:31 - 2013-11-01 16:31 - 05511528 _____ (Copyright © 2013 eSupport.com, Inc • All Rights Reserved    ) C:\Users\Tim\Downloads\driveragent-setup-avg-987.exe
2013-11-01 16:31 - 2013-11-01 16:31 - 00001183 _____ C:\Users\Public\Desktop\Find Drivers with DriverAgent.lnk
2013-11-01 16:31 - 2013-11-01 16:31 - 00000000 ____D C:\Program Files (x86)\eSupport.com
2013-10-31 12:08 - 2013-10-31 12:08 - 00000000 ____D C:\Users\Tim\Documents\Arktos
2013-10-31 12:08 - 2013-08-31 11:15 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-10-31 12:08 - 2013-08-31 11:15 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-10-31 12:08 - 2011-12-10 11:37 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-10-31 12:07 - 2011-08-15 15:42 - 00000000 ____D C:\Program Files (x86)\Origin
2013-10-31 12:03 - 2012-11-12 18:53 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-10-31 12:03 - 2012-11-12 18:52 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-10-30 22:18 - 2011-06-15 08:59 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-10-30 21:24 - 2013-10-16 17:41 - 00000000 ____D C:\Users\Tim\AppData\Roaming\.minecraft
2013-10-30 20:16 - 2013-10-30 09:24 - 00000375 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-10-30 15:57 - 2011-01-04 09:14 - 00006646 _____ C:\Users\Public\Documents\s.t.a.l.k.e.r.ltx
2013-10-30 15:44 - 2011-01-02 19:39 - 00000000 ____D C:\Users\Public\Documents\S.T.A.L.K.E.R. - Call of Pripyat
2013-10-30 11:30 - 2013-08-31 11:17 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-10-30 06:54 - 2013-10-30 06:54 - 03820328 _____ C:\Users\Tim\Desktop\battlelog-web-plugins_2.3.0_119.exe
2013-10-30 04:24 - 2013-10-30 04:24 - 00001179 _____ C:\Users\Public\Desktop\Battlefield 1942.lnk
2013-10-30 04:24 - 2011-08-15 15:42 - 00000000 ____D C:\ProgramData\Origin
2013-10-30 04:23 - 2013-08-30 20:19 - 00102502 _____ C:\Windows\DirectX.log
2013-10-30 04:11 - 2011-08-15 15:42 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-10-30 03:27 - 2013-10-30 03:27 - 00000000 ____D C:\Users\Tim\Downloads\survivors
2013-10-30 03:05 - 2013-10-30 03:05 - 00000222 _____ C:\Users\Tim\Desktop\Haunted Memories.url
2013-10-30 00:45 - 2011-11-25 18:00 - 00000000 ____D C:\Users\Public\Documents\DAEMON Tools Images
2013-10-30 00:30 - 2011-05-01 12:20 - 00000000 ____D C:\Users\Tim\AppData\Roaming\DAEMON Tools Lite
2013-10-30 00:25 - 2010-12-26 21:42 - 00000000 ____D C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-10-30 00:03 - 2011-03-02 15:09 - 00000000 ____D C:\Program Files (x86)\EA GAMES
2013-10-30 00:03 - 2010-05-14 22:54 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-29 23:59 - 2013-10-29 23:59 - 00000745 _____ C:\Windows\DXError.log
2013-10-29 23:16 - 2013-10-29 18:19 - 00001076 _____ C:\Users\Tim\Desktop\Wolfenstein (Single Player).lnk
2013-10-29 21:24 - 2012-06-11 08:42 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-10-29 21:24 - 2011-12-10 11:34 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-10-29 21:24 - 2010-09-17 06:09 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-10-29 21:23 - 2013-10-29 21:23 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-10-29 21:22 - 2013-10-29 21:22 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Start-meny
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Skrivare
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Nätverket
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Mina dokument
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Mallar
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Lokala inställningar
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Mina videoklipp
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Mina bilder
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Min musik
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Program
2013-10-29 21:22 - 2013-10-29 21:22 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Tidigare
2013-10-29 21:11 - 2010-12-25 11:59 - 00078288 _____ C:\Users\Tim\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-29 20:39 - 2013-06-08 10:01 - 00000000 ___RD C:\Users\Tim\Desktop\
2013-10-29 20:30 - 2011-05-01 12:49 - 00000000 ____D C:\Users\Tim\Documents\My Games
2013-10-29 20:29 - 2013-10-29 20:28 - 00000000 ____D C:\Users\Tim\AppData\Roaming\Tunngle
2013-10-29 20:28 - 2013-10-29 20:28 - 00000000 ____D C:\Users\Tim\Documents\Tunngle
2013-10-29 20:23 - 2013-10-29 20:12 - 255073208 _____ (NVIDIA Corporation) C:\Users\Tim\Downloads\331.65-desktop-win8-win7-winvista-64bit-international-whql.exe
2013-10-29 19:19 - 2013-10-29 19:18 - 00000000 ____D C:\Users\Tim\Documents\GTA3 User Files
2013-10-29 18:19 - 2013-10-29 18:19 - 00001042 _____ C:\Users\Gäst\Desktop\Wolfenstein (Single Player).lnk
2013-10-29 18:19 - 2013-10-29 18:19 - 00001042 _____ C:\Users\Gäst\Desktop\Wolfenstein (Multiplayer).lnk
2013-10-29 18:19 - 2013-10-29 18:19 - 00000000 ____D C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Return to Castle Wolfenstein
2013-10-29 18:19 - 2013-10-29 18:17 - 00000000 ____D C:\Program Files (x86)\Return to Castle Wolfenstein
2013-10-29 18:19 - 2013-10-29 18:14 - 00000810 _____ C:\Windows\Rtcw.INI
2013-10-29 11:43 - 2013-10-29 11:42 - 00000000 ____D C:\Program Files (x86)\Terraria
2013-10-29 09:25 - 2013-10-29 09:25 - 00000003 _____ C:\Windows\system32\HRUPPROG.TXT
2013-10-29 09:25 - 2013-10-29 09:25 - 00000003 _____ C:\Windows\system32\HRUPPROG.DIE.NOW
2013-10-28 17:11 - 2013-10-28 17:11 - 00000000 ____D C:\Users\Tim\Documents\Microsoft Hardware
2013-10-28 17:05 - 2013-10-28 17:05 - 00002677 _____ C:\Users\Public\Desktop\Microsoft Keyboard.lnk
2013-10-28 17:04 - 2013-10-28 17:03 - 00000000 ____D C:\Program Files\Microsoft IntelliType Pro
2013-10-27 15:51 - 2013-10-27 15:51 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-27 15:50 - 2013-08-31 11:14 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-10-27 13:40 - 2013-10-27 13:40 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 13:39 - 2013-10-27 13:38 - 00004864 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-10-27 13:39 - 2013-07-20 10:35 - 00000000 ____D C:\Program Files (x86)\Java
2013-10-26 21:32 - 2013-10-26 08:46 - 00000000 ____D C:\Users\Tim\Documents\The Lord of the Rings Online
2013-10-26 21:22 - 2013-10-26 21:22 - 00000000 ____D C:\Users\Tim\AppData\Local\The Lord of the Rings Online
2013-10-26 21:17 - 2013-10-26 08:43 - 00000000 ____D C:\Users\Tim\AppData\Local\Turbine
2013-10-26 08:46 - 2011-12-19 20:18 - 00000000 ____D C:\Users\Tim\AppData\Roaming\SoftGrid Client
2013-10-26 08:43 - 2011-11-26 12:30 - 01816526 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-23 11:30 - 2013-10-29 21:18 - 30344480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 22933792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 18286416 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 18199872 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 12572960 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-10-23 11:30 - 2013-10-29 21:18 - 11426568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 11374520 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 09524088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 09480328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 03131680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 03124512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 02946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 02747168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433165.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433165.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 00655136 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-10-23 11:30 - 2013-10-29 21:18 - 00560416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-10-23 11:30 - 2012-10-10 21:23 - 15855568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-10-23 11:30 - 2012-10-10 21:23 - 03067560 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-10-23 11:30 - 2012-10-10 21:22 - 15212336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-10-23 11:30 - 2012-10-10 21:22 - 02695200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-10-23 11:30 - 2010-03-22 09:42 - 00023287 _____ C:\Windows\system32\nvinfo.pb
2013-10-23 09:20 - 2010-02-17 18:47 - 03489568 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-10-23 09:20 - 2010-02-17 18:47 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-10-23 09:20 - 2010-02-17 18:47 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-10-23 09:20 - 2010-02-17 18:47 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-10-23 09:20 - 2010-02-17 18:47 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-10-23 09:20 - 2010-02-17 18:46 - 06669600 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-10-23 03:02 - 2013-10-23 03:02 - 00589600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-10-21 05:21 - 2011-02-20 18:04 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-21 05:21 - 2011-02-20 18:04 - 00000000 ____D C:\ProgramData\Skype
2013-10-17 18:53 - 2013-10-17 18:53 - 00000000 ____D C:\Program Files\McAfee Security Scan
2013-10-17 18:42 - 2013-10-17 18:42 - 00000990 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cecb6045c391fb.job
2013-10-16 18:55 - 2013-10-14 18:51 - 00000000 ____D C:\maps
2013-10-16 17:40 - 2013-10-16 17:40 - 00675988 _____ C:\Users\Tim\Desktop\Minecraft.exe
2013-10-16 17:39 - 2012-09-04 16:03 - 00010752 ___SH C:\Users\Tim\Thumbs.db

Files to move or delete:
====================
C:\Users\Tim\AppData\Roaming\Camdata.ini
C:\Users\Tim\AppData\Roaming\CamLayout.ini
C:\Users\Tim\AppData\Roaming\CamShapes.ini
C:\ProgramData\hash.dat
C:\ProgramData\sdpsenv.dat
C:\Users\Tim\jagex_runescape_preferences.dat
C:\Users\Tim\jagex_runescape_preferences2.dat


Some content of TEMP:
====================
C:\Users\Tim\AppData\Local\Temp\1bf2165a-1822-48d2-8cfd-c388cfe92113.exe
C:\Users\Tim\AppData\Local\Temp\788c2f1f-cb3f-4407-9e71-d0533adf0af0.exe
C:\Users\Tim\AppData\Local\Temp\bitool.dll
C:\Users\Tim\AppData\Local\Temp\bi_cleaner.exe
C:\Users\Tim\AppData\Local\Temp\dd01daa0-1fbf-4bb3-80af-1f5dbebd964d.exe
C:\Users\Tim\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Tim\AppData\Local\Temp\drm_dyndata_7370014.dll
C:\Users\Tim\AppData\Local\Temp\drm_dyndata_7380015.dll
C:\Users\Tim\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Tim\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Tim\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Tim\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Tim\AppData\Local\Temp\nvStInst.exe
C:\Users\Tim\AppData\Local\Temp\RegistryHelperSetupSO.exe
C:\Users\Tim\AppData\Local\Temp\setup.exe
C:\Users\Tim\AppData\Local\Temp\sonarinst.exe
C:\Users\Tim\AppData\Local\Temp\SRLDetectionLibrary4528653412011164958.dll
C:\Users\Tim\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Tim\AppData\Local\Temp\Uninstall.exe
C:\Users\Tim\AppData\Local\Temp\utt3464.tmp.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-11 16:16

==================== End Of Log ============================



#3 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:11:56 AM

Posted 15 November 2013 - 02:42 PM

Download attached fixlist.txt file and save it to the Desktop.

Attached File  FixList.txt   4.88KB   1 downloads

NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST/FRST64 and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#4 TimL

TimL
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:56 PM

Posted 17 November 2013 - 06:16 AM

My fixlog:

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-11-2013
Ran by Tim at 2013-11-17 12:15:19 Run:2
Running from C:\Users\Tim\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
HKLM\...\Run: [] - [x]
HKLM-x32\...\Winlogon: [Shell] tim.exe [ ] () <=== ATTENTION
HKU\Gäst\...\Run: [MyWebSearch Email Plugin] - C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwsoemon.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [ ] ()
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [ ] ()
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=SE&userid=71cbe26c-c56d-4a3b-b3c2-444cbc5c5b3d&searchtype=ds&q={searchTerms}&installDate=23/03/2013
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://search.conduit.com/Results.aspx?ctid=CT3312375&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP763F3050-C254-4FBC-94D8-923FC59E7924&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=44444&tt=gc_&babsrc=SP_ss&mntrId=A4834487FCF7F4D3
SearchScopes: HKCU - {C3E9B9D3-2839-45B5-AEC8-A026C368526A} URL = http://www.mysearchresults.com/search?c=4005&t=14&q={searchTerms}
BHO: No Name - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -  No File
BHO-x32: No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSBAR.DLL No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
Toolbar: HKCU - No Name - {07B18EA9-A523-4961-B6BB-170DE4475CCA} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
FF Homepage: hxxp://search.conduit.com/?ctid=CT3312375&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP763F3050-C254-4FBC-94D8-923FC59E7924
FF SelectedSearchEngine: Conduit Search
FF NewTab: hxxp://search.conduit.com/?ctid=CT3312375&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=EB_SSPV&Lay=1&UM=2&UP=SP763F3050-C254-4FBC-94D8-923FC59E7924
FF Plugin-x32: @mywebsearch.com/Plugin - C:\Program Files (x86)\MyWebSearch\bar\1.bin\NPMyWebS.dll No File
FF SearchPlugin: C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\i1p3xebi.default-1365779578448\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\i1p3xebi.default-1365779578448\searchplugins\delta.xml
FF HKLM-x32\...\Firefox\Extensions: [m3ffxtbr@mywebsearch.com] - C:\Program Files (x86)\MyWebSearch\bar\1.bin
FF Extension: My Web Search - C:\Program Files (x86)\MyWebSearch\bar\1.bin
CHR RestoreOnStartup: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_4&ent=hp&u=E57A0046578C78576F73105234131477", "hxxp://search.conduit.com/?ctid=CT3312375&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP763F3050-C254-4FBC-94D8-923FC59E7924"
CHR Plugin: (My Web Search Plugin Stub) - C:\Program Files (x86)\MyWebSearch\bar\1.bin\NPMyWebS.dll No File
CHR HKLM-x32\...\Chrome\Extension: [nohfdhapjjlndfgjnmdlcabloeembdkj] - C:\Users\Tim\AppData\Roaming\BabSolution\CR\delta2.crx
S2 MyWebSearchService; C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwssvc.exe [x]
C:\Users\Tim\AppData\Roaming\Camdata.ini
C:\Users\Tim\AppData\Roaming\CamLayout.ini
C:\Users\Tim\AppData\Roaming\CamShapes.ini
C:\ProgramData\hash.dat
C:\ProgramData\sdpsenv.dat
C:\Users\Tim\jagex_runescape_preferences.dat
C:\Users\Tim\jagex_runescape_preferences2.dat
C:\Users\Tim\AppData\Local\Temp\1bf2165a-1822-48d2-8cfd-c388cfe92113.exe
C:\Users\Tim\AppData\Local\Temp\788c2f1f-cb3f-4407-9e71-d0533adf0af0.exe
C:\Users\Tim\AppData\Local\Temp\bitool.dll
C:\Users\Tim\AppData\Local\Temp\bi_cleaner.exe
C:\Users\Tim\AppData\Local\Temp\dd01daa0-1fbf-4bb3-80af-1f5dbebd964d.exe
C:\Users\Tim\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Tim\AppData\Local\Temp\drm_dyndata_7370014.dll
C:\Users\Tim\AppData\Local\Temp\drm_dyndata_7380015.dll
C:\Users\Tim\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Tim\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Tim\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Tim\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Tim\AppData\Local\Temp\nvStInst.exe
C:\Users\Tim\AppData\Local\Temp\RegistryHelperSetupSO.exe
C:\Users\Tim\AppData\Local\Temp\setup.exe
C:\Users\Tim\AppData\Local\Temp\sonarinst.exe
C:\Users\Tim\AppData\Local\Temp\SRLDetectionLibrary4528653412011164958.dll
C:\Users\Tim\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Tim\AppData\Local\Temp\Uninstall.exe
C:\Users\Tim\AppData\Local\Temp\utt3464.tmp.exe
end













*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value was restored successfully.
HKU\Gäst\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Email Plugin => Value deleted successfully.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} => Key deleted successfully.
HKCR\CLSID\{006ee092-9658-4fd6-bd8e-a21a348e59f5} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} => Key deleted successfully.
HKCR\CLSID\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully.
HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C3E9B9D3-2839-45B5-AEC8-A026C368526A} => Key deleted successfully.
HKCR\CLSID\{C3E9B9D3-2839-45B5-AEC8-A026C368526A} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} => Key deleted successfully.
HKCR\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113} => Value deleted successfully.
HKCR\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{07B18EA9-A523-4961-B6BB-170DE4475CCA} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{95B7759C-8C7F-4BF1-B163-73684A933233} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Value deleted successfully.
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => Value deleted successfully.
HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => Value deleted successfully.
HKCR\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} => Value deleted successfully.
HKCR\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{07B18EA9-A523-4961-B6BB-170DE4475CCA} => Value deleted successfully.
HKCR\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Value deleted successfully.
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found.
Firefox homepage deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
Firefox newtab deleted successfully.
HKLM\Software\Wow6432Node\MozillaPlugins\@mywebsearch.com/Plugin => Key deleted successfully.
C:\Program Files (x86)\MyWebSearch\bar\1.bin\NPMyWebS.dll not found.
C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\i1p3xebi.default-1365779578448\searchplugins\conduit-search.xml => Moved successfully.
C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\i1p3xebi.default-1365779578448\searchplugins\delta.xml => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\m3ffxtbr@mywebsearch.com => Value deleted successfully.
C:\Program Files (x86)\MyWebSearch\bar\1.bin => Moved successfully.
CHR RestoreOnStartup: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_4&ent=hp&u=E57A0046578C78576F73105234131477", "hxxp://search.conduit.com/?ctid=CT3312375&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP763F3050-C254-4FBC-94D8-923FC59E7924" ==> The Chrome "Settings" can be used to fix the entry.
C:\Program Files (x86)\MyWebSearch\bar\1.bin\NPMyWebS.dll not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nohfdhapjjlndfgjnmdlcabloeembdkj => Key deleted successfully.
"C:\Users\Tim\AppData\Roaming\BabSolution\CR\delta2.crx" => File/Directory not found.
MyWebSearchService => Service deleted successfully.
C:\Users\Tim\AppData\Roaming\Camdata.ini => Moved successfully.
C:\Users\Tim\AppData\Roaming\CamLayout.ini => Moved successfully.
C:\Users\Tim\AppData\Roaming\CamShapes.ini => Moved successfully.
C:\ProgramData\hash.dat => Moved successfully.
C:\ProgramData\sdpsenv.dat => Moved successfully.
C:\Users\Tim\jagex_runescape_preferences.dat => Moved successfully.
C:\Users\Tim\jagex_runescape_preferences2.dat => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\1bf2165a-1822-48d2-8cfd-c388cfe92113.exe => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\788c2f1f-cb3f-4407-9e71-d0533adf0af0.exe => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\bitool.dll => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\bi_cleaner.exe => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\dd01daa0-1fbf-4bb3-80af-1f5dbebd964d.exe => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\drm_dialogs.dll => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\drm_dyndata_7370014.dll => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\drm_dyndata_7380015.dll => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\nv3DVStreaming.dll => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\nvSCPAPI.dll => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\nvStereoApiI.dll => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\nvStInst.exe => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\RegistryHelperSetupSO.exe => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\setup.exe => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\sonarinst.exe => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\SRLDetectionLibrary4528653412011164958.dll => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\swt-win32-3349.dll => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\Uninstall.exe => Moved successfully.
C:\Users\Tim\AppData\Local\Temp\utt3464.tmp.exe => Moved successfully.

==== End of Fixlog ====



#5 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:11:56 AM

Posted 18 November 2013 - 11:43 AM

Please run the following:

 

Refer to the ComboFix User's Guide

 

  • Download ComboFix from the following location:

     

    Link

     

    * IMPORTANT !!! Place ComboFix.exe on your  Desktop

     

  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with ComboFix.

    You can get help on disabling your protection programs here

     

  • Double click on ComboFix.exe & follow the prompts.

  • Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal.

  • When finished, it shall produce a log for you. Post that log in your next reply

     

    Note:

    Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

     

    ---------------------------------------------------------------------------------------------

     

  • Ensure your AntiVirus and AntiSpyware applications are re-enabled.

     

    ---------------------------------------------------------------------------------------------

 

NOTE:  If you encounter a message "illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.


Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#6 TimL

TimL
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:56 PM

Posted 18 November 2013 - 12:29 PM

My log:

 

ComboFix 13-11-18.01 - Tim 2013-11-18  18:00:07.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.46.1053.18.4023.1675 [GMT 1:00]
Körs från: c:\users\Tim\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition 2014 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
.
.
((((((((((((((((((((((((((((((((((((((( Andra raderingar ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\FunWebProducts
c:\program files (x86)\MyWebSearch
c:\program files (x86)\MyWebSearch\bar\Avatar\COMMON.F3S
c:\program files (x86)\MyWebSearch\bar\Game\CHECKERS.F3S
c:\program files (x86)\MyWebSearch\bar\Game\CHESS.F3S
c:\program files (x86)\MyWebSearch\bar\Game\REVERSI.F3S
c:\program files (x86)\MyWebSearch\bar\icons\CM.ICO
c:\program files (x86)\MyWebSearch\bar\icons\MFC.ICO
c:\program files (x86)\MyWebSearch\bar\icons\PSS.ICO
c:\program files (x86)\MyWebSearch\bar\icons\SMILEY.ICO
c:\program files (x86)\MyWebSearch\bar\icons\WB.ICO
c:\program files (x86)\MyWebSearch\bar\icons\ZWINKY.ICO
c:\program files (x86)\MyWebSearch\bar\IE9Mesg\COMMON.F3S
c:\program files (x86)\MyWebSearch\bar\Message\COMMON.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\COMMON.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\DOG.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\FISH.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\KUNGFU.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\LIFEGARD.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\MAID.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\MAILBOX.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\OPERA.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\ROBOT.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\SEDUCT.F3S
c:\program files (x86)\MyWebSearch\bar\Notifier\SURFER.F3S
c:\program files (x86)\MyWebSearch\bar\Overlay\COMMON.F3S
c:\program files (x86)\MyWebSearch\bar\Settings\s_pid.dat
c:\program files (x86)\smartdl
c:\program files (x86)\smartdl\cc
c:\program files (x86)\smartdl\dler.exe
c:\program files (x86)\smartdl\header.bmp
c:\program files (x86)\smartdl\header2.bmp
c:\program files (x86)\smartdl\header3.bmp
c:\program files (x86)\smartdl\installid
c:\program files (x86)\smartdl\TorrentSearch.exe
c:\programdata\continuetosave
c:\programdata\continuetosave\51279a91282b6.tlb
c:\programdata\continuetosave\kimdlhdfalmkcdpjmmojjcceffadcbol.crx
c:\programdata\continuetosave\settings.ini
c:\programdata\wxDownload
c:\programdata\wxDownload\509ff58fab292.html
c:\programdata\wxDownload\509ff58fab2cb.js
c:\programdata\wxDownload\kjafngncbkkjfbomdoigpckhkfdlhfla.crx
c:\programdata\wxDownload\settings.ini
c:\users\Tim\AppData\Local\TempDIR
c:\users\Tim\AppData\Local\TempDIR\GFInstaller\AppName.txt
c:\users\Tim\AppData\Local\TempDIR\GFInstaller\Channel.txt
c:\users\Tim\AppData\Local\TempDIR\GFInstaller\DownloadURL.txt
c:\users\Tim\AppData\Local\TempDIR\GFInstaller\GFInstaller.exe
c:\windows\SysWow64\frapsvid.dll
c:\windows\SysWow64\SET7DA0.tmp
c:\windows\SysWow64\SET837D.tmp
.
.
(((((((((((((((((((((((((((((((((((((((   Drivrutiner/Tjänster   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_MyWebSearchService
.
.
((((((((((((((((((((((((   Filer skapade från 2013-10-18 till 2013-11-18  ))))))))))))))))))))))))))))))
.
.
2013-11-16 17:46 . 2013-11-16 17:46    --------    d-----w-    c:\users\Tim\AppData\Roaming\Lavasoft
2013-11-15 17:49 . 2013-11-15 17:49    --------    d-----w-    C:\FRST
2013-11-13 15:18 . 2013-11-13 15:26    --------    d-----w-    c:\users\Tim\AppData\Local\PMB Files
2013-11-13 15:18 . 2013-11-13 15:18    --------    d-----w-    c:\programdata\PMB Files
2013-11-13 15:18 . 2013-11-13 15:18    --------    d-----w-    c:\program files (x86)\Pando Networks
2013-11-13 15:17 . 2013-11-14 18:04    --------    d-----w-    c:\users\Tim\AppData\Roaming\Riot Games
2013-11-13 15:15 . 2013-11-13 15:15    --------    d-----w-    c:\program files (x86)\LogMeIn Hamachi
2013-11-12 18:14 . 2013-11-12 18:14    --------    d-----w-    c:\users\Tim\AppData\Local\NVIDIA Corporation
2013-11-12 18:12 . 2013-11-12 18:12    --------    d-----w-    c:\users\Tim\AppData\Local\NVIDIA
2013-11-03 01:30 . 2013-11-03 01:30    75888    ----a-w-    c:\programdata\Microsoft\Windows Defender\Definition Updates\{5E4E10AC-7B83-45AD-BA68-2EA6F03B96AF}\offreg.dll
2013-11-02 08:51 . 2013-11-02 08:51    --------    d-----w-    c:\program files\Lavasoft
2013-11-01 22:21 . 2013-11-01 22:27    --------    d-----w-    c:\users\Tim\AppData\Roaming\FreeBurner
2013-11-01 22:21 . 2011-09-28 08:20    40960    ----a-w-    c:\windows\SysWow64\SSubTmr6.dll
2013-11-01 22:21 . 2011-09-28 08:20    32768    ----a-w-    c:\windows\SysWow64\CMDLGFR.DLL
2013-11-01 22:21 . 2011-09-28 08:20    15360    ----a-w-    c:\windows\SysWow64\inetfr.DLL
2013-11-01 22:21 . 2011-09-28 08:20    152848    ----a-w-    c:\windows\SysWow64\COMDLG32.OCX
2013-11-01 22:21 . 2011-09-28 08:20    141312    ----a-w-    c:\windows\SysWow64\MSCMCFR.DLL
2013-11-01 22:21 . 2011-09-28 08:20    119568    ----a-w-    c:\windows\SysWow64\VB6FR.DLL
2013-11-01 22:21 . 2011-09-28 08:20    101888    ----a-w-    c:\windows\SysWow64\VB6STKIT.DLL
2013-11-01 22:13 . 2013-11-01 22:28    --------    d-----w-    c:\program files (x86)\Free Easy CD DVD Burner
2013-11-01 20:51 . 2013-11-01 20:51    --------    d-----w-    c:\programdata\Canneverbe Limited
2013-11-01 20:51 . 2013-11-01 20:51    --------    d-----w-    c:\users\Tim\AppData\Roaming\Canneverbe Limited
2013-11-01 20:14 . 2013-10-16 00:20    10280728    ----a-w-    c:\programdata\Microsoft\Windows Defender\Definition Updates\{5E4E10AC-7B83-45AD-BA68-2EA6F03B96AF}\mpengine.dll
2013-11-01 19:29 . 2013-11-01 19:29    --------    d-----w-    c:\program files\Common Files\Lavasoft
2013-11-01 15:37 . 2013-11-01 15:37    --------    d-----w-    c:\users\Tim\AppData\Local\DriverTuner
2013-11-01 15:31 . 2013-11-01 15:31    --------    d-----w-    c:\program files (x86)\eSupport.com
2013-10-29 20:24 . 2013-11-08 20:47    1064224    ----a-w-    c:\windows\system32\nvspcap64.dll
2013-10-29 20:24 . 2013-11-08 20:47    955168    ----a-w-    c:\windows\SysWow64\nvspcap.dll
2013-10-29 20:23 . 2013-10-29 20:23    --------    d-----w-    c:\program files (x86)\AGEIA Technologies
2013-10-29 20:22 . 2013-11-11 14:08    --------    d-----w-    c:\users\UpdatusUser
2013-10-29 20:19 . 2013-09-27 23:01    39200    ----a-w-    c:\windows\system32\drivers\nvvad64v.sys
2013-10-29 20:19 . 2013-09-27 23:01    29984    ----a-w-    c:\windows\system32\nvaudcap64v.dll
2013-10-29 20:19 . 2013-09-27 23:01    28960    ----a-w-    c:\windows\SysWow64\nvaudcap32v.dll
2013-10-29 19:28 . 2013-10-29 19:29    --------    d-----w-    c:\users\Tim\AppData\Roaming\Tunngle
2013-10-29 17:17 . 2013-10-29 17:19    --------    d-----w-    c:\program files (x86)\Return to Castle Wolfenstein
2013-10-29 17:14 . 2001-06-19 16:53    266293    ----a-w-    c:\windows\SysWow64\temp.000
2013-10-29 10:42 . 2013-10-29 10:43    --------    d-----w-    c:\program files (x86)\Terraria
2013-10-28 16:03 . 2013-10-28 16:04    --------    d-----w-    c:\program files\Microsoft IntelliType Pro
2013-10-27 14:51 . 2013-10-27 14:51    --------    d-----w-    c:\programdata\Package Cache
2013-10-27 12:40 . 2013-10-27 12:40    --------    d-----w-    c:\programdata\Oracle
2013-10-27 12:40 . 2013-10-27 12:40    --------    d-----w-    c:\program files (x86)\Common Files\Java
2013-10-27 12:39 . 2013-10-08 06:50    96168    ----a-w-    c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-10-26 20:22 . 2013-10-26 20:22    --------    d-----w-    c:\users\Tim\AppData\Local\The Lord of the Rings Online
2013-10-26 07:43 . 2013-10-26 20:17    --------    d-----w-    c:\users\Tim\AppData\Local\Turbine
2013-10-23 02:02 . 2013-10-23 02:02    589600    ----a-w-    c:\windows\SysWow64\nvStreaming.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-17 11:54 . 2013-08-31 10:15    290184    ----a-w-    c:\windows\SysWow64\PnkBstrB.exe
2013-11-17 11:54 . 2011-12-10 10:37    290184    ----a-w-    c:\windows\SysWow64\PnkBstrB.xtr
2013-11-17 11:54 . 2013-08-31 10:15    280904    ----a-w-    c:\windows\SysWow64\PnkBstrB.ex0
2013-11-11 14:10 . 2012-07-24 08:39    46368    ----a-w-    c:\windows\system32\drivers\avgtpx64.sys
2013-10-27 14:50 . 2013-08-31 10:14    76888    ----a-w-    c:\windows\SysWow64\PnkBstrA.exe
2013-10-23 10:30 . 2012-10-10 20:23    3067560    ----a-w-    c:\windows\system32\nvapi64.dll
2013-10-23 10:30 . 2012-10-10 20:23    15855568    ----a-w-    c:\windows\SysWow64\nvwgf2um.dll
2013-10-23 10:30 . 2012-10-10 20:22    2695200    ----a-w-    c:\windows\SysWow64\nvapi.dll
2013-10-23 10:30 . 2012-10-10 20:22    15212336    ----a-w-    c:\windows\SysWow64\nvd3dum.dll
2013-10-23 08:20 . 2010-02-17 17:46    6669600    ----a-w-    c:\windows\system32\nvcpl.dll
2013-10-23 08:20 . 2010-02-17 17:47    3489568    ----a-w-    c:\windows\system32\nvsvc64.dll
2013-10-23 08:20 . 2010-02-17 17:47    922912    ----a-w-    c:\windows\system32\nvvsvc.exe
2013-10-23 08:20 . 2010-02-17 17:47    63776    ----a-w-    c:\windows\system32\nvshext.dll
2013-10-23 08:20 . 2010-02-17 17:47    2559776    ----a-w-    c:\windows\system32\nvsvcr.dll
2013-10-23 08:20 . 2010-02-17 17:47    219424    ----a-w-    c:\windows\system32\nvmctray.dll
2013-10-08 18:11 . 2012-04-03 06:58    692616    ----a-w-    c:\windows\SysWow64\FlashPlayerApp.exe
2013-10-08 18:11 . 2011-05-20 16:18    71048    ----a-w-    c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-25 19:07 . 2013-09-25 19:07    148792    ----a-w-    c:\windows\system32\drivers\avgdiska.sys
2013-09-20 13:45 . 2013-09-20 13:45    389120    ----a-w-    c:\windows\SysWow64\RegistryHelperLM.ocx
2013-09-14 07:40 . 2013-09-14 07:40    14456    ----a-w-    c:\windows\system32\drivers\gfibto.sys
2013-09-08 20:11 . 2013-09-08 20:11    31544    ----a-w-    c:\windows\system32\drivers\avgrkx64.sys
2013-09-07 14:41 . 2013-09-07 14:41    105808    ----a-w-    c:\windows\SysWow64\steam_api.dll
2013-09-03 13:35 . 2012-09-01 08:56    278800    ------w-    c:\windows\system32\MpSigStub.exe
2013-09-02 08:59 . 2013-09-02 08:59    212280    ----a-w-    c:\windows\system32\drivers\avgldx64.sys
2013-09-02 08:29 . 2013-09-02 08:29    294712    ----a-w-    c:\windows\system32\drivers\avgloga.sys
2013-09-02 08:26 . 2013-09-02 08:26    192824    ----a-w-    c:\windows\system32\drivers\avgidsha.sys
2013-09-02 08:26 . 2013-09-02 08:26    241464    ----a-w-    c:\windows\system32\drivers\avgidsdrivera.sys
2013-08-20 20:53 . 2013-08-20 20:53    123704    ----a-w-    c:\windows\system32\drivers\avgmfx64.sys
2013-01-25 11:25 . 2013-01-25 11:26    11487232    ----a-w-    c:\program files (x86)\NETGEAR WG111v3 wireless USB 2.0 adapter.msi
.
.
(((((((((((((((((((((((((((((((((( Startpunkter i registret )))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Not* tomma poster & legitima standardposter visas inte.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{6c97a91e-4524-4019-86af-2aa2d567bf5c}"= "c:\program files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll" [2013-08-09 91536]
.
[HKEY_CLASSES_ROOT\clsid\{6c97a91e-4524-4019-86af-2aa2d567bf5c}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{6c97a91e-4524-4019-86af-2aa2d567bf5c}]
2013-08-09 14:50    91536    ----a-w-    c:\program files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{6c97a91e-4524-4019-86af-2aa2d567bf5c}"= "c:\program files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll" [2013-08-09 91536]
.
[HKEY_CLASSES_ROOT\clsid\{6c97a91e-4524-4019-86af-2aa2d567bf5c}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-10-02 20474528]
"Spotify Web Helper"="c:\users\Tim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-10-17 1140736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVG_UI"="c:\program files (x86)\AVG\AVG2014\avgui.exe" [2013-10-07 4908592]
"Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2013-07-15 554384]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2013-11-11 2420248]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 CltMngSvc;Search Protect by Conduit Service;c:\progra~2\SearchProtect\Main\bin\CltMngSvc.exe;c:\progra~2\SearchProtect\Main\bin\CltMngSvc.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe;c:\program files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]
R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [x]
R3 dump_wmimmc;dump_wmimmc;c:\gpotato.eu\Dragonica\Release\GameGuard\dump_wmimmc.sys;c:\gpotato.eu\Dragonica\Release\GameGuard\dump_wmimmc.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 gfiark;gfiark;c:\windows\system32\drivers\gfiark.sys;c:\windows\SYSNATIVE\drivers\gfiark.sys [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.130\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.130\McCHSvc.exe [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 RTL8187B;NETGEAR WG111v3 Wireless-G USB Adapter Win7 Driver;c:\windows\system32\DRIVERS\wg111v3.sys;c:\windows\SYSNATIVE\DRIVERS\wg111v3.sys [x]
R3 s1039bus;Sony Ericsson Device 1039 driver (WDM);c:\windows\system32\DRIVERS\s1039bus.sys;c:\windows\SYSNATIVE\DRIVERS\s1039bus.sys [x]
R3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1039mdfl.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mdfl.sys [x]
R3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1039mdm.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mdm.sys [x]
R3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1039mgmt.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mgmt.sys [x]
R3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1039nd5.sys;c:\windows\SYSNATIVE\DRIVERS\s1039nd5.sys [x]
R3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1039obex.sys;c:\windows\SYSNATIVE\DRIVERS\s1039obex.sys [x]
R3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1039unic.sys;c:\windows\SYSNATIVE\DRIVERS\s1039unic.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Aktiveringsteknologier för Windows-tjänst;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x]
R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]
R4 RsFx0105;RsFx0105 Driver;c:\windows\system32\DRIVERS\RsFx0105.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0105.sys [x]
R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE;c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys;c:\windows\SYSNATIVE\drivers\gfibto.sys [x]
S1 Avgdiska;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiska.sys;c:\windows\SYSNATIVE\DRIVERS\avgdiska.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys;c:\windows\SYSNATIVE\drivers\avgtpx64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 Greg_Service;GRegService;c:\program files (x86)\eMachines\Registration\GregHSRW.exe;c:\program files (x86)\eMachines\Registration\GregHSRW.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe [x]
S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 LavasoftAdAwareService11;Ad-Aware Service 11;c:\program files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareService.exe;c:\program files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareService.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 PasswordBox;PasswordBox;c:\program files (x86)\PasswordBox\pbbtnService.exe;c:\program files (x86)\PasswordBox\pbbtnService.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [x]
S2 Updater Service;Updater Service;c:\program files\eMachines\eMachines Updater\UpdaterService.exe;c:\program files\eMachines\eMachines Updater\UpdaterService.exe [x]
S2 VoddlerNet;VoddlerNet;c:\program files (x86)\voddler\service\voddler.exe;c:\program files (x86)\voddler\service\voddler.exe [x]
S2 vToolbarUpdater17.1.2;vToolbarUpdater17.1.2;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.2\ToolbarUpdater.exe;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.2\ToolbarUpdater.exe [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
.
.
--- Övriga tjänster/drivrutiner i minnet ---
.
*NewlyCreated* - WS2IFSL
*Deregistered* - vwififlt
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-15 14:40    1210320    ----a-w-    c:\program files (x86)\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Innehåll i mappen 'Schemalagda aktiviteter':
.
2013-11-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 18:11]
.
2013-09-07 c:\windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job
- c:\program files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2013-09-07 14:12]
.
2013-09-07 c:\windows\Tasks\DLL-Files.Com Fixer_Updates.job
- c:\program files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2013-09-07 14:12]
.
2013-10-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cecb6045c391fb.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-25 15:31]
.
2013-11-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-25 15:31]
.
2013-07-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1966150783-2353473218-186421051-1000Core1ce83a996372090.job
- c:\users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-18 10:01]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-09-25 15:37    778704    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-09-25 15:37    778704    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-09-25 15:37    778704    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-09-25 15:37    778704    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-09-25 15:37    778704    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-09-25 15:37    778704    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1832760]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2009-11-05 2345848]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-11-08 1028384]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2013-11-08 1064224]
"AdAwareTray"="c:\program files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareTray.exe" [2013-10-18 2493272]
.
------- Extra genomsökning -------
.
uStart Page = hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_4&ent=hp&u=E57A0046578C78576F73105234131477
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=041d&m=et1862&r=17361210b306pe485v1k5r47m1s59s
mStart Page = hxxp://search.gboxapp.com/?pid=388&src=ie1&r=2013/03/18&hid=394711163&lg=EN&cc=SE
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://search.toggle.com/?lang=sv&q={searchTerms}
uSearchAssistant = hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=SE&userid=71cbe26c-c56d-4a3b-b3c2-444cbc5c5b3d&searchtype=ds&q={searchTerms}&installDate=23/03/2013
IE: E&xportera till Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.1.2\ViProtocol.dll
FF - ProfilePath - c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\f28gjs0z.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.gboxapp.com/?pid=388&src=ff2&r=2013/03/18&hid=394711163&lg=EN&cc=SE&q=
FF - prefs.js: browser.startup.homepage - google.se
FF - prefs.js: keyword.URL - hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_4&hsimp=yhs-lavasoft&ent=bs&q=
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: 2013-11-01 20:48; {5C655500-E712-41e7-9349-CE462F844B19}; c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\f28gjs0z.default\extensions\{5C655500-E712-41e7-9349-CE462F844B19}.xpi
FF - user.js: extensions.BabylonToolbar_i.id - a483e849000000000000001e2a44e89f
FF - user.js: extensions.BabylonToolbar_i.hardId - a483e849000000000000001e2a44e89f
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15517
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1713:29
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - base
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
FF - user.js: extensions.BabylonToolbar.tlbrSrchUrl - hxxp://search.babylon.com/?babsrc=TB_def&mntrId=a483e8490000000000004487fcf7f4d3&q=
FF - user.js: extensions.BabylonToolbar.id - a483e8490000000000004487fcf7f4d3
FF - user.js: extensions.BabylonToolbar.appId - {BDB69379-802F-4eaf-B541-F8DE92DD98DB}
FF - user.js: extensions.BabylonToolbar.instlDay - 15820
FF - user.js: extensions.BabylonToolbar.vrsn - 1.8.11.10
FF - user.js: extensions.BabylonToolbar.vrsni - 1.8.11.10
FF - user.js: extensions.BabylonToolbar.vrsnTs - 1.8.11.1016:17
FF - user.js: extensions.BabylonToolbar.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar.aflt - babsst
FF - user.js: extensions.BabylonToolbar.smplGrp - none
FF - user.js: extensions.BabylonToolbar.tlbrId - base
FF - user.js: extensions.BabylonToolbar.instlRef - sst
FF - user.js: extensions.BabylonToolbar.dfltLng - en
FF - user.js: extensions.BabylonToolbar.excTlbr - false
FF - user.js: extensions.BabylonToolbar.ffxUnstlRst - true
FF - user.js: extensions.BabylonToolbar.admin - false
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=119585
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar.autoRvrt - false
FF - user.js: extensions.BabylonToolbar.rvrt - false
FF - user.js: extensions.BabylonToolbar.newTab - false
FF - user.js: extensions.delta.tlbrSrchUrl -
FF - user.js: extensions.delta.id - a483e8490000000000004487fcf7f4d3
FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
FF - user.js: extensions.delta.instlDay - 15853
FF - user.js: extensions.delta.vrsn - 1.8.21.5
FF - user.js: extensions.delta.vrsni - 1.8.21.5
FF - user.js: extensions.delta.vrsnTs - 1.8.21.521:07
FF - user.js: extensions.delta.prtnrId - delta
FF - user.js: extensions.delta.prdct - delta
FF - user.js: extensions.delta.aflt - babsst
FF - user.js: extensions.delta.smplGrp - none
FF - user.js: extensions.delta.tlbrId - base
FF - user.js: extensions.delta.instlRef - sst
FF - user.js: extensions.delta.dfltLng - en
FF - user.js: extensions.delta.excTlbr - false
FF - user.js: extensions.delta.ffxUnstlRst - true
FF - user.js: extensions.delta.admin - false
FF - user.js: extensions.delta_i.babTrack - affID=44444&tt=gc_
FF - user.js: extensions.delta_i.babExt -
FF - user.js: extensions.delta_i.srcExt - ss
FF - user.js: extensions.delta.autoRvrt - false
FF - user.js: extensions.delta.rvrt - false
FF - user.js: extensions.delta.newTab - false
.
- - - - FÖRÄLDRALÖSA POSTER SOM TAGITS BORT - - - -
.
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
HKLM-Run-SBRegRebootCleaner - c:\program files (x86)\Ad-Aware Antivirus\SBRC.exe
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-SearchProtect - c:\progra~2\SearchProtect\Main\bin\uninstall.exe
AddRemove-Toggle Downloader DAEMON Tools - c:\program files (x86)\Toggle Downloader\Toggle Downloader DAEMON Tools\Uninst Toggle Downloader DAEMON Tools.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va008]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008"
.
--------------------- LÅSTA REGISTERNYCKLAR ---------------------
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Control Panel\International\Time]
@Denied: (A) (Everyone)
"{65B37A38-59FD-4FD7-BCF0-269C3895F418}"=hex:38,7a,b3,65,fd,59,d7,4f,bc,f0,26,
   9c,38,95,f4,18,3b,3d,36,51,55,25,5f,41,38,3f,49,23,41,58,59,41,5d,39,40,58,\
"{92040D32-A672-48E6-9141-F9FF6EC81BB8}"=hex:32,0d,04,92,72,a6,e6,48,91,41,f9,
   ff,6e,c8,1b,b8,56,54,33,52,42,25,4b,5d,53,5b,46,23,45,5e,49,2a,52,39,59,40,\
"{6906DA54-8766-47C7-80C4-A120C57EA37A}"=hex:54,da,06,69,66,87,c7,47,80,c4,a1,
   20,c5,7e,a3,7a,4d,51,50,33,41,25,3c,5e,3e,49,45,23,5d,40,55,5e,56,39,2d,2f,\
"{B13CC3C4-FF42-4DA7-8DCD-C9D06677C761}"=hex:c4,c3,3c,b1,42,ff,a7,4d,8d,cd,c9,
   d0,66,77,c7,61,44,4e,4d,51,5e,25,5e,33,47,59,46,23,56,43,24,53,4b,39,58,2f,\
"{92FAA829-3A53-43C2-BBD6-736B7B149B48}"=hex:29,a8,fa,92,53,3a,c2,43,bb,d6,73,
   6b,7b,14,9b,48,52,57,5c,30,41,25,42,5a,53,3e,58,23,49,5d,40,57,4a,39,4c,2f,\
"{90DB4BDC-DDC8-422A-B565-1F53ADA13191}"=hex:dc,4b,db,90,c8,dd,2a,42,b5,65,1f,
   53,ad,a1,31,91,49,50,51,4c,51,25,31,52,4f,4d,4f,23,39,48,5a,50,43,39,47,42,\
"{A9A328D0-B470-4A1F-AD30-C5C16BD46FB5}"=hex:d0,28,a3,a9,70,b4,1f,4a,ad,30,c5,
   c1,6b,d4,6f,b5,55,46,46,5c,3f,25,3f,47,53,59,3f,23,59,4a,47,45,20,39,26,41,\
"{8E63DE8B-E136-4FD1-97BF-2A2B5D28E82C}"=hex:8b,de,63,8e,36,e1,d1,4f,97,bf,2a,
   2b,5d,28,e8,2c,50,40,55,4b,55,25,41,5d,5d,44,59,23,3b,41,56,42,5e,39,46,51,\
"{FD009ACE-592E-451F-8F3C-0746241D1941}"=hex:ce,9a,00,fd,2e,59,1f,45,8f,3c,07,
   46,24,1d,19,41,5b,31,46,32,45,25,48,33,48,5f,39,23,43,46,5b,5c,46,39,56,5b,\
"{83655CAC-B7C0-4CAF-B057-6BE15D2A9B61}"=hex:ac,5c,65,83,c0,b7,af,4c,b0,57,6b,
   e1,5d,2a,9b,61,48,33,40,54,3f,25,50,40,5a,40,35,23,3b,25,5c,5f,2b,39,4f,45,\
"{EE891EF8-08DA-4645-8A01-23A9BC8A68B2}"=hex:f8,1e,89,ee,da,08,45,46,8a,01,23,
   a9,bc,8a,68,b2,4b,57,43,33,53,25,5c,4d,38,58,3f,23,58,5d,40,59,25,39,59,45,\
"{55ECDCDB-FCFE-42A0-A51F-621756D1A480}"=hex:db,dc,ec,55,fe,fc,a0,42,a5,1f,62,
   17,56,d1,a4,80,3b,3c,3d,52,41,25,50,4c,45,40,58,23,5b,5d,42,25,50,39,57,43,\
"{7B0D3076-B2AB-4CA4-9F48-24A4207DFFB7}"=hex:76,30,0d,7b,ab,b2,a4,4c,9f,48,24,
   a4,20,7d,ff,b7,4f,42,3d,42,5d,25,4c,33,4c,46,3e,23,5a,48,5f,44,5d,39,52,58,\
"{91AB175C-D0E1-4391-A739-03D5D07A7505}"=hex:5c,17,ab,91,e1,d0,91,43,a7,39,03,
   d5,d0,7a,75,05,4e,3c,4e,40,54,25,50,42,5f,44,54,23,58,26,53,4b,50,39,50,55,\
"{11C09842-018D-4D79-A8FA-4B9BA6DD6A8C}"=hex:42,98,c0,11,8d,01,79,4d,a8,fa,4b,
   9b,a6,dd,6a,8c,31,4a,32,3e,49,25,4a,4f,4c,4d,59,23,38,57,44,56,56,39,57,4c,\
"{37BC45AB-38E3-4469-BF82-39158B83E3A3}"=hex:ab,45,bc,37,e3,38,69,44,bf,82,39,
   15,8b,83,e3,a3,5b,53,55,55,45,25,4c,39,4c,4a,4f,23,5b,5b,56,25,47,39,54,44,\
"{9419340D-43ED-46EE-9DD5-6D81600FFA6E}"=hex:0d,34,19,94,ed,43,ee,46,9d,d5,6d,
   81,60,0f,fa,6e,42,48,42,5f,40,25,4a,32,5f,46,3a,23,44,27,25,50,47,39,58,20,\
"{B8550CB4-F0C8-456B-8576-7FC70AA57CDF}"=hex:b4,0c,55,b8,c8,f0,6b,45,85,76,7f,
   c7,0a,a5,7c,df,55,4c,57,55,4c,25,53,38,41,5d,5a,23,44,23,24,59,42,39,23,53,\
"{CE32B99E-971D-4BED-BD22-370684C12F19}"=hex:9e,b9,32,ce,1d,97,ed,4b,bd,22,37,
   06,84,c1,2f,19,48,37,5f,53,57,25,4d,3f,4d,5c,4a,23,4b,53,5d,57,50,39,26,5d,\
"{12377A4C-3E98-45EF-9032-16B0717CF970}"=hex:4c,7a,37,12,98,3e,ef,45,90,32,16,
   b0,71,7c,f9,70,31,55,53,40,5e,25,30,4e,5d,5b,39,23,5b,52,24,42,59,39,53,51,\
"{3FA0A203-34BB-4C9E-B826-A03BBF2B3C97}"=hex:03,a2,a0,3f,bb,34,9e,4c,b8,26,a0,
   3b,bf,2b,3c,97,5b,5d,40,4b,44,25,58,33,3c,4e,5b,23,37,5c,27,26,56,39,58,25,\
"{0879BEA0-3C99-464F-B9B3-3575EA22A53E}"=hex:a0,be,79,08,99,3c,4f,46,b9,b3,35,
   75,ea,22,a5,3e,49,48,4d,40,34,25,3d,5e,3f,5f,4e,23,3b,43,47,58,59,39,40,55,\
"{4F585855-3A90-489F-B973-E360C74C5B0A}"=hex:55,58,58,4f,90,3a,9f,48,b9,73,e3,
   60,c7,4c,5b,0a,50,4f,56,40,53,25,43,4b,33,40,4a,23,39,48,49,26,5f,39,26,5b,\
"{D87BA9F8-EB63-4FA8-B2FC-9BACDA88B7E1}"=hex:f8,a9,7b,d8,63,eb,a8,4f,b2,fc,9b,
   ac,da,88,b7,e1,5b,46,54,48,31,25,53,50,47,5f,49,23,39,58,40,5f,56,39,4d,22,\
"{8F43CC12-03BA-497D-8AC0-3D81DD3AC5EF}"=hex:12,cc,43,8f,ba,03,7d,49,8a,c0,3d,
   81,dd,3a,c5,ef,4f,43,36,45,33,25,4f,53,5b,4f,5d,23,44,54,57,54,43,39,44,5c,\
"{36509D28-6C1F-490A-B46F-F88B32685910}"=hex:28,9d,50,36,1f,6c,0a,49,b4,6f,f8,
   8b,32,68,59,10,52,4f,50,50,46,25,3d,48,3f,38,5d,23,3c,53,50,24,59,39,56,52,\
"{746E3D8C-06AE-44E9-9D14-85F09D037FB3}"=hex:8c,3d,6e,74,ae,06,e9,44,9d,14,85,
   f0,9d,03,7f,b3,41,48,4b,4d,3e,25,45,5c,47,4d,58,23,47,57,28,43,24,39,5b,41,\
"{64E1C408-505D-445E-B834-0323D5557CC5}"=hex:08,c4,e1,64,5d,50,5e,44,b8,34,03,
   23,d5,55,7c,c5,46,53,49,51,31,25,41,3d,43,49,34,23,3d,5e,23,59,41,39,54,4f,\
"{DC6683BD-2F8A-42CE-A784-05E1A2AD8921}"=hex:bd,83,66,dc,8a,2f,ce,42,a7,84,05,
   e1,a2,ad,89,21,34,51,33,35,55,25,3e,4b,5d,54,5c,23,43,28,29,2b,5b,39,58,2f,\
"{97EB4186-4771-40D0-87CB-25B584E787F8}"=hex:86,41,eb,97,71,47,d0,40,87,cb,25,
   b5,84,e7,87,f8,40,51,36,53,41,25,3c,5d,33,5c,4a,23,3b,56,49,20,59,39,5e,25,\
"{D58EA0E2-FB1B-45A1-9D1D-090F3C1A88F3}"=hex:e2,a0,8e,d5,1b,fb,a1,45,9d,1d,09,
   0f,3c,1a,88,f3,31,3c,5f,40,51,25,51,5b,5b,5e,4b,23,57,22,5b,42,59,39,26,47,\
"{F11540C9-EA60-4096-BD95-2F50B4EA874B}"=hex:c9,40,15,f1,60,ea,96,40,bd,95,2f,
   50,b4,ea,87,4b,50,52,30,51,4b,25,4b,39,3c,41,4b,23,47,27,43,46,24,39,52,2e,\
"{F4087A74-1BC8-4035-ABD1-F0F064750D02}"=hex:74,7a,08,f4,c8,1b,35,40,ab,d1,f0,
   f0,64,75,0d,02,59,46,4e,33,46,25,4f,39,32,58,45,23,5d,51,5f,45,2b,39,4c,42,\
"{D96A526A-22E2-4452-B0E8-0DA1F3747AF5}"=hex:6a,52,6a,d9,e2,22,52,44,b0,e8,0d,
   a1,f3,74,7a,f5,52,3d,40,4d,41,25,48,3c,4c,5e,4f,23,3b,24,26,59,40,39,5f,2f,\
"{A0EA985C-B282-4E35-B45C-C3ECE46DC57E}"=hex:5c,98,ea,a0,82,b2,35,4e,b4,5c,c3,
   ec,e4,6d,c5,7e,52,4e,4d,51,4c,25,47,38,4d,4a,46,23,3b,25,50,26,47,39,53,4f,\
"{780CCBF0-3F69-414B-AEAE-3595938E5A70}"=hex:f0,cb,0c,78,69,3f,4b,41,ae,ae,35,
   95,93,8e,5a,70,55,53,57,52,5f,25,59,48,52,3e,40,23,39,29,56,4b,49,39,52,5a,\
"{EA918AC1-2E4C-4AAE-B4DA-971D5C97C4FF}"=hex:c1,8a,91,ea,4c,2e,ae,4a,b4,da,97,
   1d,5c,97,c4,ff,55,42,41,4b,44,25,4e,44,47,5b,4f,23,5b,22,5d,25,58,39,4c,42,\
"{2F6881FE-C449-427C-A9E6-7078FBF2D490}"=hex:fe,81,68,2f,49,c4,7c,42,a9,e6,70,
   78,fb,f2,d4,90,36,56,32,3e,40,25,43,46,3e,49,54,23,3b,58,52,48,46,39,44,23,\
"{5B73420A-B228-4569-9CAB-23239A05D666}"=hex:0a,42,73,5b,28,b2,69,45,9c,ab,23,
   23,9a,05,d6,66,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
"{3B3186E7-DEF7-4176-88BB-CF733E24D038}"=hex:e7,86,31,3b,f7,de,76,41,88,bb,cf,
   73,3e,24,d0,38,41,47,52,3e,5f,25,58,3f,3d,59,45,23,45,25,24,54,5f,39,4c,5e,\
"{5536A06C-E018-4C6C-BCA9-117480DB1B39}"=hex:6c,a0,36,55,18,e0,6c,4c,bc,a9,11,
   74,80,db,1b,39,4f,31,50,3e,57,25,4e,3e,3e,55,45,23,58,47,24,26,55,39,47,5d,\
"{8378C854-74F4-4BA0-B1AE-B6A270CF17A1}"=hex:54,c8,78,83,f4,74,a0,4b,b1,ae,b6,
   a2,70,cf,17,a1,40,31,56,3f,45,25,59,48,51,3f,3e,23,37,51,46,2a,27,39,51,24,\
"{FD8EFE08-7BFE-4956-9695-F4CA91048782}"=hex:08,fe,8e,fd,fe,7b,56,49,96,95,f4,
   ca,91,04,87,82,41,31,46,50,30,25,4e,38,3e,39,4e,23,4a,26,5d,40,56,39,51,21,\
"{E1695815-719F-4EA2-B1B4-3C27C4C25ABE}"=hex:15,58,69,e1,9f,71,a2,4e,b1,b4,3c,
   27,c4,c2,5a,be,45,40,4e,4a,4d,25,42,4b,5f,55,43,23,4a,48,5c,2a,58,39,43,45,\
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Metro\AppCompat]
@Denied: (A) (Everyone)
"{65B37A38-59FD-4FD7-BCF0-269C3895F418}"=hex:38,7a,b3,65,fd,59,d7,4f,bc,f0,26,
   9c,38,95,f4,18,3b,3d,36,51,55,25,5f,41,38,3f,49,23,41,58,59,41,5d,39,40,58,\
"{92040D32-A672-48E6-9141-F9FF6EC81BB8}"=hex:32,0d,04,92,72,a6,e6,48,91,41,f9,
   ff,6e,c8,1b,b8,56,54,33,52,42,25,4b,5d,53,5b,46,23,45,5e,49,2a,52,39,59,40,\
"{6906DA54-8766-47C7-80C4-A120C57EA37A}"=hex:54,da,06,69,66,87,c7,47,80,c4,a1,
   20,c5,7e,a3,7a,4d,51,50,33,41,25,3c,5e,3e,49,45,23,5d,40,55,5e,56,39,2d,2f,\
"{B13CC3C4-FF42-4DA7-8DCD-C9D06677C761}"=hex:c4,c3,3c,b1,42,ff,a7,4d,8d,cd,c9,
   d0,66,77,c7,61,44,4e,4d,51,5e,25,5e,33,47,59,46,23,56,43,24,53,4b,39,58,2f,\
"{92FAA829-3A53-43C2-BBD6-736B7B149B48}"=hex:29,a8,fa,92,53,3a,c2,43,bb,d6,73,
   6b,7b,14,9b,48,52,57,5c,30,41,25,42,5a,53,3e,58,23,49,5d,40,57,4a,39,4c,2f,\
"{90DB4BDC-DDC8-422A-B565-1F53ADA13191}"=hex:dc,4b,db,90,c8,dd,2a,42,b5,65,1f,
   53,ad,a1,31,91,49,50,51,4c,51,25,31,52,4f,4d,4f,23,39,48,5a,50,43,39,47,42,\
"{A9A328D0-B470-4A1F-AD30-C5C16BD46FB5}"=hex:d0,28,a3,a9,70,b4,1f,4a,ad,30,c5,
   c1,6b,d4,6f,b5,55,46,46,5c,3f,25,3f,47,53,59,3f,23,59,4a,47,45,20,39,26,41,\
"{8E63DE8B-E136-4FD1-97BF-2A2B5D28E82C}"=hex:8b,de,63,8e,36,e1,d1,4f,97,bf,2a,
   2b,5d,28,e8,2c,50,40,55,4b,55,25,41,5d,5d,44,59,23,3b,41,56,42,5e,39,46,51,\
"{FD009ACE-592E-451F-8F3C-0746241D1941}"=hex:ce,9a,00,fd,2e,59,1f,45,8f,3c,07,
   46,24,1d,19,41,5b,31,46,32,45,25,48,33,48,5f,39,23,43,46,5b,5c,46,39,56,5b,\
"{83655CAC-B7C0-4CAF-B057-6BE15D2A9B61}"=hex:ac,5c,65,83,c0,b7,af,4c,b0,57,6b,
   e1,5d,2a,9b,61,48,33,40,54,3f,25,50,40,5a,40,35,23,3b,25,5c,5f,2b,39,4f,45,\
"{EE891EF8-08DA-4645-8A01-23A9BC8A68B2}"=hex:f8,1e,89,ee,da,08,45,46,8a,01,23,
   a9,bc,8a,68,b2,4b,57,43,33,53,25,5c,4d,38,58,3f,23,58,5d,40,59,25,39,59,45,\
"{55ECDCDB-FCFE-42A0-A51F-621756D1A480}"=hex:db,dc,ec,55,fe,fc,a0,42,a5,1f,62,
   17,56,d1,a4,80,3b,3c,3d,52,41,25,50,4c,45,40,58,23,5b,5d,42,25,50,39,57,43,\
"{7B0D3076-B2AB-4CA4-9F48-24A4207DFFB7}"=hex:76,30,0d,7b,ab,b2,a4,4c,9f,48,24,
   a4,20,7d,ff,b7,4f,42,3d,42,5d,25,4c,33,4c,46,3e,23,5a,48,5f,44,5d,39,52,58,\
"{91AB175C-D0E1-4391-A739-03D5D07A7505}"=hex:5c,17,ab,91,e1,d0,91,43,a7,39,03,
   d5,d0,7a,75,05,4e,3c,4e,40,54,25,50,42,5f,44,54,23,58,26,53,4b,50,39,50,55,\
"{11C09842-018D-4D79-A8FA-4B9BA6DD6A8C}"=hex:42,98,c0,11,8d,01,79,4d,a8,fa,4b,
   9b,a6,dd,6a,8c,31,4a,32,3e,49,25,4a,4f,4c,4d,59,23,38,57,44,56,56,39,57,4c,\
"{37BC45AB-38E3-4469-BF82-39158B83E3A3}"=hex:ab,45,bc,37,e3,38,69,44,bf,82,39,
   15,8b,83,e3,a3,5b,53,55,55,45,25,4c,39,4c,4a,4f,23,5b,5b,56,25,47,39,54,44,\
"{9419340D-43ED-46EE-9DD5-6D81600FFA6E}"=hex:0d,34,19,94,ed,43,ee,46,9d,d5,6d,
   81,60,0f,fa,6e,42,48,42,5f,40,25,4a,32,5f,46,3a,23,44,27,25,50,47,39,58,20,\
"{B8550CB4-F0C8-456B-8576-7FC70AA57CDF}"=hex:b4,0c,55,b8,c8,f0,6b,45,85,76,7f,
   c7,0a,a5,7c,df,55,4c,57,55,4c,25,53,38,41,5d,5a,23,44,23,24,59,42,39,23,53,\
"{CE32B99E-971D-4BED-BD22-370684C12F19}"=hex:9e,b9,32,ce,1d,97,ed,4b,bd,22,37,
   06,84,c1,2f,19,48,37,5f,53,57,25,4d,3f,4d,5c,4a,23,4b,53,5d,57,50,39,26,5d,\
"{12377A4C-3E98-45EF-9032-16B0717CF970}"=hex:4c,7a,37,12,98,3e,ef,45,90,32,16,
   b0,71,7c,f9,70,31,55,53,40,5e,25,30,4e,5d,5b,39,23,5b,52,24,42,59,39,53,51,\
"{3FA0A203-34BB-4C9E-B826-A03BBF2B3C97}"=hex:03,a2,a0,3f,bb,34,9e,4c,b8,26,a0,
   3b,bf,2b,3c,97,5b,5d,40,4b,44,25,58,33,3c,4e,5b,23,37,5c,27,26,56,39,58,25,\
"{0879BEA0-3C99-464F-B9B3-3575EA22A53E}"=hex:a0,be,79,08,99,3c,4f,46,b9,b3,35,
   75,ea,22,a5,3e,49,48,4d,40,34,25,3d,5e,3f,5f,4e,23,3b,43,47,58,59,39,40,55,\
"{4F585855-3A90-489F-B973-E360C74C5B0A}"=hex:55,58,58,4f,90,3a,9f,48,b9,73,e3,
   60,c7,4c,5b,0a,50,4f,56,40,53,25,43,4b,33,40,4a,23,39,48,49,26,5f,39,26,5b,\
"{D87BA9F8-EB63-4FA8-B2FC-9BACDA88B7E1}"=hex:f8,a9,7b,d8,63,eb,a8,4f,b2,fc,9b,
   ac,da,88,b7,e1,5b,46,54,48,31,25,53,50,47,5f,49,23,39,58,40,5f,56,39,4d,22,\
"{8F43CC12-03BA-497D-8AC0-3D81DD3AC5EF}"=hex:12,cc,43,8f,ba,03,7d,49,8a,c0,3d,
   81,dd,3a,c5,ef,4f,43,36,45,33,25,4f,53,5b,4f,5d,23,44,54,57,54,43,39,44,5c,\
"{36509D28-6C1F-490A-B46F-F88B32685910}"=hex:28,9d,50,36,1f,6c,0a,49,b4,6f,f8,
   8b,32,68,59,10,52,4f,50,50,46,25,3d,48,3f,38,5d,23,3c,53,50,24,59,39,56,52,\
"{746E3D8C-06AE-44E9-9D14-85F09D037FB3}"=hex:8c,3d,6e,74,ae,06,e9,44,9d,14,85,
   f0,9d,03,7f,b3,41,48,4b,4d,3e,25,45,5c,47,4d,58,23,47,57,28,43,24,39,5b,41,\
"{64E1C408-505D-445E-B834-0323D5557CC5}"=hex:08,c4,e1,64,5d,50,5e,44,b8,34,03,
   23,d5,55,7c,c5,46,53,49,51,31,25,41,3d,43,49,34,23,3d,5e,23,59,41,39,54,4f,\
"{DC6683BD-2F8A-42CE-A784-05E1A2AD8921}"=hex:bd,83,66,dc,8a,2f,ce,42,a7,84,05,
   e1,a2,ad,89,21,34,51,33,35,55,25,3e,4b,5d,54,5c,23,43,28,29,2b,5b,39,58,2f,\
"{97EB4186-4771-40D0-87CB-25B584E787F8}"=hex:86,41,eb,97,71,47,d0,40,87,cb,25,
   b5,84,e7,87,f8,40,51,36,53,41,25,3c,5d,33,5c,4a,23,3b,56,49,20,59,39,5e,25,\
"{D58EA0E2-FB1B-45A1-9D1D-090F3C1A88F3}"=hex:e2,a0,8e,d5,1b,fb,a1,45,9d,1d,09,
   0f,3c,1a,88,f3,31,3c,5f,40,51,25,51,5b,5b,5e,4b,23,57,22,5b,42,59,39,26,47,\
"{F11540C9-EA60-4096-BD95-2F50B4EA874B}"=hex:c9,40,15,f1,60,ea,96,40,bd,95,2f,
   50,b4,ea,87,4b,50,52,30,51,4b,25,4b,39,3c,41,4b,23,47,27,43,46,24,39,52,2e,\
"{F4087A74-1BC8-4035-ABD1-F0F064750D02}"=hex:74,7a,08,f4,c8,1b,35,40,ab,d1,f0,
   f0,64,75,0d,02,59,46,4e,33,46,25,4f,39,32,58,45,23,5d,51,5f,45,2b,39,4c,42,\
"{D96A526A-22E2-4452-B0E8-0DA1F3747AF5}"=hex:6a,52,6a,d9,e2,22,52,44,b0,e8,0d,
   a1,f3,74,7a,f5,52,3d,40,4d,41,25,48,3c,4c,5e,4f,23,3b,24,26,59,40,39,5f,2f,\
"{A0EA985C-B282-4E35-B45C-C3ECE46DC57E}"=hex:5c,98,ea,a0,82,b2,35,4e,b4,5c,c3,
   ec,e4,6d,c5,7e,52,4e,4d,51,4c,25,47,38,4d,4a,46,23,3b,25,50,26,47,39,53,4f,\
"{780CCBF0-3F69-414B-AEAE-3595938E5A70}"=hex:f0,cb,0c,78,69,3f,4b,41,ae,ae,35,
   95,93,8e,5a,70,55,53,57,52,5f,25,59,48,52,3e,40,23,39,29,56,4b,49,39,52,5a,\
"{EA918AC1-2E4C-4AAE-B4DA-971D5C97C4FF}"=hex:c1,8a,91,ea,4c,2e,ae,4a,b4,da,97,
   1d,5c,97,c4,ff,55,42,41,4b,44,25,4e,44,47,5b,4f,23,5b,22,5d,25,58,39,4c,42,\
"{2F6881FE-C449-427C-A9E6-7078FBF2D490}"=hex:fe,81,68,2f,49,c4,7c,42,a9,e6,70,
   78,fb,f2,d4,90,36,56,32,3e,40,25,43,46,3e,49,54,23,3b,58,52,48,46,39,44,23,\
"{5B73420A-B228-4569-9CAB-23239A05D666}"=hex:0a,42,73,5b,28,b2,69,45,9c,ab,23,
   23,9a,05,d6,66,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
"{3B3186E7-DEF7-4176-88BB-CF733E24D038}"=hex:e7,86,31,3b,f7,de,76,41,88,bb,cf,
   73,3e,24,d0,38,41,47,52,3e,5f,25,58,3f,3d,59,45,23,45,25,24,54,5f,39,4c,5e,\
"{5536A06C-E018-4C6C-BCA9-117480DB1B39}"=hex:6c,a0,36,55,18,e0,6c,4c,bc,a9,11,
   74,80,db,1b,39,4f,31,50,3e,57,25,4e,3e,3e,55,45,23,58,47,24,26,55,39,47,5d,\
"{8378C854-74F4-4BA0-B1AE-B6A270CF17A1}"=hex:54,c8,78,83,f4,74,a0,4b,b1,ae,b6,
   a2,70,cf,17,a1,40,31,56,3f,45,25,59,48,51,3f,3e,23,37,51,46,2a,27,39,51,24,\
"{FD8EFE08-7BFE-4956-9695-F4CA91048782}"=hex:08,fe,8e,fd,fe,7b,56,49,96,95,f4,
   ca,91,04,87,82,41,31,46,50,30,25,4e,38,3e,39,4e,23,4a,26,5d,40,56,39,51,21,\
"{E1695815-719F-4EA2-B1B4-3C27C4C25ABE}"=hex:15,58,69,e1,9f,71,a2,4e,b1,b4,3c,
   27,c4,c2,5a,be,45,40,4e,4a,4d,25,42,4b,5f,55,43,23,4a,48,5c,2a,58,39,43,45,\
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\DlgInfo]
@Denied: (A) (Everyone)
"{65B37A38-59FD-4FD7-BCF0-269C3895F418}"=hex:38,7a,b3,65,fd,59,d7,4f,bc,f0,26,
   9c,38,95,f4,18,3b,3d,36,51,55,25,5f,41,38,3f,49,23,41,58,59,41,5d,39,40,58,\
"{92040D32-A672-48E6-9141-F9FF6EC81BB8}"=hex:32,0d,04,92,72,a6,e6,48,91,41,f9,
   ff,6e,c8,1b,b8,56,54,33,52,42,25,4b,5d,53,5b,46,23,45,5e,49,2a,52,39,59,40,\
"{6906DA54-8766-47C7-80C4-A120C57EA37A}"=hex:54,da,06,69,66,87,c7,47,80,c4,a1,
   20,c5,7e,a3,7a,4d,51,50,33,41,25,3c,5e,3e,49,45,23,5d,40,55,5e,56,39,2d,2f,\
"{B13CC3C4-FF42-4DA7-8DCD-C9D06677C761}"=hex:c4,c3,3c,b1,42,ff,a7,4d,8d,cd,c9,
   d0,66,77,c7,61,44,4e,4d,51,5e,25,5e,33,47,59,46,23,56,43,24,53,4b,39,58,2f,\
"{92FAA829-3A53-43C2-BBD6-736B7B149B48}"=hex:29,a8,fa,92,53,3a,c2,43,bb,d6,73,
   6b,7b,14,9b,48,52,57,5c,30,41,25,42,5a,53,3e,58,23,49,5d,40,57,4a,39,4c,2f,\
"{90DB4BDC-DDC8-422A-B565-1F53ADA13191}"=hex:dc,4b,db,90,c8,dd,2a,42,b5,65,1f,
   53,ad,a1,31,91,49,50,51,4c,51,25,31,52,4f,4d,4f,23,39,48,5a,50,43,39,47,42,\
"{A9A328D0-B470-4A1F-AD30-C5C16BD46FB5}"=hex:d0,28,a3,a9,70,b4,1f,4a,ad,30,c5,
   c1,6b,d4,6f,b5,55,46,46,5c,3f,25,3f,47,53,59,3f,23,59,4a,47,45,20,39,26,41,\
"{8E63DE8B-E136-4FD1-97BF-2A2B5D28E82C}"=hex:8b,de,63,8e,36,e1,d1,4f,97,bf,2a,
   2b,5d,28,e8,2c,50,40,55,4b,55,25,41,5d,5d,44,59,23,3b,41,56,42,5e,39,46,51,\
"{FD009ACE-592E-451F-8F3C-0746241D1941}"=hex:ce,9a,00,fd,2e,59,1f,45,8f,3c,07,
   46,24,1d,19,41,5b,31,46,32,45,25,48,33,48,5f,39,23,43,46,5b,5c,46,39,56,5b,\
"{83655CAC-B7C0-4CAF-B057-6BE15D2A9B61}"=hex:ac,5c,65,83,c0,b7,af,4c,b0,57,6b,
   e1,5d,2a,9b,61,48,33,40,54,3f,25,50,40,5a,40,35,23,3b,25,5c,5f,2b,39,4f,45,\
"{EE891EF8-08DA-4645-8A01-23A9BC8A68B2}"=hex:f8,1e,89,ee,da,08,45,46,8a,01,23,
   a9,bc,8a,68,b2,4b,57,43,33,53,25,5c,4d,38,58,3f,23,58,5d,40,59,25,39,59,45,\
"{55ECDCDB-FCFE-42A0-A51F-621756D1A480}"=hex:db,dc,ec,55,fe,fc,a0,42,a5,1f,62,
   17,56,d1,a4,80,3b,3c,3d,52,41,25,50,4c,45,40,58,23,5b,5d,42,25,50,39,57,43,\
"{7B0D3076-B2AB-4CA4-9F48-24A4207DFFB7}"=hex:76,30,0d,7b,ab,b2,a4,4c,9f,48,24,
   a4,20,7d,ff,b7,4f,42,3d,42,5d,25,4c,33,4c,46,3e,23,5a,48,5f,44,5d,39,52,58,\
"{91AB175C-D0E1-4391-A739-03D5D07A7505}"=hex:5c,17,ab,91,e1,d0,91,43,a7,39,03,
   d5,d0,7a,75,05,4e,3c,4e,40,54,25,50,42,5f,44,54,23,58,26,53,4b,50,39,50,55,\
"{11C09842-018D-4D79-A8FA-4B9BA6DD6A8C}"=hex:42,98,c0,11,8d,01,79,4d,a8,fa,4b,
   9b,a6,dd,6a,8c,31,4a,32,3e,49,25,4a,4f,4c,4d,59,23,38,57,44,56,56,39,57,4c,\
"{37BC45AB-38E3-4469-BF82-39158B83E3A3}"=hex:ab,45,bc,37,e3,38,69,44,bf,82,39,
   15,8b,83,e3,a3,5b,53,55,55,45,25,4c,39,4c,4a,4f,23,5b,5b,56,25,47,39,54,44,\
"{9419340D-43ED-46EE-9DD5-6D81600FFA6E}"=hex:0d,34,19,94,ed,43,ee,46,9d,d5,6d,
   81,60,0f,fa,6e,42,48,42,5f,40,25,4a,32,5f,46,3a,23,44,27,25,50,47,39,58,20,\
"{B8550CB4-F0C8-456B-8576-7FC70AA57CDF}"=hex:b4,0c,55,b8,c8,f0,6b,45,85,76,7f,
   c7,0a,a5,7c,df,55,4c,57,55,4c,25,53,38,41,5d,5a,23,44,23,24,59,42,39,23,53,\
"{CE32B99E-971D-4BED-BD22-370684C12F19}"=hex:9e,b9,32,ce,1d,97,ed,4b,bd,22,37,
   06,84,c1,2f,19,48,37,5f,53,57,25,4d,3f,4d,5c,4a,23,4b,53,5d,57,50,39,26,5d,\
"{12377A4C-3E98-45EF-9032-16B0717CF970}"=hex:4c,7a,37,12,98,3e,ef,45,90,32,16,
   b0,71,7c,f9,70,31,55,53,40,5e,25,30,4e,5d,5b,39,23,5b,52,24,42,59,39,53,51,\
"{3FA0A203-34BB-4C9E-B826-A03BBF2B3C97}"=hex:03,a2,a0,3f,bb,34,9e,4c,b8,26,a0,
   3b,bf,2b,3c,97,5b,5d,40,4b,44,25,58,33,3c,4e,5b,23,37,5c,27,26,56,39,58,25,\
"{0879BEA0-3C99-464F-B9B3-3575EA22A53E}"=hex:a0,be,79,08,99,3c,4f,46,b9,b3,35,
   75,ea,22,a5,3e,49,48,4d,40,34,25,3d,5e,3f,5f,4e,23,3b,43,47,58,59,39,40,55,\
"{4F585855-3A90-489F-B973-E360C74C5B0A}"=hex:55,58,58,4f,90,3a,9f,48,b9,73,e3,
   60,c7,4c,5b,0a,50,4f,56,40,53,25,43,4b,33,40,4a,23,39,48,49,26,5f,39,26,5b,\
"{D87BA9F8-EB63-4FA8-B2FC-9BACDA88B7E1}"=hex:f8,a9,7b,d8,63,eb,a8,4f,b2,fc,9b,
   ac,da,88,b7,e1,5b,46,54,48,31,25,53,50,47,5f,49,23,39,58,40,5f,56,39,4d,22,\
"{8F43CC12-03BA-497D-8AC0-3D81DD3AC5EF}"=hex:12,cc,43,8f,ba,03,7d,49,8a,c0,3d,
   81,dd,3a,c5,ef,4f,43,36,45,33,25,4f,53,5b,4f,5d,23,44,54,57,54,43,39,44,5c,\
"{36509D28-6C1F-490A-B46F-F88B32685910}"=hex:28,9d,50,36,1f,6c,0a,49,b4,6f,f8,
   8b,32,68,59,10,52,4f,50,50,46,25,3d,48,3f,38,5d,23,3c,53,50,24,59,39,56,52,\
"{746E3D8C-06AE-44E9-9D14-85F09D037FB3}"=hex:8c,3d,6e,74,ae,06,e9,44,9d,14,85,
   f0,9d,03,7f,b3,41,48,4b,4d,3e,25,45,5c,47,4d,58,23,47,57,28,43,24,39,5b,41,\
"{64E1C408-505D-445E-B834-0323D5557CC5}"=hex:08,c4,e1,64,5d,50,5e,44,b8,34,03,
   23,d5,55,7c,c5,46,53,49,51,31,25,41,3d,43,49,34,23,3d,5e,23,59,41,39,54,4f,\
"{DC6683BD-2F8A-42CE-A784-05E1A2AD8921}"=hex:bd,83,66,dc,8a,2f,ce,42,a7,84,05,
   e1,a2,ad,89,21,34,51,33,35,55,25,3e,4b,5d,54,5c,23,43,28,29,2b,5b,39,58,2f,\
"{97EB4186-4771-40D0-87CB-25B584E787F8}"=hex:86,41,eb,97,71,47,d0,40,87,cb,25,
   b5,84,e7,87,f8,40,51,36,53,41,25,3c,5d,33,5c,4a,23,3b,56,49,20,59,39,5e,25,\
"{D58EA0E2-FB1B-45A1-9D1D-090F3C1A88F3}"=hex:e2,a0,8e,d5,1b,fb,a1,45,9d,1d,09,
   0f,3c,1a,88,f3,31,3c,5f,40,51,25,51,5b,5b,5e,4b,23,57,22,5b,42,59,39,26,47,\
"{F11540C9-EA60-4096-BD95-2F50B4EA874B}"=hex:c9,40,15,f1,60,ea,96,40,bd,95,2f,
   50,b4,ea,87,4b,50,52,30,51,4b,25,4b,39,3c,41,4b,23,47,27,43,46,24,39,52,2e,\
"{F4087A74-1BC8-4035-ABD1-F0F064750D02}"=hex:74,7a,08,f4,c8,1b,35,40,ab,d1,f0,
   f0,64,75,0d,02,59,46,4e,33,46,25,4f,39,32,58,45,23,5d,51,5f,45,2b,39,4c,42,\
"{D96A526A-22E2-4452-B0E8-0DA1F3747AF5}"=hex:6a,52,6a,d9,e2,22,52,44,b0,e8,0d,
   a1,f3,74,7a,f5,52,3d,40,4d,41,25,48,3c,4c,5e,4f,23,3b,24,26,59,40,39,5f,2f,\
"{A0EA985C-B282-4E35-B45C-C3ECE46DC57E}"=hex:5c,98,ea,a0,82,b2,35,4e,b4,5c,c3,
   ec,e4,6d,c5,7e,52,4e,4d,51,4c,25,47,38,4d,4a,46,23,3b,25,50,26,47,39,53,4f,\
"{780CCBF0-3F69-414B-AEAE-3595938E5A70}"=hex:f0,cb,0c,78,69,3f,4b,41,ae,ae,35,
   95,93,8e,5a,70,55,53,57,52,5f,25,59,48,52,3e,40,23,39,29,56,4b,49,39,52,5a,\
"{EA918AC1-2E4C-4AAE-B4DA-971D5C97C4FF}"=hex:c1,8a,91,ea,4c,2e,ae,4a,b4,da,97,
   1d,5c,97,c4,ff,55,42,41,4b,44,25,4e,44,47,5b,4f,23,5b,22,5d,25,58,39,4c,42,\
"{2F6881FE-C449-427C-A9E6-7078FBF2D490}"=hex:fe,81,68,2f,49,c4,7c,42,a9,e6,70,
   78,fb,f2,d4,90,36,56,32,3e,40,25,43,46,3e,49,54,23,3b,58,52,48,46,39,44,23,\
"{5B73420A-B228-4569-9CAB-23239A05D666}"=hex:0a,42,73,5b,28,b2,69,45,9c,ab,23,
   23,9a,05,d6,66,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
"{3B3186E7-DEF7-4176-88BB-CF733E24D038}"=hex:e7,86,31,3b,f7,de,76,41,88,bb,cf,
   73,3e,24,d0,38,41,47,52,3e,5f,25,58,3f,3d,59,45,23,45,25,24,54,5f,39,4c,5e,\
"{5536A06C-E018-4C6C-BCA9-117480DB1B39}"=hex:6c,a0,36,55,18,e0,6c,4c,bc,a9,11,
   74,80,db,1b,39,4f,31,50,3e,57,25,4e,3e,3e,55,45,23,58,47,24,26,55,39,47,5d,\
"{8378C854-74F4-4BA0-B1AE-B6A270CF17A1}"=hex:54,c8,78,83,f4,74,a0,4b,b1,ae,b6,
   a2,70,cf,17,a1,40,31,56,3f,45,25,59,48,51,3f,3e,23,37,51,46,2a,27,39,51,24,\
"{FD8EFE08-7BFE-4956-9695-F4CA91048782}"=hex:08,fe,8e,fd,fe,7b,56,49,96,95,f4,
   ca,91,04,87,82,41,31,46,50,30,25,4e,38,3e,39,4e,23,4a,26,5d,40,56,39,51,21,\
"{E1695815-719F-4EA2-B1B4-3C27C4C25ABE}"=hex:15,58,69,e1,9f,71,a2,4e,b1,b4,3c,
   27,c4,c2,5a,be,45,40,4e,4a,4d,25,42,4b,5f,55,43,23,4a,48,5c,2a,58,39,43,45,\
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\GVZCN-QNGBE]
@Denied: (A) (Everyone)
"{65B37A38-59FD-4FD7-BCF0-269C3895F418}"=hex:38,7a,b3,65,fd,59,d7,4f,bc,f0,26,
   9c,38,95,f4,18,3b,3d,36,51,55,25,5f,41,38,3f,49,23,41,58,59,41,5d,39,40,58,\
"{92040D32-A672-48E6-9141-F9FF6EC81BB8}"=hex:32,0d,04,92,72,a6,e6,48,91,41,f9,
   ff,6e,c8,1b,b8,56,54,33,52,42,25,4b,5d,53,5b,46,23,45,5e,49,2a,52,39,59,40,\
"{6906DA54-8766-47C7-80C4-A120C57EA37A}"=hex:54,da,06,69,66,87,c7,47,80,c4,a1,
   20,c5,7e,a3,7a,4d,51,50,33,41,25,3c,5e,3e,49,45,23,5d,40,55,5e,56,39,2d,2f,\
"{B13CC3C4-FF42-4DA7-8DCD-C9D06677C761}"=hex:c4,c3,3c,b1,42,ff,a7,4d,8d,cd,c9,
   d0,66,77,c7,61,44,4e,4d,51,5e,25,5e,33,47,59,46,23,56,43,24,53,4b,39,58,2f,\
"{92FAA829-3A53-43C2-BBD6-736B7B149B48}"=hex:29,a8,fa,92,53,3a,c2,43,bb,d6,73,
   6b,7b,14,9b,48,52,57,5c,30,41,25,42,5a,53,3e,58,23,49,5d,40,57,4a,39,4c,2f,\
"{90DB4BDC-DDC8-422A-B565-1F53ADA13191}"=hex:dc,4b,db,90,c8,dd,2a,42,b5,65,1f,
   53,ad,a1,31,91,49,50,51,4c,51,25,31,52,4f,4d,4f,23,39,48,5a,50,43,39,47,42,\
"{A9A328D0-B470-4A1F-AD30-C5C16BD46FB5}"=hex:d0,28,a3,a9,70,b4,1f,4a,ad,30,c5,
   c1,6b,d4,6f,b5,55,46,46,5c,3f,25,3f,47,53,59,3f,23,59,4a,47,45,20,39,26,41,\
"{8E63DE8B-E136-4FD1-97BF-2A2B5D28E82C}"=hex:8b,de,63,8e,36,e1,d1,4f,97,bf,2a,
   2b,5d,28,e8,2c,50,40,55,4b,55,25,41,5d,5d,44,59,23,3b,41,56,42,5e,39,46,51,\
"{FD009ACE-592E-451F-8F3C-0746241D1941}"=hex:ce,9a,00,fd,2e,59,1f,45,8f,3c,07,
   46,24,1d,19,41,5b,31,46,32,45,25,48,33,48,5f,39,23,43,46,5b,5c,46,39,56,5b,\
"{83655CAC-B7C0-4CAF-B057-6BE15D2A9B61}"=hex:ac,5c,65,83,c0,b7,af,4c,b0,57,6b,
   e1,5d,2a,9b,61,48,33,40,54,3f,25,50,40,5a,40,35,23,3b,25,5c,5f,2b,39,4f,45,\
"{EE891EF8-08DA-4645-8A01-23A9BC8A68B2}"=hex:f8,1e,89,ee,da,08,45,46,8a,01,23,
   a9,bc,8a,68,b2,4b,57,43,33,53,25,5c,4d,38,58,3f,23,58,5d,40,59,25,39,59,45,\
"{55ECDCDB-FCFE-42A0-A51F-621756D1A480}"=hex:db,dc,ec,55,fe,fc,a0,42,a5,1f,62,
   17,56,d1,a4,80,3b,3c,3d,52,41,25,50,4c,45,40,58,23,5b,5d,42,25,50,39,57,43,\
"{7B0D3076-B2AB-4CA4-9F48-24A4207DFFB7}"=hex:76,30,0d,7b,ab,b2,a4,4c,9f,48,24,
   a4,20,7d,ff,b7,4f,42,3d,42,5d,25,4c,33,4c,46,3e,23,5a,48,5f,44,5d,39,52,58,\
"{91AB175C-D0E1-4391-A739-03D5D07A7505}"=hex:5c,17,ab,91,e1,d0,91,43,a7,39,03,
   d5,d0,7a,75,05,4e,3c,4e,40,54,25,50,42,5f,44,54,23,58,26,53,4b,50,39,50,55,\
"{11C09842-018D-4D79-A8FA-4B9BA6DD6A8C}"=hex:42,98,c0,11,8d,01,79,4d,a8,fa,4b,
   9b,a6,dd,6a,8c,31,4a,32,3e,49,25,4a,4f,4c,4d,59,23,38,57,44,56,56,39,57,4c,\
"{37BC45AB-38E3-4469-BF82-39158B83E3A3}"=hex:ab,45,bc,37,e3,38,69,44,bf,82,39,
   15,8b,83,e3,a3,5b,53,55,55,45,25,4c,39,4c,4a,4f,23,5b,5b,56,25,47,39,54,44,\
"{9419340D-43ED-46EE-9DD5-6D81600FFA6E}"=hex:0d,34,19,94,ed,43,ee,46,9d,d5,6d,
   81,60,0f,fa,6e,42,48,42,5f,40,25,4a,32,5f,46,3a,23,44,27,25,50,47,39,58,20,\
"{B8550CB4-F0C8-456B-8576-7FC70AA57CDF}"=hex:b4,0c,55,b8,c8,f0,6b,45,85,76,7f,
   c7,0a,a5,7c,df,55,4c,57,55,4c,25,53,38,41,5d,5a,23,44,23,24,59,42,39,23,53,\
"{CE32B99E-971D-4BED-BD22-370684C12F19}"=hex:9e,b9,32,ce,1d,97,ed,4b,bd,22,37,
   06,84,c1,2f,19,48,37,5f,53,57,25,4d,3f,4d,5c,4a,23,4b,53,5d,57,50,39,26,5d,\
"{12377A4C-3E98-45EF-9032-16B0717CF970}"=hex:4c,7a,37,12,98,3e,ef,45,90,32,16,
   b0,71,7c,f9,70,31,55,53,40,5e,25,30,4e,5d,5b,39,23,5b,52,24,42,59,39,53,51,\
"{3FA0A203-34BB-4C9E-B826-A03BBF2B3C97}"=hex:03,a2,a0,3f,bb,34,9e,4c,b8,26,a0,
   3b,bf,2b,3c,97,5b,5d,40,4b,44,25,58,33,3c,4e,5b,23,37,5c,27,26,56,39,58,25,\
"{0879BEA0-3C99-464F-B9B3-3575EA22A53E}"=hex:a0,be,79,08,99,3c,4f,46,b9,b3,35,
   75,ea,22,a5,3e,49,48,4d,40,34,25,3d,5e,3f,5f,4e,23,3b,43,47,58,59,39,40,55,\
"{4F585855-3A90-489F-B973-E360C74C5B0A}"=hex:55,58,58,4f,90,3a,9f,48,b9,73,e3,
   60,c7,4c,5b,0a,50,4f,56,40,53,25,43,4b,33,40,4a,23,39,48,49,26,5f,39,26,5b,\
"{D87BA9F8-EB63-4FA8-B2FC-9BACDA88B7E1}"=hex:f8,a9,7b,d8,63,eb,a8,4f,b2,fc,9b,
   ac,da,88,b7,e1,5b,46,54,48,31,25,53,50,47,5f,49,23,39,58,40,5f,56,39,4d,22,\
"{8F43CC12-03BA-497D-8AC0-3D81DD3AC5EF}"=hex:12,cc,43,8f,ba,03,7d,49,8a,c0,3d,
   81,dd,3a,c5,ef,4f,43,36,45,33,25,4f,53,5b,4f,5d,23,44,54,57,54,43,39,44,5c,\
"{36509D28-6C1F-490A-B46F-F88B32685910}"=hex:28,9d,50,36,1f,6c,0a,49,b4,6f,f8,
   8b,32,68,59,10,52,4f,50,50,46,25,3d,48,3f,38,5d,23,3c,53,50,24,59,39,56,52,\
"{746E3D8C-06AE-44E9-9D14-85F09D037FB3}"=hex:8c,3d,6e,74,ae,06,e9,44,9d,14,85,
   f0,9d,03,7f,b3,41,48,4b,4d,3e,25,45,5c,47,4d,58,23,47,57,28,43,24,39,5b,41,\
"{64E1C408-505D-445E-B834-0323D5557CC5}"=hex:08,c4,e1,64,5d,50,5e,44,b8,34,03,
   23,d5,55,7c,c5,46,53,49,51,31,25,41,3d,43,49,34,23,3d,5e,23,59,41,39,54,4f,\
"{DC6683BD-2F8A-42CE-A784-05E1A2AD8921}"=hex:bd,83,66,dc,8a,2f,ce,42,a7,84,05,
   e1,a2,ad,89,21,34,51,33,35,55,25,3e,4b,5d,54,5c,23,43,28,29,2b,5b,39,58,2f,\
"{97EB4186-4771-40D0-87CB-25B584E787F8}"=hex:86,41,eb,97,71,47,d0,40,87,cb,25,
   b5,84,e7,87,f8,40,51,36,53,41,25,3c,5d,33,5c,4a,23,3b,56,49,20,59,39,5e,25,\
"{D58EA0E2-FB1B-45A1-9D1D-090F3C1A88F3}"=hex:e2,a0,8e,d5,1b,fb,a1,45,9d,1d,09,
   0f,3c,1a,88,f3,31,3c,5f,40,51,25,51,5b,5b,5e,4b,23,57,22,5b,42,59,39,26,47,\
"{F11540C9-EA60-4096-BD95-2F50B4EA874B}"=hex:c9,40,15,f1,60,ea,96,40,bd,95,2f,
   50,b4,ea,87,4b,50,52,30,51,4b,25,4b,39,3c,41,4b,23,47,27,43,46,24,39,52,2e,\
"{F4087A74-1BC8-4035-ABD1-F0F064750D02}"=hex:74,7a,08,f4,c8,1b,35,40,ab,d1,f0,
   f0,64,75,0d,02,59,46,4e,33,46,25,4f,39,32,58,45,23,5d,51,5f,45,2b,39,4c,42,\
"{D96A526A-22E2-4452-B0E8-0DA1F3747AF5}"=hex:6a,52,6a,d9,e2,22,52,44,b0,e8,0d,
   a1,f3,74,7a,f5,52,3d,40,4d,41,25,48,3c,4c,5e,4f,23,3b,24,26,59,40,39,5f,2f,\
"{A0EA985C-B282-4E35-B45C-C3ECE46DC57E}"=hex:5c,98,ea,a0,82,b2,35,4e,b4,5c,c3,
   ec,e4,6d,c5,7e,52,4e,4d,51,4c,25,47,38,4d,4a,46,23,3b,25,50,26,47,39,53,4f,\
"{780CCBF0-3F69-414B-AEAE-3595938E5A70}"=hex:f0,cb,0c,78,69,3f,4b,41,ae,ae,35,
   95,93,8e,5a,70,55,53,57,52,5f,25,59,48,52,3e,40,23,39,29,56,4b,49,39,52,5a,\
"{EA918AC1-2E4C-4AAE-B4DA-971D5C97C4FF}"=hex:c1,8a,91,ea,4c,2e,ae,4a,b4,da,97,
   1d,5c,97,c4,ff,55,42,41,4b,44,25,4e,44,47,5b,4f,23,5b,22,5d,25,58,39,4c,42,\
"{2F6881FE-C449-427C-A9E6-7078FBF2D490}"=hex:fe,81,68,2f,49,c4,7c,42,a9,e6,70,
   78,fb,f2,d4,90,36,56,32,3e,40,25,43,46,3e,49,54,23,3b,58,52,48,46,39,44,23,\
"{5B73420A-B228-4569-9CAB-23239A05D666}"=hex:0a,42,73,5b,28,b2,69,45,9c,ab,23,
   23,9a,05,d6,66,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
"{3B3186E7-DEF7-4176-88BB-CF733E24D038}"=hex:e7,86,31,3b,f7,de,76,41,88,bb,cf,
   73,3e,24,d0,38,41,47,52,3e,5f,25,58,3f,3d,59,45,23,45,25,24,54,5f,39,4c,5e,\
"{5536A06C-E018-4C6C-BCA9-117480DB1B39}"=hex:6c,a0,36,55,18,e0,6c,4c,bc,a9,11,
   74,80,db,1b,39,4f,31,50,3e,57,25,4e,3e,3e,55,45,23,58,47,24,26,55,39,47,5d,\
"{8378C854-74F4-4BA0-B1AE-B6A270CF17A1}"=hex:54,c8,78,83,f4,74,a0,4b,b1,ae,b6,
   a2,70,cf,17,a1,40,31,56,3f,45,25,59,48,51,3f,3e,23,37,51,46,2a,27,39,51,24,\
"{FD8EFE08-7BFE-4956-9695-F4CA91048782}"=hex:08,fe,8e,fd,fe,7b,56,49,96,95,f4,
   ca,91,04,87,82,41,31,46,50,30,25,4e,38,3e,39,4e,23,4a,26,5d,40,56,39,51,21,\
"{E1695815-719F-4EA2-B1B4-3C27C4C25ABE}"=hex:15,58,69,e1,9f,71,a2,4e,b1,b4,3c,
   27,c4,c2,5a,be,45,40,4e,4a,4d,25,42,4b,5f,55,43,23,4a,48,5c,2a,58,39,43,45,\
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Disallowed]
@Denied: (A) (Everyone)
"{65B37A38-59FD-4FD7-BCF0-269C3895F418}"=hex:38,7a,b3,65,fd,59,d7,4f,bc,f0,26,
   9c,38,95,f4,18,3b,3d,36,51,55,25,5f,41,38,3f,49,23,41,58,59,41,5d,39,40,58,\
"{92040D32-A672-48E6-9141-F9FF6EC81BB8}"=hex:32,0d,04,92,72,a6,e6,48,91,41,f9,
   ff,6e,c8,1b,b8,56,54,33,52,42,25,4b,5d,53,5b,46,23,45,5e,49,2a,52,39,59,40,\
"{6906DA54-8766-47C7-80C4-A120C57EA37A}"=hex:54,da,06,69,66,87,c7,47,80,c4,a1,
   20,c5,7e,a3,7a,4d,51,50,33,41,25,3c,5e,3e,49,45,23,5d,40,55,5e,56,39,2d,2f,\
"{B13CC3C4-FF42-4DA7-8DCD-C9D06677C761}"=hex:c4,c3,3c,b1,42,ff,a7,4d,8d,cd,c9,
   d0,66,77,c7,61,44,4e,4d,51,5e,25,5e,33,47,59,46,23,56,43,24,53,4b,39,58,2f,\
"{92FAA829-3A53-43C2-BBD6-736B7B149B48}"=hex:29,a8,fa,92,53,3a,c2,43,bb,d6,73,
   6b,7b,14,9b,48,52,57,5c,30,41,25,42,5a,53,3e,58,23,49,5d,40,57,4a,39,4c,2f,\
"{90DB4BDC-DDC8-422A-B565-1F53ADA13191}"=hex:dc,4b,db,90,c8,dd,2a,42,b5,65,1f,
   53,ad,a1,31,91,49,50,51,4c,51,25,31,52,4f,4d,4f,23,39,48,5a,50,43,39,47,42,\
"{A9A328D0-B470-4A1F-AD30-C5C16BD46FB5}"=hex:d0,28,a3,a9,70,b4,1f,4a,ad,30,c5,
   c1,6b,d4,6f,b5,55,46,46,5c,3f,25,3f,47,53,59,3f,23,59,4a,47,45,20,39,26,41,\
"{8E63DE8B-E136-4FD1-97BF-2A2B5D28E82C}"=hex:8b,de,63,8e,36,e1,d1,4f,97,bf,2a,
   2b,5d,28,e8,2c,50,40,55,4b,55,25,41,5d,5d,44,59,23,3b,41,56,42,5e,39,46,51,\
"{FD009ACE-592E-451F-8F3C-0746241D1941}"=hex:ce,9a,00,fd,2e,59,1f,45,8f,3c,07,
   46,24,1d,19,41,5b,31,46,32,45,25,48,33,48,5f,39,23,43,46,5b,5c,46,39,56,5b,\
"{83655CAC-B7C0-4CAF-B057-6BE15D2A9B61}"=hex:ac,5c,65,83,c0,b7,af,4c,b0,57,6b,
   e1,5d,2a,9b,61,48,33,40,54,3f,25,50,40,5a,40,35,23,3b,25,5c,5f,2b,39,4f,45,\
"{EE891EF8-08DA-4645-8A01-23A9BC8A68B2}"=hex:f8,1e,89,ee,da,08,45,46,8a,01,23,
   a9,bc,8a,68,b2,4b,57,43,33,53,25,5c,4d,38,58,3f,23,58,5d,40,59,25,39,59,45,\
"{55ECDCDB-FCFE-42A0-A51F-621756D1A480}"=hex:db,dc,ec,55,fe,fc,a0,42,a5,1f,62,
   17,56,d1,a4,80,3b,3c,3d,52,41,25,50,4c,45,40,58,23,5b,5d,42,25,50,39,57,43,\
"{7B0D3076-B2AB-4CA4-9F48-24A4207DFFB7}"=hex:76,30,0d,7b,ab,b2,a4,4c,9f,48,24,
   a4,20,7d,ff,b7,4f,42,3d,42,5d,25,4c,33,4c,46,3e,23,5a,48,5f,44,5d,39,52,58,\
"{91AB175C-D0E1-4391-A739-03D5D07A7505}"=hex:5c,17,ab,91,e1,d0,91,43,a7,39,03,
   d5,d0,7a,75,05,4e,3c,4e,40,54,25,50,42,5f,44,54,23,58,26,53,4b,50,39,50,55,\
"{11C09842-018D-4D79-A8FA-4B9BA6DD6A8C}"=hex:42,98,c0,11,8d,01,79,4d,a8,fa,4b,
   9b,a6,dd,6a,8c,31,4a,32,3e,49,25,4a,4f,4c,4d,59,23,38,57,44,56,56,39,57,4c,\
"{37BC45AB-38E3-4469-BF82-39158B83E3A3}"=hex:ab,45,bc,37,e3,38,69,44,bf,82,39,
   15,8b,83,e3,a3,5b,53,55,55,45,25,4c,39,4c,4a,4f,23,5b,5b,56,25,47,39,54,44,\
"{9419340D-43ED-46EE-9DD5-6D81600FFA6E}"=hex:0d,34,19,94,ed,43,ee,46,9d,d5,6d,
   81,60,0f,fa,6e,42,48,42,5f,40,25,4a,32,5f,46,3a,23,44,27,25,50,47,39,58,20,\
"{B8550CB4-F0C8-456B-8576-7FC70AA57CDF}"=hex:b4,0c,55,b8,c8,f0,6b,45,85,76,7f,
   c7,0a,a5,7c,df,55,4c,57,55,4c,25,53,38,41,5d,5a,23,44,23,24,59,42,39,23,53,\
"{CE32B99E-971D-4BED-BD22-370684C12F19}"=hex:9e,b9,32,ce,1d,97,ed,4b,bd,22,37,
   06,84,c1,2f,19,48,37,5f,53,57,25,4d,3f,4d,5c,4a,23,4b,53,5d,57,50,39,26,5d,\
"{12377A4C-3E98-45EF-9032-16B0717CF970}"=hex:4c,7a,37,12,98,3e,ef,45,90,32,16,
   b0,71,7c,f9,70,31,55,53,40,5e,25,30,4e,5d,5b,39,23,5b,52,24,42,59,39,53,51,\
"{3FA0A203-34BB-4C9E-B826-A03BBF2B3C97}"=hex:03,a2,a0,3f,bb,34,9e,4c,b8,26,a0,
   3b,bf,2b,3c,97,5b,5d,40,4b,44,25,58,33,3c,4e,5b,23,37,5c,27,26,56,39,58,25,\
"{0879BEA0-3C99-464F-B9B3-3575EA22A53E}"=hex:a0,be,79,08,99,3c,4f,46,b9,b3,35,
   75,ea,22,a5,3e,49,48,4d,40,34,25,3d,5e,3f,5f,4e,23,3b,43,47,58,59,39,40,55,\
"{4F585855-3A90-489F-B973-E360C74C5B0A}"=hex:55,58,58,4f,90,3a,9f,48,b9,73,e3,
   60,c7,4c,5b,0a,50,4f,56,40,53,25,43,4b,33,40,4a,23,39,48,49,26,5f,39,26,5b,\
"{D87BA9F8-EB63-4FA8-B2FC-9BACDA88B7E1}"=hex:f8,a9,7b,d8,63,eb,a8,4f,b2,fc,9b,
   ac,da,88,b7,e1,5b,46,54,48,31,25,53,50,47,5f,49,23,39,58,40,5f,56,39,4d,22,\
"{8F43CC12-03BA-497D-8AC0-3D81DD3AC5EF}"=hex:12,cc,43,8f,ba,03,7d,49,8a,c0,3d,
   81,dd,3a,c5,ef,4f,43,36,45,33,25,4f,53,5b,4f,5d,23,44,54,57,54,43,39,44,5c,\
"{36509D28-6C1F-490A-B46F-F88B32685910}"=hex:28,9d,50,36,1f,6c,0a,49,b4,6f,f8,
   8b,32,68,59,10,52,4f,50,50,46,25,3d,48,3f,38,5d,23,3c,53,50,24,59,39,56,52,\
"{746E3D8C-06AE-44E9-9D14-85F09D037FB3}"=hex:8c,3d,6e,74,ae,06,e9,44,9d,14,85,
   f0,9d,03,7f,b3,41,48,4b,4d,3e,25,45,5c,47,4d,58,23,47,57,28,43,24,39,5b,41,\
"{64E1C408-505D-445E-B834-0323D5557CC5}"=hex:08,c4,e1,64,5d,50,5e,44,b8,34,03,
   23,d5,55,7c,c5,46,53,49,51,31,25,41,3d,43,49,34,23,3d,5e,23,59,41,39,54,4f,\
"{DC6683BD-2F8A-42CE-A784-05E1A2AD8921}"=hex:bd,83,66,dc,8a,2f,ce,42,a7,84,05,
   e1,a2,ad,89,21,34,51,33,35,55,25,3e,4b,5d,54,5c,23,43,28,29,2b,5b,39,58,2f,\
"{97EB4186-4771-40D0-87CB-25B584E787F8}"=hex:86,41,eb,97,71,47,d0,40,87,cb,25,
   b5,84,e7,87,f8,40,51,36,53,41,25,3c,5d,33,5c,4a,23,3b,56,49,20,59,39,5e,25,\
"{D58EA0E2-FB1B-45A1-9D1D-090F3C1A88F3}"=hex:e2,a0,8e,d5,1b,fb,a1,45,9d,1d,09,
   0f,3c,1a,88,f3,31,3c,5f,40,51,25,51,5b,5b,5e,4b,23,57,22,5b,42,59,39,26,47,\
"{F11540C9-EA60-4096-BD95-2F50B4EA874B}"=hex:c9,40,15,f1,60,ea,96,40,bd,95,2f,
   50,b4,ea,87,4b,50,52,30,51,4b,25,4b,39,3c,41,4b,23,47,27,43,46,24,39,52,2e,\
"{F4087A74-1BC8-4035-ABD1-F0F064750D02}"=hex:74,7a,08,f4,c8,1b,35,40,ab,d1,f0,
   f0,64,75,0d,02,59,46,4e,33,46,25,4f,39,32,58,45,23,5d,51,5f,45,2b,39,4c,42,\
"{D96A526A-22E2-4452-B0E8-0DA1F3747AF5}"=hex:6a,52,6a,d9,e2,22,52,44,b0,e8,0d,
   a1,f3,74,7a,f5,52,3d,40,4d,41,25,48,3c,4c,5e,4f,23,3b,24,26,59,40,39,5f,2f,\
"{A0EA985C-B282-4E35-B45C-C3ECE46DC57E}"=hex:5c,98,ea,a0,82,b2,35,4e,b4,5c,c3,
   ec,e4,6d,c5,7e,52,4e,4d,51,4c,25,47,38,4d,4a,46,23,3b,25,50,26,47,39,53,4f,\
"{780CCBF0-3F69-414B-AEAE-3595938E5A70}"=hex:f0,cb,0c,78,69,3f,4b,41,ae,ae,35,
   95,93,8e,5a,70,55,53,57,52,5f,25,59,48,52,3e,40,23,39,29,56,4b,49,39,52,5a,\
"{EA918AC1-2E4C-4AAE-B4DA-971D5C97C4FF}"=hex:c1,8a,91,ea,4c,2e,ae,4a,b4,da,97,
   1d,5c,97,c4,ff,55,42,41,4b,44,25,4e,44,47,5b,4f,23,5b,22,5d,25,58,39,4c,42,\
"{2F6881FE-C449-427C-A9E6-7078FBF2D490}"=hex:fe,81,68,2f,49,c4,7c,42,a9,e6,70,
   78,fb,f2,d4,90,36,56,32,3e,40,25,43,46,3e,49,54,23,3b,58,52,48,46,39,44,23,\
"{5B73420A-B228-4569-9CAB-23239A05D666}"=hex:0a,42,73,5b,28,b2,69,45,9c,ab,23,
   23,9a,05,d6,66,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
"{3B3186E7-DEF7-4176-88BB-CF733E24D038}"=hex:e7,86,31,3b,f7,de,76,41,88,bb,cf,
   73,3e,24,d0,38,41,47,52,3e,5f,25,58,3f,3d,59,45,23,45,25,24,54,5f,39,4c,5e,\
"{5536A06C-E018-4C6C-BCA9-117480DB1B39}"=hex:6c,a0,36,55,18,e0,6c,4c,bc,a9,11,
   74,80,db,1b,39,4f,31,50,3e,57,25,4e,3e,3e,55,45,23,58,47,24,26,55,39,47,5d,\
"{8378C854-74F4-4BA0-B1AE-B6A270CF17A1}"=hex:54,c8,78,83,f4,74,a0,4b,b1,ae,b6,
   a2,70,cf,17,a1,40,31,56,3f,45,25,59,48,51,3f,3e,23,37,51,46,2a,27,39,51,24,\
"{FD8EFE08-7BFE-4956-9695-F4CA91048782}"=hex:08,fe,8e,fd,fe,7b,56,49,96,95,f4,
   ca,91,04,87,82,41,31,46,50,30,25,4e,38,3e,39,4e,23,4a,26,5d,40,56,39,51,21,\
"{E1695815-719F-4EA2-B1B4-3C27C4C25ABE}"=hex:15,58,69,e1,9f,71,a2,4e,b1,b4,3c,
   27,c4,c2,5a,be,45,40,4e,4a,4d,25,42,4b,5f,55,43,23,4a,48,5c,2a,58,39,43,45,\
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Handlers]
@Denied: (A) (Everyone)
"{65B37A38-59FD-4FD7-BCF0-269C3895F418}"=hex:38,7a,b3,65,fd,59,d7,4f,bc,f0,26,
   9c,38,95,f4,18,3b,3d,36,51,55,25,5f,41,38,3f,49,23,41,58,59,41,5d,39,40,58,\
"{92040D32-A672-48E6-9141-F9FF6EC81BB8}"=hex:32,0d,04,92,72,a6,e6,48,91,41,f9,
   ff,6e,c8,1b,b8,56,54,33,52,42,25,4b,5d,53,5b,46,23,45,5e,49,2a,52,39,59,40,\
"{6906DA54-8766-47C7-80C4-A120C57EA37A}"=hex:54,da,06,69,66,87,c7,47,80,c4,a1,
   20,c5,7e,a3,7a,4d,51,50,33,41,25,3c,5e,3e,49,45,23,5d,40,55,5e,56,39,2d,2f,\
"{B13CC3C4-FF42-4DA7-8DCD-C9D06677C761}"=hex:c4,c3,3c,b1,42,ff,a7,4d,8d,cd,c9,
   d0,66,77,c7,61,44,4e,4d,51,5e,25,5e,33,47,59,46,23,56,43,24,53,4b,39,58,2f,\
"{92FAA829-3A53-43C2-BBD6-736B7B149B48}"=hex:29,a8,fa,92,53,3a,c2,43,bb,d6,73,
   6b,7b,14,9b,48,52,57,5c,30,41,25,42,5a,53,3e,58,23,49,5d,40,57,4a,39,4c,2f,\
"{90DB4BDC-DDC8-422A-B565-1F53ADA13191}"=hex:dc,4b,db,90,c8,dd,2a,42,b5,65,1f,
   53,ad,a1,31,91,49,50,51,4c,51,25,31,52,4f,4d,4f,23,39,48,5a,50,43,39,47,42,\
"{A9A328D0-B470-4A1F-AD30-C5C16BD46FB5}"=hex:d0,28,a3,a9,70,b4,1f,4a,ad,30,c5,
   c1,6b,d4,6f,b5,55,46,46,5c,3f,25,3f,47,53,59,3f,23,59,4a,47,45,20,39,26,41,\
"{8E63DE8B-E136-4FD1-97BF-2A2B5D28E82C}"=hex:8b,de,63,8e,36,e1,d1,4f,97,bf,2a,
   2b,5d,28,e8,2c,50,40,55,4b,55,25,41,5d,5d,44,59,23,3b,41,56,42,5e,39,46,51,\
"{FD009ACE-592E-451F-8F3C-0746241D1941}"=hex:ce,9a,00,fd,2e,59,1f,45,8f,3c,07,
   46,24,1d,19,41,5b,31,46,32,45,25,48,33,48,5f,39,23,43,46,5b,5c,46,39,56,5b,\
"{83655CAC-B7C0-4CAF-B057-6BE15D2A9B61}"=hex:ac,5c,65,83,c0,b7,af,4c,b0,57,6b,
   e1,5d,2a,9b,61,48,33,40,54,3f,25,50,40,5a,40,35,23,3b,25,5c,5f,2b,39,4f,45,\
"{EE891EF8-08DA-4645-8A01-23A9BC8A68B2}"=hex:f8,1e,89,ee,da,08,45,46,8a,01,23,
   a9,bc,8a,68,b2,4b,57,43,33,53,25,5c,4d,38,58,3f,23,58,5d,40,59,25,39,59,45,\
"{55ECDCDB-FCFE-42A0-A51F-621756D1A480}"=hex:db,dc,ec,55,fe,fc,a0,42,a5,1f,62,
   17,56,d1,a4,80,3b,3c,3d,52,41,25,50,4c,45,40,58,23,5b,5d,42,25,50,39,57,43,\
"{7B0D3076-B2AB-4CA4-9F48-24A4207DFFB7}"=hex:76,30,0d,7b,ab,b2,a4,4c,9f,48,24,
   a4,20,7d,ff,b7,4f,42,3d,42,5d,25,4c,33,4c,46,3e,23,5a,48,5f,44,5d,39,52,58,\
"{91AB175C-D0E1-4391-A739-03D5D07A7505}"=hex:5c,17,ab,91,e1,d0,91,43,a7,39,03,
   d5,d0,7a,75,05,4e,3c,4e,40,54,25,50,42,5f,44,54,23,58,26,53,4b,50,39,50,55,\
"{11C09842-018D-4D79-A8FA-4B9BA6DD6A8C}"=hex:42,98,c0,11,8d,01,79,4d,a8,fa,4b,
   9b,a6,dd,6a,8c,31,4a,32,3e,49,25,4a,4f,4c,4d,59,23,38,57,44,56,56,39,57,4c,\
"{37BC45AB-38E3-4469-BF82-39158B83E3A3}"=hex:ab,45,bc,37,e3,38,69,44,bf,82,39,
   15,8b,83,e3,a3,5b,53,55,55,45,25,4c,39,4c,4a,4f,23,5b,5b,56,25,47,39,54,44,\
"{9419340D-43ED-46EE-9DD5-6D81600FFA6E}"=hex:0d,34,19,94,ed,43,ee,46,9d,d5,6d,
   81,60,0f,fa,6e,42,48,42,5f,40,25,4a,32,5f,46,3a,23,44,27,25,50,47,39,58,20,\
"{B8550CB4-F0C8-456B-8576-7FC70AA57CDF}"=hex:b4,0c,55,b8,c8,f0,6b,45,85,76,7f,
   c7,0a,a5,7c,df,55,4c,57,55,4c,25,53,38,41,5d,5a,23,44,23,24,59,42,39,23,53,\
"{CE32B99E-971D-4BED-BD22-370684C12F19}"=hex:9e,b9,32,ce,1d,97,ed,4b,bd,22,37,
   06,84,c1,2f,19,48,37,5f,53,57,25,4d,3f,4d,5c,4a,23,4b,53,5d,57,50,39,26,5d,\
"{12377A4C-3E98-45EF-9032-16B0717CF970}"=hex:4c,7a,37,12,98,3e,ef,45,90,32,16,
   b0,71,7c,f9,70,31,55,53,40,5e,25,30,4e,5d,5b,39,23,5b,52,24,42,59,39,53,51,\
"{3FA0A203-34BB-4C9E-B826-A03BBF2B3C97}"=hex:03,a2,a0,3f,bb,34,9e,4c,b8,26,a0,
   3b,bf,2b,3c,97,5b,5d,40,4b,44,25,58,33,3c,4e,5b,23,37,5c,27,26,56,39,58,25,\
"{0879BEA0-3C99-464F-B9B3-3575EA22A53E}"=hex:a0,be,79,08,99,3c,4f,46,b9,b3,35,
   75,ea,22,a5,3e,49,48,4d,40,34,25,3d,5e,3f,5f,4e,23,3b,43,47,58,59,39,40,55,\
"{4F585855-3A90-489F-B973-E360C74C5B0A}"=hex:55,58,58,4f,90,3a,9f,48,b9,73,e3,
   60,c7,4c,5b,0a,50,4f,56,40,53,25,43,4b,33,40,4a,23,39,48,49,26,5f,39,26,5b,\
"{D87BA9F8-EB63-4FA8-B2FC-9BACDA88B7E1}"=hex:f8,a9,7b,d8,63,eb,a8,4f,b2,fc,9b,
   ac,da,88,b7,e1,5b,46,54,48,31,25,53,50,47,5f,49,23,39,58,40,5f,56,39,4d,22,\
"{8F43CC12-03BA-497D-8AC0-3D81DD3AC5EF}"=hex:12,cc,43,8f,ba,03,7d,49,8a,c0,3d,
   81,dd,3a,c5,ef,4f,43,36,45,33,25,4f,53,5b,4f,5d,23,44,54,57,54,43,39,44,5c,\
"{36509D28-6C1F-490A-B46F-F88B32685910}"=hex:28,9d,50,36,1f,6c,0a,49,b4,6f,f8,
   8b,32,68,59,10,52,4f,50,50,46,25,3d,48,3f,38,5d,23,3c,53,50,24,59,39,56,52,\
"{746E3D8C-06AE-44E9-9D14-85F09D037FB3}"=hex:8c,3d,6e,74,ae,06,e9,44,9d,14,85,
   f0,9d,03,7f,b3,41,48,4b,4d,3e,25,45,5c,47,4d,58,23,47,57,28,43,24,39,5b,41,\
"{64E1C408-505D-445E-B834-0323D5557CC5}"=hex:08,c4,e1,64,5d,50,5e,44,b8,34,03,
   23,d5,55,7c,c5,46,53,49,51,31,25,41,3d,43,49,34,23,3d,5e,23,59,41,39,54,4f,\
"{DC6683BD-2F8A-42CE-A784-05E1A2AD8921}"=hex:bd,83,66,dc,8a,2f,ce,42,a7,84,05,
   e1,a2,ad,89,21,34,51,33,35,55,25,3e,4b,5d,54,5c,23,43,28,29,2b,5b,39,58,2f,\
"{97EB4186-4771-40D0-87CB-25B584E787F8}"=hex:86,41,eb,97,71,47,d0,40,87,cb,25,
   b5,84,e7,87,f8,40,51,36,53,41,25,3c,5d,33,5c,4a,23,3b,56,49,20,59,39,5e,25,\
"{D58EA0E2-FB1B-45A1-9D1D-090F3C1A88F3}"=hex:e2,a0,8e,d5,1b,fb,a1,45,9d,1d,09,
   0f,3c,1a,88,f3,31,3c,5f,40,51,25,51,5b,5b,5e,4b,23,57,22,5b,42,59,39,26,47,\
"{F11540C9-EA60-4096-BD95-2F50B4EA874B}"=hex:c9,40,15,f1,60,ea,96,40,bd,95,2f,
   50,b4,ea,87,4b,50,52,30,51,4b,25,4b,39,3c,41,4b,23,47,27,43,46,24,39,52,2e,\
"{F4087A74-1BC8-4035-ABD1-F0F064750D02}"=hex:74,7a,08,f4,c8,1b,35,40,ab,d1,f0,
   f0,64,75,0d,02,59,46,4e,33,46,25,4f,39,32,58,45,23,5d,51,5f,45,2b,39,4c,42,\
"{D96A526A-22E2-4452-B0E8-0DA1F3747AF5}"=hex:6a,52,6a,d9,e2,22,52,44,b0,e8,0d,
   a1,f3,74,7a,f5,52,3d,40,4d,41,25,48,3c,4c,5e,4f,23,3b,24,26,59,40,39,5f,2f,\
"{A0EA985C-B282-4E35-B45C-C3ECE46DC57E}"=hex:5c,98,ea,a0,82,b2,35,4e,b4,5c,c3,
   ec,e4,6d,c5,7e,52,4e,4d,51,4c,25,47,38,4d,4a,46,23,3b,25,50,26,47,39,53,4f,\
"{780CCBF0-3F69-414B-AEAE-3595938E5A70}"=hex:f0,cb,0c,78,69,3f,4b,41,ae,ae,35,
   95,93,8e,5a,70,55,53,57,52,5f,25,59,48,52,3e,40,23,39,29,56,4b,49,39,52,5a,\
"{EA918AC1-2E4C-4AAE-B4DA-971D5C97C4FF}"=hex:c1,8a,91,ea,4c,2e,ae,4a,b4,da,97,
   1d,5c,97,c4,ff,55,42,41,4b,44,25,4e,44,47,5b,4f,23,5b,22,5d,25,58,39,4c,42,\
"{2F6881FE-C449-427C-A9E6-7078FBF2D490}"=hex:fe,81,68,2f,49,c4,7c,42,a9,e6,70,
   78,fb,f2,d4,90,36,56,32,3e,40,25,43,46,3e,49,54,23,3b,58,52,48,46,39,44,23,\
"{5B73420A-B228-4569-9CAB-23239A05D666}"=hex:0a,42,73,5b,28,b2,69,45,9c,ab,23,
   23,9a,05,d6,66,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
"{3B3186E7-DEF7-4176-88BB-CF733E24D038}"=hex:e7,86,31,3b,f7,de,76,41,88,bb,cf,
   73,3e,24,d0,38,41,47,52,3e,5f,25,58,3f,3d,59,45,23,45,25,24,54,5f,39,4c,5e,\
"{5536A06C-E018-4C6C-BCA9-117480DB1B39}"=hex:6c,a0,36,55,18,e0,6c,4c,bc,a9,11,
   74,80,db,1b,39,4f,31,50,3e,57,25,4e,3e,3e,55,45,23,58,47,24,26,55,39,47,5d,\
"{8378C854-74F4-4BA0-B1AE-B6A270CF17A1}"=hex:54,c8,78,83,f4,74,a0,4b,b1,ae,b6,
   a2,70,cf,17,a1,40,31,56,3f,45,25,59,48,51,3f,3e,23,37,51,46,2a,27,39,51,24,\
"{FD8EFE08-7BFE-4956-9695-F4CA91048782}"=hex:08,fe,8e,fd,fe,7b,56,49,96,95,f4,
   ca,91,04,87,82,41,31,46,50,30,25,4e,38,3e,39,4e,23,4a,26,5d,40,56,39,51,21,\
"{E1695815-719F-4EA2-B1B4-3C27C4C25ABE}"=hex:15,58,69,e1,9f,71,a2,4e,b1,b4,3c,
   27,c4,c2,5a,be,45,40,4e,4a,4d,25,42,4b,5f,55,43,23,4a,48,5c,2a,58,39,43,45,\
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\SecuROM\License information*]
"datasecu"=hex:41,8e,dd,a8,68,18,e0,ad,34,22,a5,2f,bc,02,d5,6a,87,be,7a,7d,b2,
   fe,b8,d7,3e,63,4f,24,e7,70,1b,65,0a,db,cf,65,87,af,fe,a2,8a,d1,07,94,d0,77,\
"rkeysecu"=hex:27,14,5d,c0,8d,38,37,a6,c5,13,56,73,1c,14,84,9f
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Andra processer som körs ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.2\loggingserver.exe
c:\program files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
.
**************************************************************************
.
Sluttid: 2013-11-18  18:23:20 - datorn startades om.
ComboFix-quarantined-files.txt  2013-11-18 17:23
.
Före genomsökningen: 247 302 352 896 byte ledigt
Efter genomsökningen: 247 368 527 872 byte ledigt
.
- - End Of File - - 5D038CCF50C32B0ED711826393C13BBD
 



#7 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:11:56 AM

Posted 18 November 2013 - 02:47 PM

There are still signs of adware in the log, please run the following:

 

Please download Junkware Removal Tool to your desktop.

  • Shutdown your antivirus to avoid any conflicts.

  • Right-mouse click JRT.exe and select Run as administrator

  • The tool will open and start scanning your system.

  • Please be patient as this can take a while to complete.

  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

  • Post the contents of JRT.txt into your next message

 

NEXT

 

Download AdwCleaner from  here and save it to your desktop.

  • Run AdwCleaner and select Scan

  • If items are found, please select the Clean button

  • Once done it will ask to reboot, allow the reboot

  • On reboot a log will be produced, please attach the content of the log to your next reply


Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#8 TimL

TimL
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:56 PM

Posted 19 November 2013 - 03:38 AM

My ADWCleaner text:

 

# AdwCleaner v3.012 - Report created 19/11/2013 at 09:31:04
# Updated 11/11/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Tim - TIM-DATOR
# Running from : C:\Users\Tim\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\ProgramData\AVG Security Toolbar
Folder Deleted : C:\ProgramData\NCH Software
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\Uniblue\DriverScanner
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eSupport.com
Folder Deleted : C:\Program Files (x86)\1ClickDownload
Folder Deleted : C:\Program Files (x86)\AVG Secure Search
Folder Deleted : C:\Program Files (x86)\eSupport.com
Folder Deleted : C:\Program Files (x86)\GadgetBox
Folder Deleted : C:\Program Files (x86)\NCH Software
Folder Deleted : C:\Program Files (x86)\Toolbar Cleaner
Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Deleted : C:\Program Files\Babylon
Folder Deleted : C:\Program Files\Windows Sidebar\Shared Gadgets\gadgetbox.gadget
Folder Deleted : C:\Users\Tim\AppData\Local\AVG Secure Search
Folder Deleted : C:\Users\Tim\AppData\Local\AVG Security Toolbar
Folder Deleted : C:\Users\Tim\AppData\Local\eSupport.com
Folder Deleted : C:\Users\Tim\AppData\Local\PutLockerDownloader
Folder Deleted : C:\Users\Tim\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Tim\AppData\LocalLow\AVG Security Toolbar
Folder Deleted : C:\Users\Tim\AppData\Roaming\NCH Software
Folder Deleted : C:\Users\Gäst\AppData\Local\AVG Security Toolbar
Folder Deleted : C:\Users\Gäst\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\Gäst\AppData\LocalLow\MyWebSearch
Folder Deleted : C:\Users\Gäst\AppData\LocalLow\Toolbar4
Folder Deleted : C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\f28gjs0z.default\adawaretb
Folder Deleted : C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\i1p3xebi.default-1365779578448\adawaretb
Folder Deleted : C:\Users\Gäst\AppData\Roaming\Mozilla\Firefox\Profiles\8avg1oa4.default\adawaretb
Folder Deleted : C:\Users\Gäst\AppData\Roaming\Mozilla\Firefox\Profiles\8avg1oa4.default\Extensions\m3ffxtbr@mywebsearch.com
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\f28gjs0z.default\bProtector_extensions.rdf
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\adawaretb.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
File Deleted : C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\f28gjs0z.default\searchplugins\conduit-search.xml
File Deleted : C:\Windows\System32\Tasks\GinyasBrowserCompanion Chrome Watcher
File Deleted : C:\Windows\System32\Tasks\GinyasBrowserCompanion FireFox Watcher
File Deleted : C:\Windows\System32\Tasks\GinyasBrowserCompanion Runner
File Deleted : C:\Windows\System32\Tasks\GinyasBrowserCompanion Stats Report
File Deleted : C:\Windows\System32\Tasks\GinyasBrowserCompanion Update Checker
File Deleted : C:\Windows\System32\Tasks\YourFile Update

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bbffdhejhaoiflnpooogkckfdcmmjppn
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\nbmafkdmkkckhggblphicnnhlgljnoje
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll
Key Deleted : HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
Key Deleted : HKLM\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin
Key Deleted : HKLM\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows Media\Wmsdk\Sources [F3PopularScreenSavers]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform [FunWebProducts]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\post platform [FunWebProducts]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKCU\Software\a2d6dae134e848
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1E0DE227-5CE4-4EA3-AB0C-8B03E1AA76BC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{67FA02C4-AB30-4E77-A640-78EE8EC8673B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7473D292-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7473D294-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7473D296-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{819FFE22-35C7-4925-8CDA-4E0E2DB94302}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A4730EBE-43A6-443E-9776-36915D323AD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9571378-68A1-443D-B082-284F960C6D17}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{120927BF-1700-43BC-810F-FAB92549B390}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F52A5FA-A705-4415-B975-88503B291728}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{819FFE21-35C7-4925-8CDA-4E0E2DB94302}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{991AAC62-B100-47CE-8B75-253965244F69}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DB507187-9746-458C-97DA-C458131EEDE7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{819FFE20-35C7-4925-8CDA-4E0E2DB94302}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48DD-9B6D-7A13A3E42127}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40FD-8DAE-FF14757F60C7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{6C97A91E-4524-4019-86AF-2AA2D567BF5C}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{6C97A91E-4524-4019-86AF-2AA2D567BF5C}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{01947140-417F-46B6-8751-A3A2B8345E1A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{819FFE21-35C7-4925-8CDA-4E0E2DB94302}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8E9CF769-3D3B-40EB-9E2D-76E7A205E4D2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DB507187-9746-458C-97DA-C458131EEDE7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\NCH Software
Key Deleted : HKCU\Software\AppDataLow\Software\adawaretb
Key Deleted : HKCU\Software\AppDataLow\Software\AVG Security Toolbar
Key Deleted : HKLM\Software\adawaretb
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\Software\AVG Security Toolbar
Key Deleted : HKLM\Software\FocusInteractive
Key Deleted : HKLM\Software\Fun Web Products
Key Deleted : HKLM\Software\NCH Software
Key Deleted : HKLM\Software\Toolbar Cleaner
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\Software\Vittalia
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\adawaretb
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OptimizerPro

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.7601.17514


-\\ Mozilla Firefox v25.0.1 (sv-SE)

[ File : C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\f28gjs0z.default\prefs.js ]

Line Deleted : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\FireFoxExt\\17.1.2.1");
Line Deleted : user_pref("avg.userPreferences.URLBarFocus.whiteList", "bing\\.com|google\\.\\w+|yahoo\\.\\w+|gmail\\.\\w+|hotmail\\.\\w+|live\\.\\w+|isearch\\.avg\\.com|mysearch\\.avg\\.com");
Line Deleted : user_pref("dom.ipc.plugins.enabled.npmywebs.dll", false);
Line Deleted : user_pref("extensions.enabledItems", "{71cbe26c-c56d-4a3b-b3c2-444cbc5c5b3d}:1.0,{BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0,{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:4.6,{75656794-AB59-4712-BFBC-5D816D56[...]
Line Deleted : user_pref("extensions.helperbar.Country", "Sweden");
Line Deleted : user_pref("extensions.helperbar.DockingPositionDown", false);
Line Deleted : user_pref("extensions.helperbar.LastHiddenTime", 22741627);
Line Deleted : user_pref("extensions.helperbar.UserID", "71cbe26c-c56d-4a3b-b3c2-444cbc5c5b3d");
Line Deleted : user_pref("extensions.helperbar.Visibility", false);
Line Deleted : user_pref("plugin.state.npmywebs", 0);

[ File : C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\i1p3xebi.default-1365779578448\prefs.js ]


[ File : C:\Users\Gäst\AppData\Roaming\Mozilla\Firefox\Profiles\8avg1oa4.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Line Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");
Line Deleted : user_pref("dom.ipc.plugins.enabled.npmywebs.dll", false);
Line Deleted : user_pref("extensions.enabledItems", "{BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0,{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:4.6,{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24,avg@igeared:6.103.018.001,{1E7[...]

-\\ Google Chrome v31.0.1650.57

[ File : C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [19443 octets] - [19/11/2013 09:26:27]
AdwCleaner[S0].txt - [19586 octets] - [19/11/2013 09:31:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [19647 octets] ##########
 

 

My JRT.txt:

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by Tim on 2013-11-19 at  9:14:17,05
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] cltmngsvc
Successfully deleted: [Service] cltmngsvc



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully deleted [Registry Value] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\bProtectTabs
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\Default_Search_URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL\\Default
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\babylonhelper.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\scripthelper.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\tbcommonutils.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\tbhelper.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\viprotocol.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{799391D3-EB86-4BAC-9BD3-CBFEA58A0E15}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{D858DAFC-9573-4811-B323-7011A3AA7E61}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{01947140-417F-46B6-8751-A3A2B8345E1A}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{8E9CF769-3D3B-40EB-9E2D-76E7A205E4D2}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{8FFDF636-0D87-4B33-B9E9-79A53F6E1DAE}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\1clickdownload
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\bi
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\browsercompanion
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\filescout
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\im
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\optimizer pro
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\adawarebp
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\fun web products
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\funwebproducts
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\mywebsearch
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\pricegong
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1966150783-2353473218-186421051-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\dt soft\daemon tools toolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\iminent
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\mywebsearch
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\searchprotect
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\yourfiledownloader
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\driverscanner
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\ftdownloader
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\mywebsearch.thirdpartyinstaller
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\mywebsearch.thirdpartyinstaller.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\protocols\handler\viprotocol
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\speedupmypc
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbcommonutils.commonutils
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbcommonutils.commonutils.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbdownloadmanager
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbdownloadmanager.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbpropertymanager
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbpropertymanager.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbrequest
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbrequest.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbtask
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbtask.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.toolbarhelper
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.toolbarhelper.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\adawarebp_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\adawarebp_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\babylon_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\babylon_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\babylontc_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\babylontc_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\continuetosave_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\continuetosave_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\driverscanner_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\driverscanner_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\mybabylontb_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\mybabylontb_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\quickshare_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\quickshare_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\sweetim_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\sweetim_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\sweetpacksupdatemanager_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4F24-AE82-7E2CE94BB6A9}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\mywebsearch bar uninstall
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\searchprotect
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\sp global
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\sprotector
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\robotaskbaricon_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\robotaskbaricon_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_amnesia-the-dark-descent_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_amnesia-the-dark-descent_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_daemon-tools_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_daemon-tools_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_surgeon-simulator-2013_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_surgeon-simulator-2013_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_tag-the-power-of-paint_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_tag-the-power-of-paint_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APNSetup_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APNSetup_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\robotaskbaricon_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\robotaskbaricon_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_amnesia-the-dark-descent_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_amnesia-the-dark-descent_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_daemon-tools_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_daemon-tools_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_surgeon-simulator-2013_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_surgeon-simulator-2013_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_tag-the-power-of-paint_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_tag-the-power-of-paint_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}



~~~ Files

Successfully deleted: [File] "C:\Windows\Tasks\dll-files.com fixer_monthly.job"
Successfully deleted: [File] "C:\Windows\Tasks\dll-files.com fixer_updates.job"
Successfully deleted: [File] C:\Windows\syswow64\sho5620.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho82D3.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\ProgramData\babylon"
Successfully deleted: [Folder] "C:\ProgramData\blekko toolbars"
Successfully deleted: [Folder] "C:\ProgramData\ibupdaterservice"
Successfully deleted: [Folder] "C:\ProgramData\partner"
Successfully deleted: [Folder] "C:\ProgramData\premium"
Successfully deleted: [Folder] "C:\ProgramData\search protection"
Successfully deleted: [Folder] "C:\ProgramData\softsafe"
Failed to delete: [Folder] "C:\ProgramData\tarma installer"
Successfully deleted: [Folder] "C:\Users\Tim\AppData\Roaming\babylon"
Successfully deleted: [Folder] "C:\Users\Tim\AppData\Roaming\dll-files.com"
Successfully deleted: [Folder] "C:\Users\Tim\AppData\Roaming\file scout"
Successfully deleted: [Folder] "C:\Users\Tim\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\Tim\AppData\Roaming\optimizer pro"
Successfully deleted: [Folder] "C:\Users\Tim\AppData\Roaming\performersoft"
Successfully deleted: [Folder] "C:\Users\Tim\AppData\Roaming\registry mechanic"
Successfully deleted: [Folder] "C:\Users\Tim\AppData\Roaming\yourfiledownloader"
Successfully deleted: [Folder] "C:\Users\Tim\appdata\local\adawarebp"
Successfully deleted: [Folder] "C:\Users\Tim\appdata\local\searchprotect"
Successfully deleted: [Folder] "C:\Users\Tim\appdata\local\swvupdater"
Successfully deleted: [Folder] "C:\Users\Tim\appdata\locallow\adawaretb"
Successfully deleted: [Folder] "C:\Users\Tim\appdata\locallow\babylontoolbar"
Successfully deleted: [Folder] "C:\Users\Tim\appdata\locallow\delta"
Successfully deleted: [Folder] "C:\Users\Tim\appdata\locallow\funwebproducts"
Successfully deleted: [Folder] "C:\Users\Tim\appdata\locallow\minibar"
Successfully deleted: [Folder] "C:\Users\Tim\appdata\locallow\mywebsearch"
Successfully deleted: [Folder] "C:\Users\Tim\appdata\locallow\toolbar4"
Successfully deleted: [Folder] "C:\Program Files (x86)\dll-files.com fixer"
Successfully deleted: [Folder] "C:\Program Files (x86)\optimizer pro"
Successfully deleted: [Folder] "C:\Program Files (x86)\registry mechanic"
Successfully deleted: [Folder] "C:\Program Files (x86)\searchprotect"
Successfully deleted: [Folder] "C:\Program Files (x86)\torntv.com"
Successfully deleted: [Folder] "C:\Program Files (x86)\yourfiledownloader"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"
Successfully deleted: [Folder] "C:\Users\Tim\AppData\Roaming\microsoft\windows\start menu\programs\filesfrog update checker"
Successfully deleted: [Folder] "C:\Users\Tim\AppData\Roaming\microsoft\windows\start menu\programs\torntv.com"
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0007F8E3-A7B6-4F3E-998B-303E412EE120}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{002E8165-118C-45E0-B87B-0ACB5A9F4D34}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{005D9A76-0E53-4224-BC50-8D9B19B554DB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{00EE2331-5408-4FB2-BC72-6D3096139D03}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{011C24C7-A535-4212-ABAB-E0FDC6896B7A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{012AEC1C-1FE1-4CB0-8438-73698E77B687}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{016B6F1F-8371-447A-83E8-8E87EFA3D1CE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{01971AA2-291E-49DE-A819-F5BDDE434B39}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{02EBAA2B-72B1-4A78-8E71-91D43A79D784}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{03016762-9C37-4E03-9586-3FFC15A1CFF4}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{038A1E93-36E8-4E2B-B0E0-7F98B35AA6A2}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{052A934D-3CF8-471C-9802-3588885744A3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{054CC9CE-729E-4243-B8F9-A5F588CC6BAA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{055B67CD-BC28-445F-9AFA-5376BAD3DC6D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0565962E-FEB8-4E6D-8802-86F6F3CDD2F1}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{05715EC6-E25A-4F38-951A-CB563FBE171C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{05EAD33A-BAC1-49F3-913E-1F1D0493F116}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{06554442-D5B3-4C60-9DF0-A1489809AC6F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{06DA0724-F235-4B2D-BD8C-4919330B3F07}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{083CC346-19C4-4FE1-9CE5-FE64DE009530}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{08828594-A375-474F-891F-4A313787152A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{09529E61-8F0E-480E-9F9B-48989B456E10}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{097C1B95-9914-4F0F-BB6E-051FAE639D90}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{09B056B5-8206-4FAA-873A-CAB3DF80536B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0B175F1C-BBCF-4FF2-B794-1C4232154BCB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0B2D788B-56B1-4786-885E-E963D9DA1BDC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0B5DAC0D-A202-44DC-8557-28BFE4E37334}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0BA0C2B8-9FAB-424B-A9C9-F8610DA469C1}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0BB7FE83-828C-44F1-98BA-8CFA58A723A2}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0BD4A253-D7F3-4933-B6D7-675F46741524}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0BFA99BB-CF5A-4825-808A-6EF62AAA1073}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0D6AF71E-AAB8-406E-9D94-E3E43C360782}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0E5FACC4-7DE4-4555-8CF7-A47A1A7AC3E3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0ED50BD8-E8C5-4F0C-9FB3-C658B7F6576E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0EEFEBA5-C2BE-4B1E-A828-4ED30D709DC0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0F11785A-431B-488C-B0B9-A87207AFE77B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0F35D3BE-3FCA-429E-B58C-972CF712FEC6}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0F4BA0B0-B8BF-4EA3-AFDC-FBB42654AB52}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0F74E1C0-EFBB-4E4F-9309-6103A42C4943}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0F7925BB-6EED-40E7-BE2B-FCE7B1E6A188}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{0FA4D49D-379B-47B5-BC5F-2AD022FC6DE3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{10515260-6E56-4954-9BB8-DE5DF635096D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{114F3FB6-EC42-4AED-BF09-B3A8A4CA7459}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{12095095-FE39-4501-A9E4-8909305F652E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{12BCEBFC-2CA6-41F8-9912-A99954420BCC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{12CBAE5E-F6D5-46F2-B930-6C771E7E5C6C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{134E88FE-2552-4E54-8E01-6E30EA5BD76D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{136B180E-7FED-42EB-B3E3-5DE00CD2B496}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1465BC37-A9AF-44A1-8503-85FA1BF725B3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{14671E6E-96C4-4C8F-9E28-4A8A2014C836}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{14E10630-542F-4D09-9541-20615665ED03}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{152635DD-38B6-4129-A6F4-3586EC1178F5}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1567E581-1C26-4ECC-86DA-0C076A60D4F8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{156B4E5F-055E-4062-B3CE-FFD01432B4A2}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{156E279F-F094-4641-BC01-A597599A4875}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{165E76D9-0E5B-45F9-8680-65642DDA1A8E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1660E718-7300-4DB1-8F6A-DEEFCE1CA915}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1689406E-49CA-474B-AECC-D42719350E49}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1785D773-3231-4D66-8EBC-97C93F94AB6D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{17D27CF4-7829-467C-A6C8-49D87A0B2CA3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{188A3590-0A3E-458B-BB68-75AC6EB67199}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{19067D3D-C003-4CAE-A107-D2BEDC42E783}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{194ACD0D-51D1-4A81-A68B-8BBAF03913BE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{198B15DE-5210-4D69-AF5B-68E84E6C65F0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1A0A3A34-6A3A-4E31-A8C8-E576A22F35E3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1A4D3CFB-244D-4F4C-ABFA-A3604CB7B1B7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1A73F94B-162C-4227-B90A-CEB3E41D2153}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1AE14859-6734-4B8B-AE76-015A6977D290}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1B0180C9-A615-4F59-B495-5D8B9D7A747F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1B281047-8691-4618-9A70-F84D0E10270F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1B890BA0-5D39-4795-8B44-6CB64943722F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1BC191C9-07A3-4AA0-8C14-20ED820E4A94}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1C453133-8842-4538-8D59-04CCF444CDA1}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1C6D21A3-2226-4CA9-9C46-CBBEF9CF5529}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1C777EAA-C206-4F5E-B470-CFFFB033839C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1CCD003B-E09C-4903-8028-E88BD972FD17}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1CDA9C51-B838-4ABB-A143-EBA82A325208}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1D03328C-B6C4-4871-AEC5-D4D145FACD30}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1D62B4EB-C7BC-4642-9F3E-D7FD6A3DD685}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1DA3C8E7-37FF-4888-B4FE-D4E3C93B0D98}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1DAD46AD-3FAE-4F80-9A92-D384774E3878}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1E369D2B-E86B-4B9C-AE02-5B7B9BF4D6EB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1E50616C-15F3-4AF4-9B9F-B1F60824B2F8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1ECA1769-1540-46A6-A23E-19AAC14FAE8D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1ED4C342-38D4-4B98-BE93-64C11B85C644}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1F0514D5-45DC-4495-B922-FE15BB0737A7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1F4E9EAE-D04D-4C25-9EAD-5109FCAD2430}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1F63982F-E2EF-40E7-9E53-E13279F4A64B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{1FC955CA-4ADB-41DB-9FDC-13BE069E75CC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{204B2743-7B42-4F77-A796-4D42291FA528}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{20697F34-7269-413B-9D9A-C0F4A236263C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{20B004AA-852E-4296-8E2B-1954491E7362}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{210A38D5-1114-4801-B0E6-1B20419F3669}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{21A78267-9745-49BB-99A5-8B90508A13F9}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2230DDEC-73F8-4D06-B69A-BF96AFDC6C55}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{228C596A-3AF4-4023-976B-673A759813A3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{22A21506-E52D-4EB7-B613-86F96CD0F5FE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{23003B9F-A896-43EC-AD0F-DE3A4F3BC642}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2324BCC2-8197-4C65-8317-361FC88E1793}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{23281ACF-E6B3-4608-BDFB-BEBAAB40BB3B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2348D916-D9CD-470A-B31E-930C44B798D6}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{237FA3F0-ECCE-4D47-BC8E-BB65A9EDEFDB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{23FC823B-1ABD-49A9-B370-DD2D0F4F0C4F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{24132422-2769-4E15-B272-3B97929CFC5B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2441322C-268C-45BB-84B5-B4344631601F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2458E68D-05F0-422D-AA34-0EAE53B19116}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{24944BE4-0CC3-4FF7-B3E1-0FA957FB0E50}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{266998AC-ABBD-4AC0-B16E-0E2D509208A6}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{273F1B25-70AD-4BF5-BE8E-EFCD5B20008F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{28252585-7172-46BF-90DF-2CDBE17200FE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{29D79307-0D09-43C8-B921-16E12A1E1CB3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2A458DB0-3AA5-4C7D-804B-21A5251CF1A2}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2A818F1E-EF87-49F9-BA12-A70C8A90FF66}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2AADAE13-901D-41EB-B9F3-0E19762A9515}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2AC4E10D-68B0-497A-B354-70D75F9AD949}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2AC860B5-8303-4BA7-8BB9-548FD15FC75A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2AEBCCEF-B0D3-43E3-A293-E7069DA29F9E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2B090A58-7B57-4F9B-B649-E3D9EBFA2B7C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2B694F69-29CA-45DE-91A2-38DD7BE0EB54}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2B6C7C5C-97AC-4966-9BF0-DA6B7EF8AE84}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2C0CB43B-5BA5-437D-AD7F-64AD634296D9}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2C14EE57-E943-4630-A964-D572A1BB62F7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2CA6C8CB-D6C0-440D-AFE9-2D225C1E0922}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2D489A07-1C58-4688-B0DC-E09324E91AE1}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2D4E990E-6181-4C5B-A1B3-C367A65B08BD}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2D9E3C9B-9CE0-45F0-91BC-56CBECEE9297}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2DE7E0BC-9BD0-4FA8-A788-31A5F9CF4D87}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2E0F361B-9A40-4F97-A720-04242F5CE58A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2E1CDCFA-57B7-4BF2-BC46-45F58729216B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2E3DA297-F487-47D8-BA5D-DE51A694D030}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2FAA94A3-779E-487B-B3BF-4FCA9C0D6B20}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{2FF541FF-F535-477E-963E-CA428523D8DE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{30E911A5-FE3F-4988-9073-3860C7DE3D63}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{313DD206-A210-4FB8-A30F-FC9A0DD7DF2D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{31D20774-60BD-46F8-A780-110515E420C2}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3205AB41-C023-4F2E-84E5-E6A17F089E33}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{32AF6CF4-766F-4BB6-B4BD-88A8F0A36A7D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{32CDF490-4EB1-4F2A-8578-F260B7671C97}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{338F36D4-6C30-4048-919E-6590F3A5AF05}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{33D167A0-016B-4F97-BCC6-BEEA845A0C9E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{33E05437-DD51-4433-A2EF-8854D77B06C2}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{33E632E5-C83D-4EBA-8BA7-0B5198967533}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{34420857-F0B0-4A1F-992F-BC1E0157236F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{345BFAF8-BD75-4573-AE43-1DA695500267}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{34B0188C-81A1-41E6-93BD-0C1D8D70850F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{355BB3EA-F1F5-4164-AAD0-DDB1D435BE6E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{36545DF5-C357-475C-B94F-55AFAF81EA23}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{36A1AC62-C19F-412F-A43C-2D1A46EFDA75}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{36A24541-6ED6-464C-A908-9CB27797C83C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{36CB3E1E-B9E3-4717-91AD-95A80BEFCFA2}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{37526658-A543-4090-963B-D2010C6EA6DC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3837E750-09E4-4056-8907-036882486827}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3846A040-0E0D-4CFE-AAC7-8BFB1BE7F5F8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{38D1A393-FD51-49D9-A7D2-53D38280CED8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3976C800-6674-4681-A5B8-30CB95DA6A0C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3ABE059A-9B5D-4E12-BF01-0C5A76F6C778}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3AD545E4-E8DB-4767-9712-9991915EA26F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3BE7A3C1-C76C-4A23-ACAA-6E41A5011518}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3C042705-E357-451E-9776-326545BE28A0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3C41ED6C-8883-4F92-9A27-DBD301092466}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3CC9CDF9-6046-4E6C-A491-28EFA1CE6274}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3D328E09-088E-4B84-A584-A90A3223799A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3D4FB019-887E-444B-AF4B-53924328E21C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3DB4E0D0-47B5-472A-B71F-4C9EEB9696B0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3DC3F829-2249-4FD1-A28E-6BC64CDF33B1}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3DCF5515-323A-48FC-BE28-1B18A6F6D79A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3DDED488-1E13-4C42-9C9A-5420B891F68D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3EEB505B-CBC7-48F2-80E4-7E8A8386F701}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3F0CE275-B250-4010-BF36-8F4F62D1407D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3F2198ED-E91B-4A99-949E-F51EC76BB52E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{3F24E332-059B-40AF-AC8C-DD5D06B19CCA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{402E734D-DD5C-4BD8-A196-EC66736E25D7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4064C0CD-9F36-4F9F-80B9-811B670A1418}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{40782AB3-9ADD-4987-8F33-1FF3C6270D5F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{407E5459-2C41-4321-8727-18F8853F98FF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{40E18AC2-59BA-4360-A391-4C8394BFCE05}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{41B35523-D371-4175-8C9B-2A97EB4FF373}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{41CB1617-7BE4-4FD9-9D86-685884E4635A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{41D1F246-6A6E-4CE8-9003-261887BC140B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{424C9F9E-B74F-4B1B-B24F-1EBD291712B8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{434DB3CA-ED37-4B6C-8206-CDFDAD30E3C3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4391AE88-369E-4E0F-80F0-C8E2758F2FD9}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{439C5C23-C418-47D7-970B-A4FB91DD6F2F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{43AC13F0-86B4-4633-AD11-06AA8B9510B0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{43C1DB82-6A12-4BAB-994D-8551969ACFC9}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{43DC9548-5945-4B87-9D08-A6B724942204}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{44EAFD91-6E11-47C2-AEF7-E5D43FC92C58}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{45787156-F52D-4236-A8B6-7537940AC2D0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{45C18BC9-0996-4D17-934F-1EFF730AC3DD}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{45E782A4-51EB-4256-A606-8C4ABD1E249B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{46E5BF36-9964-4467-9107-55EF3E93642E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{46E8F9B1-F417-47F1-BC23-3A7F0B4B3A29}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{47232D9C-FBFA-46E1-B4F0-F517B339BE52}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{478065DD-F337-474A-93CA-FC064116F410}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{47A21DFA-3C55-4BBB-8F04-D5D7F8317706}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{47B6107C-385C-4271-8F72-E3A8C656D795}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{47C245BA-3867-4F28-9D16-06563828B9E1}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{47E856EB-9F54-4FBC-9D4A-E104404F7BDD}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{47F2B7FE-90C5-4D75-A33E-7DB77FE3F26B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{47F5AD06-3BFE-4C3C-9F7C-FD013088E9FF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{47F95A2A-F7F7-46E9-8C22-BFE41B6E3637}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4846A6E0-2550-4E57-B1DD-E83916562D11}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4960DB4B-835B-4CD4-8998-A472C08C4863}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4A525291-1999-486E-9F22-2A76ABA1B541}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4AA2CCDD-AEF3-45BD-BABA-CB83E98DBB33}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4AB33975-AA1F-47A1-83EF-A3D52C62B7E8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4B1AD6EE-8A4B-430C-849A-17B5774249CC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4B645C6A-5498-4F8D-969F-E6E7E364FA91}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4B7875D4-3442-4A73-9730-89E63F187D42}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4C633D5D-C835-4032-8B35-2A00676F04A8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4CAB179D-F3DC-4A8B-91FE-D692A2B6E084}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4D77BD07-D9D2-4AD3-A92B-01F1AEE9434F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4D9CEB0A-77CA-4DD8-A159-49B7BBE0A77F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4DC41444-10C9-4A10-B440-D510A32CED75}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4DCB35E9-28D1-4BA6-9A1F-850BEEB479E4}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{4E925109-A4DA-4D9D-BBB0-2C3E2925D516}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{502A7ABC-35CD-40DC-B92D-36572219F6A9}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{506B1750-1671-4620-816D-246212184703}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5074EBD3-D170-44FD-B01F-9BBF5F23C4E3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{51C72E11-6D50-41A2-A178-DBFC65B3A0EA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{51FF2E32-7F34-4AD4-B41C-950CE3B5CCFB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5231B91D-A6D4-466F-9E57-0D18D57F3DE6}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5291C6EB-39F5-40FE-B472-7242A3B1070D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{536FB421-E717-4C02-A055-792E4C3F9EDC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{53724A98-6E49-4A11-BFCB-9FA85A835362}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{539724C2-BB48-4F0D-8F7B-C515BEEC09C3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{53A6DDAE-AFCE-4B5F-9720-B7F577F0870F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{53ACDE7C-71E4-4792-BF5A-685D557F3995}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5406EC6C-29AB-4A28-BFFA-5A34685BF1A7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{54107A5C-1F4D-4D02-9421-411191716B37}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{546C84D5-3143-4103-90C5-E5C492111EFE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{54B76058-D9A7-4296-8ECB-19502A218155}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5527E35C-345E-48BB-95E7-6EBDECDDD15B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{55335B13-0CA8-45CB-8B66-FF79091D9110}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{555A6910-F708-48F1-AC76-B2283C6ADFEB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{55F653B5-3EC2-41E6-A0D9-3FE77BF8A8E8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{565ED484-1B25-4580-9DB7-766C12E007EA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5702709F-4EF7-4FF8-B85A-A58098788F87}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5721CD67-C457-4E53-BF79-4D5F104521AC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{573DA91F-E33B-44CB-A7FF-6DF384B92B4C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{582FBDEE-9162-4253-BA0E-E7B38A2003DD}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{58313B7E-BC90-4509-B348-3EBC4FAF03A1}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{58B49ACD-7204-47F4-8799-9644DC661688}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{595874FD-7E4B-444E-9E0D-0EB5BD4D819D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{59BEB966-77DC-49A9-980A-336811578FEE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5B144E39-AF31-4F2F-BF65-098B405C32F9}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5B7677E9-15A7-4982-9526-F2E7E6CF87D9}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5BF00DBE-A719-4348-B0D2-1F4AFA737F76}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5BF3C383-A711-4BF7-93C0-CDA2FF0EB660}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5CF05209-FED7-4C8E-86D2-7DDF36584B74}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5CF2F93B-14D7-44A1-80C1-F0676A610F3D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5E2F3D3A-131D-4651-A7E4-C882D1707825}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5EA0E11F-F7FD-4D59-9801-EDDF9519DFD7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5EC70946-7CA0-4EE0-B68F-7635DBD05156}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5F45389A-7E62-4F18-AEC6-A1B80C0FEDC5}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5F5D47A9-DB82-429A-81FD-54A0A955F41F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5F9ACE00-F3C8-4775-B521-6A044AE3EB37}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5F9E140C-249D-4A01-89C1-71021759419C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5FB9BB27-B2B6-4CB4-94AA-13AF0FF44BDA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{5FF61F71-C819-4B09-85C0-0EC6A15C46DD}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{60C6C753-7C1B-4953-9768-DE14C90A7CB6}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{60D794FE-E32C-4828-A9CD-561B0BAE9107}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6116ED5E-0AC9-4F40-A4BB-C96EBD02FD6D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6123C85C-300A-4373-89B4-CD19D04570CE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{617A1E32-6F1C-410D-BF6B-6591DE06B36D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{61CD350C-B4BC-44EB-BF54-F55DAA46778F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{620AFEC4-3D91-4175-8937-C85936083E11}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{62133D7A-058E-4FBA-A2C8-9BC4483A0A40}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{62855655-3F8D-48AA-A76F-8BC83F2575AF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{62A99DD8-24F0-4D85-822B-72569070BA83}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6318A82B-D39B-4563-AF31-D5694BF05EF4}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6338E851-423A-41E7-A520-BF210E210CD4}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{63E41489-BED7-47DB-A2F8-AEDF965C47AE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{63ED5A03-727E-4B53-BFF0-A69C5B134693}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{643B3C8B-4720-41C7-97E6-B03771F6429B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{64B619A0-FE83-4019-B389-E693531A040D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{64BC9ED9-95B3-4BD7-9B14-2219C32CF0BA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{65B5E390-B497-476B-B0B2-8517E4917497}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{65D2542B-930B-40C0-956F-8AE7142BD51B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{661F3CCE-C219-42C5-A00A-5573A97E724D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{667A7B2F-8533-499D-8116-73BCD4B4594C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6699F76F-7563-4DB8-BB3D-6BFB3F63B88F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{66A5CCD7-AD09-4A26-9E95-6A09E57FFB39}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{66A7584E-6BC1-4500-B14B-30FC7DC0B3DB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{66C77D0F-A3C8-44F8-86A9-02DA076CA927}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{66DD5582-7C18-4602-8951-62508492C12A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{66FA87E9-96C2-4C3D-8DC0-DE9C712B3CB4}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6713B329-D549-49B2-B5B9-33C603759553}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{68AD2AE4-8C65-4CA7-B4B1-542175CEAA7E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{68CEA6A2-3AEF-47D6-B6E8-362DFA270809}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{68F1FC71-E081-46CC-B7B3-3B32093545FA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{69168F29-85D5-4F67-8E39-E076B78286D5}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6AA1D459-1104-41AB-8059-E5626222038C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6AED9281-AC07-487B-9EE4-3C6E912C1C22}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6B16CE8D-585D-464B-8CE2-E56485736572}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6B24395D-EE03-4B65-98ED-34FF76BADA1C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6B4407A9-C2D1-4778-9C78-03E353B02F4A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6C074746-22F1-4133-A472-824A355C051D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6C5E2050-6CB3-4C25-AC13-2E2F877C38F7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6D555AAA-EA22-4246-AA95-DB09D62F3481}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6DABF471-7D60-4EB0-A88A-5FC72AC0BBE6}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6E8030A1-664C-4D1C-8EDA-D7245A67C842}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6E95F6B3-109B-47DC-AA34-A8D7F4103CBD}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{6EB85A9C-4491-47A9-9346-3A20AD83C235}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{70384705-01B3-468C-9626-B013BC36B368}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{72B71066-10F2-42EB-82A2-510768C7F89F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{731AE3D8-E79A-4220-8226-BFE7311B4AE8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{7386681F-0F19-4567-9819-3462CFC3B7E2}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{7400F563-81CF-407B-A521-B30857C4E2FE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{74210394-BE52-4289-9A68-143BD0AF79F9}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{743C79EA-4F29-4F6A-BE6C-4ACD9D853F3F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{74A5273E-374E-4E61-A4E2-FC24FF0422FB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{75CEE26B-4CC2-4745-8973-D02653722367}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{75F4084A-5376-4966-89C2-A174FFA93622}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{76204E7D-CA93-4797-871E-ADE808A7088B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{76B92D16-BBE2-4361-B36E-6B0923B86A0B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{76E46449-13DD-4760-A3B4-A92835BFD72D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{76FDE08C-25CD-4630-BA68-1D2518599455}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{771482B4-B1AE-4A6B-A675-77A7E84F7D76}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{773F3296-55FF-46FC-BF90-4DFBEF3ABC39}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{77725341-3B03-4398-8061-0EAE1B45C894}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{779C8945-E844-45F8-A00D-1D19C449BAE8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{77AD3B55-20C1-4348-89BF-E4511AC584CD}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{7855B8FD-AA22-4BC7-BB23-A8765F3EEA64}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{78F4C130-DF30-41AA-973E-14A1342AAB9B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{795C9FF4-4CCC-42C4-854A-E977D4A7FD20}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{797AA94F-75E0-4BDB-8738-43C11E38836B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{79B5BA73-3CD5-479D-A2B6-BB05A277D58E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{7A50F87C-4B84-4182-B017-4B6B2B1CED0E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{7ABE9A1B-997A-4C90-B336-2F35E2053FEB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{7B26D896-6529-44A1-9B3D-3F29ACD7224B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{7B2C6983-AC26-42EA-ACBA-C241A668ECEF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{7CA06AE9-9BBD-4D1D-B6AA-9469D11FD166}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{7CC8E29E-8CBA-4F48-8BFE-5DD62368C306}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{7CE3237A-6D3C-44BC-BE71-AC7726CCE5F8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{7D3722DE-1364-4D8F-B6F5-62FE81FB0986}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{7D775541-CCC8-4C4F-90F3-377F1C0E547E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{7EA66A60-AFE6-42E7-9E14-B3105D602615}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{7F73DAA8-7638-49AF-B3A3-71AF06831CF6}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{800AA305-E677-4454-B403-DB1ECA796B4D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{808F6BD7-65BC-4611-93AC-D732300D0CC0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{80A223E6-A72F-4A48-8AF0-87BC1EFC9EE9}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{80AACD2E-D84C-403E-8EED-17682A6735C4}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{80E145F9-EE76-449B-BC06-6B75B3624693}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{81047D94-3D36-41D4-8160-D0A68D631C6E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{81F5CEE1-4D48-476B-A016-FF4F2E68AFEC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{824F5BBD-A5C0-4806-B4B3-E3C023F2A5B2}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{82587F46-2C35-432C-86B0-CF179D4A4F3D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{828984DC-B792-40D5-A514-C1EF99C1985D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{834DBBDF-F197-43DD-9E89-514A6D14B6A3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{837FB799-38D9-47D7-B87D-E37003F7F2B3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{83BB8F4B-BBAF-4023-94E9-6CA7E15D0177}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{83BD4773-5896-4CA5-B853-01103A5D529A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{83F1597A-2EFA-4DBB-B76B-70D76BD99208}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{85224CE0-71A2-49B2-8205-3EA661E1EAED}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{853D47CE-026C-46FD-A5ED-7BD90D08015E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{854BC8C0-5E14-4813-90C6-40EE09CB7221}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{85B3F289-DA2F-4D45-A671-A37D873CFFFF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{862A5C8C-2FB7-4AB1-BB95-228EAC5D3BB4}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{862D9FC5-FD16-4C28-ABD8-2BBF0B391477}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{86A44304-F5E3-431C-8D6B-C4D84AC3790D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{86C3E20E-7E3A-4DC1-8949-AD7E38B56109}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{87F3599F-DE85-4B53-A464-8D8967848A28}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{87F40DD4-E284-4CF3-920A-CAF0CB44E1F5}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{882D0E17-5F60-4846-B1F7-A786BF811026}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{88B4765B-66F3-4565-AA40-D767720747B7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{88ECABD7-8DD5-4820-9003-59CFC5C6CC72}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8918DC1A-D0D1-4E80-A1CD-0026FB39EFCE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{89DF60D0-2AFC-402D-B065-DFEA3363AB1D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{89F54E30-AB43-4EA2-B2C1-34E2AA109349}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8A0434E4-8C87-444A-B79F-0D2119C1C3DB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8A1FE6B3-08AA-4CEB-8E56-0CD7E73A7401}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8AA57181-20DB-4F47-B66A-34E144F7B30F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8B29A1E7-80F6-4300-B505-5260DE5CBE34}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8B9A3AA3-2250-460F-BC80-FEE5DF9C1BAF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8C226D57-1700-4918-B44E-8EE3CA4C9B42}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8C4D7BD5-D795-43B7-A561-2B13D6C00BE9}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8C9DB43B-0955-4E08-BD96-A99993899847}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8CCC8B0D-FA4C-43F5-BDF7-F1E0C94B3835}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8D5B3C5D-B17A-4530-88E4-8533CE7D7C70}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8E084FEE-25BC-48B3-9E57-88C06DAE56DF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8E3D57A4-CD3A-416E-87FF-D1D6E4C2FDC2}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8E4D9C2A-765C-4FD0-BD35-88BDD3B19E2A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8E592727-89FC-4469-B1B8-3A52F067BD3F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8E6F0945-3668-43EF-9033-FF79360D1418}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8EA7F863-5495-45A5-B9F4-B15BF9B55967}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8EC55632-6475-458D-8BDD-1850566B5E2B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8EC6A17F-A2D6-4828-8209-0EE0B4C5E3AB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8F3D4E41-9220-45FE-8198-0E7CD3CE3437}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8F5E8810-6782-40B1-83D6-1556E93B3CCE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{8FFBAE0E-C6B6-4753-8D2E-1756D79E823F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{90425068-C524-4746-B0DE-43213202DBD1}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{905D97C4-A035-4A88-A517-CAB459BB55AC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{906F0BDC-30D0-491D-B51A-957119D3F5A3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{90BAFBFB-56F7-4ED1-84F8-DB58B075E247}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{911F47CB-1429-41A4-BEB0-9C7827AB748C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{913FA375-D1C8-47B4-B0CF-27C4772043F0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9252CE73-4B56-4093-BE34-1BFBD02C3B99}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{92EF16AA-7CC1-4644-990F-33BA09003A68}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{935E351C-FC5C-410B-850F-899F4343C780}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9372205F-282D-4A35-A080-93E4F93AAF33}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{93B2DDA0-53D1-4EE7-BEFF-61192EC7597A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{940BB0B4-2B4A-4BDE-AE7A-F695D62CCADC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9428F29A-D16A-4B51-B9EC-3C3E5EE2BBE0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{946B5A13-199A-4579-890B-29E7A1569341}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9481A522-501E-4953-B856-1C55570AB38A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{953D7B97-86F8-44D6-97AD-DA2B464B0080}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{95634A4A-A4B8-4F0A-BD50-59689AAE8F10}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{95EBD6C1-E21F-4A02-9FDC-9473C52FC101}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{97376A93-B21C-40F2-A4B3-1BEBDAB0C893}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{97618233-A041-4E7F-AF89-DA7D66304957}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{97ED4D2A-5D5C-4A3E-939D-9B3BE57CB4B3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{98975391-C123-4610-9A60-062353351EC0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{98B82F18-F52E-4083-95CE-DBF9F1DE6517}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{98F82DE6-7A5C-4D1A-8986-32A853608B8F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9972EA8B-E3F9-4657-A3FB-31D2A490DC39}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{99B646CC-C2D1-4683-BEE5-6F62DAF8C95F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9A3B4F01-562C-4F2B-83D8-8B2B4A56D1E3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9A564DF6-A7C5-4E98-BA8D-6975DD9311EE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9A585067-E303-4054-8F21-B5E5664B7A8A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9A83FDF1-5FA4-4829-8E7C-FD56E774CF6E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9AB8157E-1C05-4D01-89B4-8D168EB18AE3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9B515C22-0FA0-4F6F-9C5C-4E7131FEB6DA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9B8099B0-0C83-4521-8049-2B9B48C126EA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9B869BA9-DD0C-4F44-A84C-3E022B496C7F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9BC999DA-AB1B-48CC-92B9-685D71A17726}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9BFBF526-78C5-43CD-AF8B-EDF265191B8E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9C088DA3-E1C5-4225-A7A4-E37EF223AEB7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9C4BE233-B8C1-408A-9F45-D14E5F30284B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9D2613AE-1150-4A3D-85C5-5313D518CAD6}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9D4938C0-1036-4B41-AB35-3836D8C89815}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9DF41EE2-4F17-4A44-B647-953FFC3AA8C8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9E075A69-819B-4E16-9D41-7C25CE54258E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9E3271AB-667E-422E-B203-9C3B83AC7622}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9E40AF8B-8294-422B-A500-E15FC8BF0373}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9EA66AA8-0270-49EB-BB43-34379CEA2691}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9F25B84A-576B-4886-8116-8A58BE781353}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9F4AE687-76C7-4D03-8ACF-D109CF228DB7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{9FCCB932-3467-46C0-8DFA-FAF02DB0FDAF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A0212B96-D90F-4E12-AD5B-DF19A83654EE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A160885F-4964-4C8E-8E79-A97C4AAE0E18}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A1617071-489E-4C02-92E6-45DA0B4A60F3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A169C16F-140D-42AD-BC20-566835E7E35A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A247074C-84ED-419B-9C5E-38D70ECE3AC3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A3CD27C8-E75F-419E-A60F-F519C3515A16}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A4745D72-4E08-441B-B1B1-3E07E62C2C10}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A5039B5C-C687-4D0A-87C8-D5B1D5BFFA19}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A50E4775-70A8-4145-88FF-FD15F1EB0D9C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A554F46E-CF84-4B13-97FE-6CBAD991F9BB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A5710909-59B8-4349-997E-A46B8ED78CFA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A591303D-332B-4D74-96AF-38C26D14C525}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A5A26670-6AF7-45BE-8552-1AC310BA2E98}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A5E1ADFD-D29F-4917-80C3-5436DD30D28A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A6AE8849-DD82-419D-9AA5-077792B5F19C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A7F2F738-923F-4296-A1DE-5EBB5107E41D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A8377FED-C841-4B3A-9545-EEA58A1F8872}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A8B59645-B985-4B20-BCCA-C77905D1D792}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{A9D5430F-0215-4C1E-AA40-F109BA795FDC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{AA10BCFC-FBDF-4BB7-812D-7BF2C94E9F28}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{AACA90E5-9ADA-4775-885A-9F54F54E1D2E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{AB27747D-7949-4E54-926C-2563CEEE12EF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{ACB1164A-02C5-4064-8AB4-AE4CC031F655}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{ACE4AC1D-1372-4CA6-89A5-221219AFCDE1}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{AD50017A-7261-4B99-9CDE-49996E0A7708}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{AD78BDB5-1BCB-4EC0-8F8C-D85D5F812735}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{AD79A6E4-58E7-4803-84CA-6E817B579047}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{AE0064D9-9E58-4283-9C50-7E9103D4CCE8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{AE3089BD-5BE6-4472-84E6-479AA17E4800}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{AF7E290A-C809-4436-AEFE-B54B2ABC72A5}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{AF951AF7-398F-4272-9AB5-6E0FE5DB8654}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B0C3CC86-E23C-4E18-925A-138F23BEB766}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B175BC4F-D6AE-472F-B2E5-9BEB747B20BA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B1FF1EA3-5F3E-43EA-B822-1896B0C81F8B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B2034F56-F8AA-4B1D-A04E-13BE3991E792}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B36C3BCB-72FC-4630-BCF8-3804F541B8E1}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B3B048C4-90A8-4C80-A966-AB7BA1C374B5}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B40F80E6-6DC9-435B-8247-2F159B8AFCF7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B421A634-A875-4B2F-B6C3-7DE54E671C8D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B4451774-9515-484B-8DEE-80816247F231}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B4798D2B-C6D0-420C-9114-D4D9D4570ACA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B54A69EF-358C-46E4-91BD-00AB0355BFBF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B5756686-564D-4C9E-A4AD-3DA0092F835A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B5A3ED67-1C15-4BD1-8D12-3FE99670E64F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B5CF90A9-75AE-4600-A43F-75C4DF39A3EB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B62CB355-69AB-4C41-B9D1-2AFAE3455DB4}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B6319CB9-078F-44E7-A24E-E0A637AE1B42}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B7456830-C375-416D-AF15-F1740694CAE5}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B78DD2FF-AC02-4863-B0CD-9DCE694421D7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B7E97841-AFA2-4157-9155-61DB90758018}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B88F10E8-7528-4CC0-B292-44A6F9160262}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B8BDFDC7-7BC3-43E7-A92F-20CE49D88C7F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B9147A17-5998-4587-94F3-83A2FB9B1B55}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B9533B2C-8674-4977-AA24-D159FABE6304}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B987307D-7729-4C8E-BB84-3C9ED99EAB3A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B989A5E0-846B-425C-97BB-F1D4B02A40EA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B98F3091-B30B-49EF-8BAD-27F6330F6D51}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B9997C2A-5F46-45E0-852F-0DB49A98EAFE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{B9CD27F5-19CE-4E34-A408-66CE92670684}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BA224797-9641-4975-946E-C810032658C7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BA4E3E29-E8FB-45E9-B22F-78161744E2BD}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BAADB3AB-64F9-435E-BBB2-B4E42095DEBF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BAB8E686-9265-40B8-9DC7-953B714C5F35}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BAFC776A-A27D-4985-9F3C-04473B4678C6}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BB1FBE3B-9FC3-4FA2-AE65-26BDCA15FF17}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BB94EC5F-B7DF-470D-8944-0E3EB96FD185}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BBE660A5-2A69-423C-B1E5-91209FEA4A43}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BC34F065-9293-4FA1-9AE4-816F046645CF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BC8FEC14-9FBC-444A-BDFC-7B19E3E60754}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BC9CE055-4EAA-4460-9AE3-5E81D83DC4B6}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BCF5DD45-39FA-49BC-8531-288C4D47D839}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BD16346B-8418-4414-BFD1-A03B9E85DEA8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BD1A2355-3DB4-41A6-BDC1-68C5BE0C87F4}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BD541FD6-A0B8-4280-9A33-E447C18FB503}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BD7F0311-0CEE-4563-9291-60B8A12553A6}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BDCEF2DD-C725-4567-835A-52A8E3F0AB6D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BDF93103-4D38-4EA6-9A2E-32B13B840479}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BE5BCDA6-D5AE-49D6-8A52-F5F281C7ABF3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BED54830-8DCB-4FCE-8F41-16F3AF85528A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{BF5E24B8-C350-4F74-9F04-21D412513A20}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C054BDA6-DD8C-4798-B6D6-8459D3D54E52}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C13E0766-0783-43E6-9959-D74816336E2C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C18841C0-0DA6-4D25-9D3D-4125A4ECF1D3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C1A69607-61DC-47A1-8918-89DEE4206900}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C1BA34BC-A107-4C49-8261-DFCAF901CF85}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C25EB137-C86C-4911-BD3E-790CDD9CC28D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C2753F4C-0313-47F3-8B84-5702270249A0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C2934DFB-B03A-4B5C-924A-8DBB9836FB18}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C3FA5A4F-5537-4780-BBD6-0710AF097D0B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C4F01181-CEFD-4E6E-8ADB-FB6F61E36119}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C5477E5C-3F63-4882-A1F6-5DBC484AAFC6}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C5D57B2E-C10B-4925-A38F-97061D6AD797}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C63BDFF1-300C-4F5B-96BA-188C407915B4}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C7E1B219-EC38-4B3C-B67A-A82A5E92ED74}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C81F5FED-F20C-4923-9DF7-085355690BB8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C875CE5C-207E-48AB-AAF5-78D8937060AC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C8884041-716F-4063-B321-98E82F1648D1}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C8B95A5E-A14C-48AF-BE69-B45EDBB0115B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{C92E7646-2A95-4058-B043-672ED19D9C5E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CA316AD0-99AD-4B57-AAE4-14572C4DF735}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CA34C00F-3DB3-4232-B322-4B5835367EF2}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CA686EB3-CFC5-455D-B595-8291B295D0B9}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CB38389F-D4D2-4D72-B733-6BFEFBF5756B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CB78DA5B-A115-4444-AE09-6F990529D6A9}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CBCB8535-C5AE-4EB7-BD12-2DA4BD2BD073}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CBDE17F3-13F1-4804-BEAA-D057265B4783}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CC7639C2-18F5-49AB-B20E-D5CB2CCACBCC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CCC2AAC5-3B7D-4E2B-BE59-139838E7EC62}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CD226DEE-4FF2-47AD-AD81-E8FECBDF4F87}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CD59A678-30A2-434D-8B82-D914A038AA18}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CDCCDF37-ADB8-439E-B6B5-F8ADF1C81EE3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CDF018C1-AD09-4E61-9B0D-206E8A61C039}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CF17CF4D-E775-4592-8376-B193F5A6936F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CFF6DD90-9D1A-439F-91C1-9F5D584A297A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{CFFB0D88-FA15-4281-947A-72CADBB5AC0D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D0072087-2BB5-4A54-9981-02BB765CE6BA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D076FB18-3DEC-4EBA-8A51-348DE5AC05EF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D13AE056-1D78-4A67-9403-CF23AEF7E2FA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D14CBE79-EF32-4989-A668-8FE429CF4F6F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D1957460-DEC4-4E4F-864D-E5AE7A3D746D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D2080365-31F7-4D0F-AA9B-A0643C68B291}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D2209A16-30A5-4372-A054-EDC862392576}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D337253F-4C59-4741-A63F-860AB20813B7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D3A14480-85BF-4275-8C49-FBCEC3F9904A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D3B435C5-271E-4479-82C9-9120A5211896}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D4137C2C-5C7D-4AE9-9B79-5A42995A22A7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D4543E81-ED11-48F2-B91D-FFCCC5BE22CB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D4B2CB91-41F8-4E7F-B29E-182EB454FFA0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D4EE0808-3CDC-4B22-BD45-A3B5B165E3C7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D512C367-1F5D-48CB-AF9F-96CC3FE7A63A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D53145BA-9EDF-4540-AE91-9915169C9EFF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D54F5461-CA94-40A7-A18A-540771B03D68}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D55C25F7-E80F-46D2-85E9-71FD6618082C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D6159834-B8AF-46AF-AF3C-033D0C026D7E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D7945501-7D53-4663-AC74-B843B5F9EA32}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D7E33BD4-72C2-4430-B635-AC9D69B56863}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D8554312-8D0A-4DDE-93D0-D736357FFF05}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D98D561C-8A89-46EF-928E-E2974F7BE650}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D99A2D0B-7226-459B-BF5D-4A3C76DEF3AB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D9AD8589-4FFC-45D3-9F17-769EC60B7D3E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{D9D13FA4-F225-4EEE-AA28-4C589FB58E15}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DA5D2BB8-3F37-4023-878A-AC21C7A685EC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DAE0C68E-5591-4D36-98D3-7F9A9E27B292}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DB0D0FDD-A6CA-4543-BD70-2F6249813557}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DB2F962C-C115-45A2-B805-2760839831EA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DBBB6475-FACF-4E7F-BCA5-2BDA1F3ABFA0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DBD4A8D0-3C29-4227-9EAC-109395E8844E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DBD73C8E-77BD-4366-97D7-F8AFE703A6B2}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DC24B0CD-82B1-4D67-9681-49770058311F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DC3707AF-C4E7-41C8-9F11-2FCB84D61DA2}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DCA79D77-D8A0-4328-939B-02251EAE14A2}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DCD2B880-F3DB-4EBE-B469-AD5C8A73B6C3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DD5038C9-BBAB-4042-B28C-EDBBD3B3A913}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DD54AAE7-B3E1-41A8-B470-963E56D47DC7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DD6122EA-9B3B-49CD-8596-0A12F136E3B5}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DE1A5CB3-A7E0-4B80-9507-0088FD74D10C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DE51D76C-0683-4DD0-8228-0DA7C3BC943D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DE8FD2BE-5A8F-42C6-8EE2-BC82623EE0B4}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DED7C0ED-393B-4FF9-BC2A-F7C7FC170310}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DEE894D0-C06C-4C90-81D1-9D29C749820C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DFA77C49-F46B-455F-AC22-713E070C6083}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{DFFA91BE-6856-430E-88CF-2E7BBE3CBF9A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E0759EE7-B6C3-48DF-91EB-A0E552590BAA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E07C6E4F-BB2E-4DEA-B5E8-0196E3D54835}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E09C4512-4FE0-4C38-8344-E1E5C22A33C0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E1A4BFD0-11F3-4CD5-8B82-D39798C2A819}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E26E1E33-368B-4089-8E79-A2CB12816BDB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E2DB61F5-0C83-44F5-932A-F709D3CE6A8E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E356818D-1EDC-4C71-BEDB-055E6CADED68}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E35A0EAA-F298-49E7-99AE-9E71813ED578}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E3895869-BD15-47B3-8CEA-42B9CBD8FF63}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E3AA1912-7EC9-4EE0-A3EF-1F338789A0E1}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E4592211-A140-4061-B636-FE24F8EE3D56}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E472C70F-B4EC-452E-88F1-BF58338AFB87}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E4A311A8-F1F0-42B9-BF6B-71F7AA85F00D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E4DF8680-A67E-4772-B557-F3A86676A539}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E4EAE083-C78E-40FE-A399-48D53FEBB731}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E5B68419-3FE8-4D61-A9A0-A8BDA1BECFA8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E69DA205-E037-4A81-8AB4-D3F6604E381E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E6EA3715-2411-4AC9-8192-0A0AC554B6A7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E7DEC539-2D1D-421E-ACCC-D734CFEFEF8C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E7FBB028-AAC9-40B9-9E7B-647F960F3A64}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E88E36F0-2757-4D60-820F-468F08A36AF4}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E8BAC364-7245-4943-B3DB-2CF1711B069D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E8BEA396-2B16-472A-98D3-94F87EAEFC05}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E8E79EDE-99F0-4583-A731-3EF7A49FB7EC}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E9CFE8FD-1CE1-4801-A442-B711593AD5DB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E9F83DAC-BB0F-4DD4-B0D9-E78664DA2971}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{E9FE320F-3E1A-4F77-AF82-997EA1DC884E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EAEE272D-ABFC-43BC-801A-1802A4F083C9}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EB0957F2-98CD-4AF6-9428-FFE221DA6102}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EB5638C2-E65E-42C6-80FE-623018C298A1}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EB965298-EE9C-4C6D-99C1-6F09A0283639}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EB9D12D7-6EA2-4088-8C6A-0A2DEAB9201D}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EBB5C936-0A1C-458D-B301-125556B483BF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EC18A93B-C972-4D1A-A535-C36AC36973C4}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EC4414F6-C858-4035-9161-DCD597BE4115}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EC502B1B-E644-45B0-9E19-4DACC5F0262F}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EDDCF64A-8FF9-4C13-B4E7-5B10F1F65C2B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EDFAD1FB-00D0-4FC0-8A90-E58CDB5D08CF}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EE3056F9-FB40-4C41-A43C-ECCEB16AAFAB}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EEE2B49A-F093-4BA6-92CF-21D7FCE94174}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EF095B0F-7598-4405-91E9-632817FC4EC0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EF5C5742-1481-4D6B-818E-B43B8CF6B1D8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{EFABB417-7774-4BCE-9969-B87F662D624A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F02E7C76-F75A-4C4B-9EC7-DDE7DE5B27E0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F0B8F2C5-2EA5-47D2-BF60-06C6D7D13979}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F1144CD1-F7A8-4B31-846D-A672D31E7CA0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F19E884E-0634-4921-BE65-AD1292EEDB48}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F2230F76-AC5A-4A34-80CE-A5FB23291009}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F22B72A9-978A-4912-92E0-D97F90EAD019}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F2CE9FE0-7378-469C-8506-12C8EFFB4225}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F3B6BD59-8C92-4735-85D3-18C430C17266}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F423CCA5-3DDB-457E-AAFA-F933708EE1FA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F52E778E-0E09-4E36-9B2E-D216F2C55CFA}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F5362FD7-F639-4DE8-9D50-A4BAA3EFA308}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F5AE5AA8-F528-483A-A3DC-73DC03EC08B7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F62BC9DD-0867-47E0-AC19-3DD8154B3366}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F65D0244-797C-4218-A7F5-7F1E97110FD7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F66444C8-9261-433A-ADCB-FC217CD9F890}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F6C43428-F3D6-44F3-9A18-63CB0F698212}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F73861AD-3932-421D-83A8-9B14C9FEAD89}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F78391AF-534B-445B-A8CC-C6189315878A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F7F14741-23D5-4C7E-BC1E-660EB77798D7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F840B86A-A97E-497E-9EF3-254C76C0E5B9}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F86A9253-936E-4E60-9D61-8E3C8AB9042B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F91B50AC-42B7-4D0B-AD5C-6A3ACACF4677}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{F9766F24-4212-41F3-A193-F222F8C9D658}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FA69AF3F-585F-47D8-BE05-F726A8A4B976}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FB0AA5DC-9D7D-4F1B-BB7E-202FBD867872}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FB764668-200D-4AEF-A82C-B17F7370425A}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FBECB0EE-6CBA-4B0E-9C50-79986BCF34A3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FBF349AA-F8EA-4816-B21B-F33F5B39D6F4}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FC5C5587-6717-4822-9403-274214E86523}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FC9D2833-0FB8-4DB4-BF23-B8F30E80B48E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FCA346D2-DD24-4133-A37C-361C56805BB8}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FCC86B0A-6BA5-4ED2-A350-12FD7F37057E}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FD03DA92-90A5-4A70-A21A-7C426A0A5662}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FD3B78AB-F2AD-4578-88F6-B720BD3CA534}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FD5B2076-DADE-4CDA-BF5E-7B1BB5DA8AF0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FE169788-7935-4D59-9A25-90A41843C61B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FE23442B-EBCA-4112-85B1-AC61807BA8C7}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FE2572C5-ABD5-4FD0-B5C5-3F02C8D16F19}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FE345A85-C223-40A7-8A5B-82FB49CE8620}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FE4C9BB4-730C-4A6A-A2F6-B001AC7C1088}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FEC4DA8D-E225-47B6-AD39-F61D06DFE74C}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FF008AB6-F5DE-4EAA-86CD-C968E53C5187}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FF01033B-50EF-4C97-8E6C-42DFD2C0FD4B}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FF4FE696-B672-4DFD-9B55-366455073129}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FF54C020-6649-4BF3-A7AA-F31CC923B6A3}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FFB2FB1A-FA54-46E4-8B9F-D54DDE2FB7A0}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FFBBC0CA-F5B4-4081-B8CB-C56B6E2D4410}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FFBDFB02-BC76-4641-B617-B5B5F96F97FE}
Successfully deleted: [Empty Folder] C:\Users\Tim\appdata\local\{FFDAAD0E-AD41-4A90-9123-A083699A4340}
Successfully deleted: [Folder] "C:\ProgramData\ask"



~~~ FireFox

Successfully deleted: [File] C:\user.js
Successfully deleted: [File] C:\Users\Tim\AppData\Roaming\mozilla\firefox\profiles\f28gjs0z.default\user.js
Successfully deleted: [File] C:\Users\Tim\AppData\Roaming\mozilla\firefox\profiles\i1p3xebi.default-1365779578448\user.js
Successfully deleted: [File] C:\Users\Tim\AppData\Roaming\mozilla\firefox\profiles\f28gjs0z.default\invalidprefs.js
Successfully deleted: [File] C:\Users\Tim\AppData\Roaming\mozilla\firefox\profiles\f28gjs0z.default\searchplugins\babylon.xml
Successfully deleted: [File] C:\Users\Tim\AppData\Roaming\mozilla\firefox\profiles\f28gjs0z.default\searchplugins\browserprotect.xml
Successfully deleted: [File] C:\Users\Tim\AppData\Roaming\mozilla\firefox\profiles\f28gjs0z.default\searchplugins\delta.xml
Successfully deleted: [Folder] C:\Users\Tim\AppData\Roaming\mozilla\firefox\profiles\f28gjs0z.default\extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c}
Failed to delete: [Folder] C:\Users\Tim\AppData\Roaming\mozilla\firefox\profiles\i1p3xebi.default-1365779578448\extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c}
Successfully deleted the following from C:\Users\Tim\AppData\Roaming\mozilla\firefox\profiles\f28gjs0z.default\prefs.js

user_pref("aol_toolbar.default.homepage.check", false);
user_pref("aol_toolbar.default.search.check", false);
user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
user_pref("browser.search.defaulturl", "hxxp://search.gboxapp.com/?pid=388&src=ff2&r=2013/03/18&hid=394711163&lg=EN&cc=SE&q=");
user_pref("extensions.509ff55d172ae.scode", "(function(){try{if('aol.com,mail.google.com,premiumreports.info,search.babylon.com,search.gboxapp.com'.indexOf(window.self.locatio
user_pref("extensions.BabylonToolbar.admin", false);
user_pref("extensions.BabylonToolbar.aflt", "babsst");
user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
user_pref("extensions.BabylonToolbar.autoRvrt", "false");
user_pref("extensions.BabylonToolbar.babExt", "");
user_pref("extensions.BabylonToolbar.babTrack", "affID=111147&tt=100612_513");
user_pref("extensions.BabylonToolbar.bbDpng", 10);
user_pref("extensions.BabylonToolbar.dfltLng", "en");
user_pref("extensions.BabylonToolbar.dfltSrch", false);
user_pref("extensions.BabylonToolbar.excTlbr", false);
user_pref("extensions.BabylonToolbar.ffxUnstlRst", true);
user_pref("extensions.BabylonToolbar.hmpg", false);
user_pref("extensions.BabylonToolbar.id", "a483e8490000000000004487fcf7f4d3");
user_pref("extensions.BabylonToolbar.instlDay", "15820");
user_pref("extensions.BabylonToolbar.instlRef", "sst");
user_pref("extensions.BabylonToolbar.lastDP", 10);
user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1716:54:57");
user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "13.0");
user_pref("extensions.BabylonToolbar.newTab", false);
user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb");
user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
user_pref("extensions.BabylonToolbar.propectorlck", 77900321);
user_pref("extensions.BabylonToolbar.prtkDS", 0);
user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
user_pref("extensions.BabylonToolbar.ptch_0717", true);
user_pref("extensions.BabylonToolbar.rvrt", "false");
user_pref("extensions.BabylonToolbar.smplGrp", "none");
user_pref("extensions.BabylonToolbar.srcExt", "def");
user_pref("extensions.BabylonToolbar.tlbrId", "base");
user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=a483e8490000000000004487fcf7f4d3&q=");
user_pref("extensions.BabylonToolbar.vrsn", "1.8.11.10");
user_pref("extensions.BabylonToolbar.vrsnTs", "1.8.11.1016:17:32");
user_pref("extensions.BabylonToolbar.vrsni", "1.8.11.10");
user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
user_pref("extensions.BabylonToolbar_i.babExt", "");
user_pref("extensions.BabylonToolbar_i.babTrack", "affID=119585");
user_pref("extensions.BabylonToolbar_i.hardId", "a483e849000000000000001e2a44e89f");
user_pref("extensions.BabylonToolbar_i.id", "a483e849000000000000001e2a44e89f");
user_pref("extensions.BabylonToolbar_i.instlDay", "15517");
user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
user_pref("extensions.BabylonToolbar_i.newTab", true);
user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=112062&tt=060612_8_&babsrc=NT_ss&mntrId=a483e849000000000000001e2a44e89f");
user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1713:29:57");
user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
user_pref("extensions.adapter@babylontc.com.install-event-fired", true);
user_pref("extensions.addon@defaulttab.com.install-event-fired", true);
user_pref("extensions.delta.admin", false);
user_pref("extensions.delta.aflt", "babsst");
user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
user_pref("extensions.delta.autoRvrt", "false");
user_pref("extensions.delta.dfltLng", "en");
user_pref("extensions.delta.excTlbr", false);
user_pref("extensions.delta.ffxUnstlRst", true);
user_pref("extensions.delta.id", "a483e8490000000000004487fcf7f4d3");
user_pref("extensions.delta.instlDay", "15853");
user_pref("extensions.delta.instlRef", "sst");
user_pref("extensions.delta.newTab", false);
user_pref("extensions.delta.prdct", "delta");
user_pref("extensions.delta.prtnrId", "delta");
user_pref("extensions.delta.rvrt", "false");
user_pref("extensions.delta.smplGrp", "none");
user_pref("extensions.delta.tlbrId", "base");
user_pref("extensions.delta.tlbrSrchUrl", "");
user_pref("extensions.delta.vrsn", "1.8.21.5");
user_pref("extensions.delta.vrsnTs", "1.8.21.521:07:30");
user_pref("extensions.delta.vrsni", "1.8.21.5");
user_pref("extensions.delta_i.babExt", "");
user_pref("extensions.delta_i.babTrack", "affID=44444&tt=gc_");
user_pref("extensions.delta_i.srcExt", "ss");
user_pref("extensions.ffxtlbr@babylon.com.install-event-fired", true);
user_pref("extensions.ffxtlbr@delta.com.install-event-fired", true);
user_pref("extensions.helperbar.SmartbarDisabled", false);
user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
user_pref("extensions.m3ffxtbr@mywebsearch.com.install-event-fired", true);
user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensearch.jhtml?id=GRxdm239YYSE&ptnrS=GRxdm239YYSE&si=71080&ptb=84wSUChNKTiw4y6mJ
user_pref("extensions.mywebsearch.prevKwdEnabled", true);
user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://search.avg.com/route/?d=4d8f4d25&v=6.103.018.001&i=26&tp=ab&iy=&ychte=se&lng=sv-SE&q=");
user_pref("extensions.ocr@babylon.com.install-event-fired", true);
user_pref("extensions.toolbar@ask.com.install-event-fired", true);
user_pref("keyword.URL", "hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_4&hsimp=yhs-lavasoft&ent=bs&q=");
user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://search.gboxapp.com/?pid=388&src=ff1&r=2013/03/18&hid=394711163&lg=EN&cc=SE");
user_pref("sweetim.toolbar.previous.keyword.URL", "");
user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ".*");
user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "1");
user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "1");
user_pref("sweetim.toolbar.searchguard.enable", "false");
Emptied folder: C:\Users\Tim\AppData\Roaming\mozilla\firefox\profiles\f28gjs0z.default\minidumps [267 files]



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Tim\appdata\local\Google\Chrome\User Data\Default\Extensions\jplinpmadfkdgipabgcdchbdikologlh
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\clbfjfbnelcflpgpklppgplejolacbej
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\jplinpmadfkdgipabgcdchbdikologlh



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 2013-11-19 at  9:20:46,73
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

Thank you in advance! :D



#9 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:11:56 AM

Posted 19 November 2013 - 11:36 AM

Please run the following:

 

Please download Malwarebytes Anti-Malware

  • Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.

  • If an update is found, it will download and install the latest version.

  • Once the program has loaded, select "Perform Quick Scan", then click Scan.

  • The scan may take some time to finish, so please be patient.

  • When the scan is complete, click OK, then Show Results to view the results.

  • Make sure that everything is checked, and click Remove Selected. <-- very important

  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)

  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.

  • Copy&Paste the entire report in your next reply.

 

Extra Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.

 

 

NEXT

 

Go here to run an online scanner from ESET.

  • Turn off the real time scanner of any existing antivirus program while performing the online scan

  • Tick the box next to YES, I accept the Terms of Use.

  • Click Start

  • When asked, allow the activeX control to install

  • Click Start
  • Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked.

  • Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.

  • Click Scan

  • Wait for the scan to finish

  • When the scan completes,  if it shows a screen that says "Threats found!", then click "List of found threats" button

  • Press EXPORT TO TEXT FILE , name the file ESETSCAN and save it to your desktop

  • Include the contents of this report in your next reply.

  • Press the BACK button.

  • Press Finish


Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#10 TimL

TimL
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:56 PM

Posted 19 November 2013 - 11:55 AM

My Malwarbytes text. (sorry i for it being in swedish)

 

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Databasversion: v2013.11.13.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Tim :: TIM-DATOR [administratör]

2013-11-19 17:43:38
mbam-log-2013-11-19 (17-43-38).txt

Skanningstyp: Snabbskanning
Aktiverade skanningsalternativ: Minne | Start | Register | Filsystem | Heuristik/Extra | Heuristik/Shuriken | PUP | PUM
Inaktiverade skanningsalternativ: P2P
Antal skannade objekt: 264571
Förfluten tid: 10 minut(er), 53 sekund(er)

Upptäckta minnesprocesser: 0
(Inga skadliga poster hittades)

Upptäckta minnesmoduler: 0
(Inga skadliga poster hittades)

Upptäckta registernycklar: 0
(Inga skadliga poster hittades)

Upptäckta registervärden: 0
(Inga skadliga poster hittades)

Upptäckta registerdataposter: 0
(Inga skadliga poster hittades)

Upptäckta mappar: 2
C:\ProgramData\InstallMate\OptimizerPro (PUP.Optional.OptimizerPro.A) -> Sattes i karantän och togs bort.
C:\ProgramData\InstallMate\OptimizerPro\580F777B82DCC64C (PUP.Optional.OptimizerPro.A) -> Sattes i karantän och togs bort.

Upptäckta filer: 3
C:\ProgramData\InstallMate\OptimizerPro\Setup.exe (PUP.Optional.OptimizerPro.A) -> Sattes i karantän och togs bort.
C:\ProgramData\InstallMate\OptimizerPro\Setup.ico (PUP.Optional.OptimizerPro.A) -> Sattes i karantän och togs bort.
C:\ProgramData\InstallMate\OptimizerPro\TsuDll.dll (PUP.Optional.OptimizerPro.A) -> Sattes i karantän och togs bort.

(klar)
 



#11 TimL

TimL
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:56 PM

Posted 19 November 2013 - 03:49 PM

My esetscan:

 

C:\FRST\Quarantine\788c2f1f-cb3f-4407-9e71-d0533adf0af0.exe    multiple threats
C:\FRST\Quarantine\bitool.dll    Win32/Somoto.C application
C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll    a variant of Win32/Toolbar.Visicom.B application
C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawaretb.dll    a variant of Win32/Toolbar.Visicom.A application
C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\dtUser.exe    a variant of Win32/Toolbar.Visicom.C application
C:\Qoobox\Quarantine\C\ProgramData\wxDownload\509ff58fab292.html.vir    Win32/Adware.MultiPlug.H application
C:\Users\Gäst\AppData\Roaming\Mozilla\Firefox\Profiles\8avg1oa4.default\extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c}\dtUser.exe    a variant of Win32/Toolbar.Visicom.C application
C:\Users\Tim\AppData\Roaming\AVG\Rescue\PC Tuneup 2011\120318085405737.rsc    multiple threats
C:\Users\Tim\Downloads\cdbxp_setup_4.5.2.4291.exe    Win32/OpenCandy application
C:\Windows\FixCamera.exe    a variant of Win32/KillProc.B application
 



#12 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:11:56 AM

Posted 20 November 2013 - 05:53 AM

Please run the following:

 

 

  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below.

  • They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".

     

Copy/paste the text inside the Codebox below into notepad:

 

Here's how to do that:

Press the WinKey + R to open a run box, type Notepad > click OK.

This will open an empty notepad file:

 

Copy all the text inside of the code box - Press Ctrl+C (or right click on the highlighted section and choose 'copy')

 

File::
C:\Users\Gäst\AppData\Roaming\Mozilla\Firefox\Profiles\8avg1oa4.default\extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c}\dtUser.exe 
C:\Users\Tim\AppData\Roaming\AVG\Rescue\PC Tuneup 2011\120318085405737.rsc 
C:\Users\Tim\Downloads\cdbxp_setup_4.5.2.4291.exe 
 
ClearJavaCache::

 

Now paste the copied text into the open notepad - press CTRL+V (or right click and choose 'paste')

Save this file to your desktop, Save this as "CFScript"

 

Here's how to do that:

 

1.Click File;

2.Click Save As... Change the directory to your desktop;

3.Change the Save as type to "All Files";

4.Type in the file name: CFScript

5.Click Save ...

 

CFScriptB-4.gif

  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.

  • ComboFix may request an update; please allow it.

  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.

  • When finished, it shall produce a log for you.

  • Copy and paste the contents of the log in your next reply.

 

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.

 

 

NEXT

 

Please advise how the computer is running now and if there are any outstanding issues.


Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#13 TimL

TimL
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:56 PM

Posted 20 November 2013 - 06:40 AM

ComboFix 13-11-19.01 - Tim 2013-11-20  11:59:23.2.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.46.1053.18.4023.2001 [GMT 1:00]
Körs från: c:\users\Tim\Desktop\ComboFix.exe
Kommandoväxlar som använts :: c:\users\Tim\Desktop\CFScript.txt
AV: AVG AntiVirus Free Edition 2014 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
.
FILE ::
"c:\users\Gäst\AppData\Roaming\Mozilla\Firefox\Profiles\8avg1oa4.default\extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c}\dtUser.exe"
"c:\users\Tim\AppData\Roaming\AVG\Rescue\PC Tuneup 2011\120318085405737.rsc"
"c:\users\Tim\Downloads\cdbxp_setup_4.5.2.4291.exe"
.
.
((((((((((((((((((((((((   Filer skapade från 2013-10-20 till 2013-11-20  ))))))))))))))))))))))))))))))
.
.
2013-11-20 11:17 . 2013-11-20 11:17    --------    d-----w-    c:\users\Gäst\AppData\Local\temp
2013-11-20 11:17 . 2013-11-20 11:17    --------    d-----w-    c:\users\Default\AppData\Local\temp
2013-11-19 16:57 . 2013-11-19 16:57    --------    d-----w-    c:\program files (x86)\ESET
2013-11-19 08:36 . 2013-11-19 09:01    --------    d-----w-    c:\users\Tim\AppData\Local\adawarebp
2013-11-19 08:26 . 2013-11-19 08:31    --------    d-----w-    C:\AdwCleaner
2013-11-19 08:14 . 2013-11-19 08:14    --------    d-----w-    c:\windows\ERUNT
2013-11-16 17:46 . 2013-11-16 17:46    --------    d-----w-    c:\users\Tim\AppData\Roaming\Lavasoft
2013-11-15 17:49 . 2013-11-15 17:49    --------    d-----w-    C:\FRST
2013-11-13 15:18 . 2013-11-13 15:26    --------    d-----w-    c:\users\Tim\AppData\Local\PMB Files
2013-11-13 15:18 . 2013-11-13 15:18    --------    d-----w-    c:\programdata\PMB Files
2013-11-13 15:18 . 2013-11-13 15:18    --------    d-----w-    c:\program files (x86)\Pando Networks
2013-11-13 15:17 . 2013-11-14 18:04    --------    d-----w-    c:\users\Tim\AppData\Roaming\Riot Games
2013-11-13 15:15 . 2013-11-13 15:15    --------    d-----w-    c:\program files (x86)\LogMeIn Hamachi
2013-11-12 18:14 . 2013-11-12 18:14    --------    d-----w-    c:\users\Tim\AppData\Local\NVIDIA Corporation
2013-11-12 18:12 . 2013-11-12 18:12    --------    d-----w-    c:\users\Tim\AppData\Local\NVIDIA
2013-11-11 07:59 . 2013-11-11 07:59    590112    ----a-w-    c:\windows\SysWow64\nvStreaming.exe
2013-11-03 01:30 . 2013-11-03 01:30    75888    ----a-w-    c:\programdata\Microsoft\Windows Defender\Definition Updates\{5E4E10AC-7B83-45AD-BA68-2EA6F03B96AF}\offreg.dll
2013-11-02 08:51 . 2013-11-02 08:51    --------    d-----w-    c:\program files\Lavasoft
2013-11-01 22:21 . 2013-11-01 22:27    --------    d-----w-    c:\users\Tim\AppData\Roaming\FreeBurner
2013-11-01 22:21 . 2011-09-28 08:20    40960    ----a-w-    c:\windows\SysWow64\SSubTmr6.dll
2013-11-01 22:21 . 2011-09-28 08:20    32768    ----a-w-    c:\windows\SysWow64\CMDLGFR.DLL
2013-11-01 22:21 . 2011-09-28 08:20    15360    ----a-w-    c:\windows\SysWow64\inetfr.DLL
2013-11-01 22:21 . 2011-09-28 08:20    152848    ----a-w-    c:\windows\SysWow64\COMDLG32.OCX
2013-11-01 22:21 . 2011-09-28 08:20    141312    ----a-w-    c:\windows\SysWow64\MSCMCFR.DLL
2013-11-01 22:21 . 2011-09-28 08:20    119568    ----a-w-    c:\windows\SysWow64\VB6FR.DLL
2013-11-01 22:21 . 2011-09-28 08:20    101888    ----a-w-    c:\windows\SysWow64\VB6STKIT.DLL
2013-11-01 22:13 . 2013-11-01 22:28    --------    d-----w-    c:\program files (x86)\Free Easy CD DVD Burner
2013-11-01 20:51 . 2013-11-01 20:51    --------    d-----w-    c:\programdata\Canneverbe Limited
2013-11-01 20:51 . 2013-11-01 20:51    --------    d-----w-    c:\users\Tim\AppData\Roaming\Canneverbe Limited
2013-11-01 20:14 . 2013-10-16 00:20    10280728    ----a-w-    c:\programdata\Microsoft\Windows Defender\Definition Updates\{5E4E10AC-7B83-45AD-BA68-2EA6F03B96AF}\mpengine.dll
2013-11-01 19:29 . 2013-11-01 19:29    --------    d-----w-    c:\program files\Common Files\Lavasoft
2013-11-01 15:37 . 2013-11-01 15:37    --------    d-----w-    c:\users\Tim\AppData\Local\DriverTuner
2013-10-29 20:24 . 2013-11-08 20:47    1064224    ----a-w-    c:\windows\system32\nvspcap64.dll
2013-10-29 20:24 . 2013-11-08 20:47    955168    ----a-w-    c:\windows\SysWow64\nvspcap.dll
2013-10-29 20:23 . 2013-10-29 20:23    --------    d-----w-    c:\program files (x86)\AGEIA Technologies
2013-10-29 20:22 . 2013-11-11 14:08    --------    d-----w-    c:\users\UpdatusUser
2013-10-29 20:19 . 2013-09-27 23:01    39200    ----a-w-    c:\windows\system32\drivers\nvvad64v.sys
2013-10-29 20:19 . 2013-09-27 23:01    29984    ----a-w-    c:\windows\system32\nvaudcap64v.dll
2013-10-29 20:19 . 2013-09-27 23:01    28960    ----a-w-    c:\windows\SysWow64\nvaudcap32v.dll
2013-10-29 20:18 . 2013-06-16 12:38    31520    ----a-w-    c:\windows\system32\nvhdap64.dll
2013-10-29 20:18 . 2013-06-16 12:38    196384    ----a-w-    c:\windows\system32\drivers\nvhda64v.sys
2013-10-29 20:18 . 2013-01-29 08:35    1510176    ----a-w-    c:\windows\system32\nvhdagenco64.dll
2013-10-29 20:18 . 2013-11-14 11:56    18293608    ----a-w-    c:\windows\system32\nvwgf2umx.dll
2013-10-29 20:18 . 2013-10-23 10:30    1884448    ----a-w-    c:\windows\system32\nvdispco6433165.dll
2013-10-29 20:18 . 2013-10-23 10:30    1511712    ----a-w-    c:\windows\system32\nvdispgenco6433165.dll
2013-10-29 19:28 . 2013-10-29 19:29    --------    d-----w-    c:\users\Tim\AppData\Roaming\Tunngle
2013-10-29 17:17 . 2013-10-29 17:19    --------    d-----w-    c:\program files (x86)\Return to Castle Wolfenstein
2013-10-29 17:14 . 2001-06-19 16:53    266293    ----a-w-    c:\windows\SysWow64\temp.000
2013-10-29 10:42 . 2013-10-29 10:43    --------    d-----w-    c:\program files (x86)\Terraria
2013-10-28 16:03 . 2013-10-28 16:04    --------    d-----w-    c:\program files\Microsoft IntelliType Pro
2013-10-27 14:51 . 2013-10-27 14:51    --------    d-----w-    c:\programdata\Package Cache
2013-10-27 12:40 . 2013-10-27 12:40    --------    d-----w-    c:\programdata\Oracle
2013-10-27 12:40 . 2013-10-27 12:40    --------    d-----w-    c:\program files (x86)\Common Files\Java
2013-10-27 12:39 . 2013-10-08 06:50    96168    ----a-w-    c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-10-26 20:22 . 2013-10-26 20:22    --------    d-----w-    c:\users\Tim\AppData\Local\The Lord of the Rings Online
2013-10-26 07:43 . 2013-10-26 20:17    --------    d-----w-    c:\users\Tim\AppData\Local\Turbine
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-17 11:54 . 2013-08-31 10:15    290184    ----a-w-    c:\windows\SysWow64\PnkBstrB.exe
2013-11-17 11:54 . 2011-12-10 10:37    290184    ----a-w-    c:\windows\SysWow64\PnkBstrB.xtr
2013-11-17 11:54 . 2013-08-31 10:15    280904    ----a-w-    c:\windows\SysWow64\PnkBstrB.ex0
2013-11-14 11:56 . 2012-10-10 20:22    15218504    ----a-w-    c:\windows\SysWow64\nvd3dum.dll
2013-11-14 11:56 . 2012-10-10 20:23    3069608    ----a-w-    c:\windows\system32\nvapi64.dll
2013-11-14 11:56 . 2012-10-10 20:22    2697248    ----a-w-    c:\windows\SysWow64\nvapi.dll
2013-11-11 15:02 . 2010-02-17 17:47    3490080    ----a-w-    c:\windows\system32\nvsvc64.dll
2013-11-11 15:02 . 2010-02-17 17:46    6674208    ----a-w-    c:\windows\system32\nvcpl.dll
2013-11-11 15:01 . 2010-02-17 17:47    922912    ----a-w-    c:\windows\system32\nvvsvc.exe
2013-11-11 15:01 . 2010-02-17 17:47    63776    ----a-w-    c:\windows\system32\nvshext.dll
2013-11-11 15:01 . 2010-02-17 17:47    2559776    ----a-w-    c:\windows\system32\nvsvcr.dll
2013-11-11 15:01 . 2010-02-17 17:47    219424    ----a-w-    c:\windows\system32\nvmctray.dll
2013-11-11 14:10 . 2012-07-24 08:39    46368    ----a-w-    c:\windows\system32\drivers\avgtpx64.sys
2013-10-27 14:50 . 2013-08-31 10:14    76888    ----a-w-    c:\windows\SysWow64\PnkBstrA.exe
2013-10-08 18:11 . 2012-04-03 06:58    692616    ----a-w-    c:\windows\SysWow64\FlashPlayerApp.exe
2013-10-08 18:11 . 2011-05-20 16:18    71048    ----a-w-    c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-25 19:07 . 2013-09-25 19:07    148792    ----a-w-    c:\windows\system32\drivers\avgdiska.sys
2013-09-20 13:45 . 2013-09-20 13:45    389120    ----a-w-    c:\windows\SysWow64\RegistryHelperLM.ocx
2013-09-14 07:40 . 2013-09-14 07:40    14456    ----a-w-    c:\windows\system32\drivers\gfibto.sys
2013-09-08 20:11 . 2013-09-08 20:11    31544    ----a-w-    c:\windows\system32\drivers\avgrkx64.sys
2013-09-07 14:41 . 2013-09-07 14:41    105808    ----a-w-    c:\windows\SysWow64\steam_api.dll
2013-09-03 13:35 . 2012-09-01 08:56    278800    ------w-    c:\windows\system32\MpSigStub.exe
2013-09-02 08:59 . 2013-09-02 08:59    212280    ----a-w-    c:\windows\system32\drivers\avgldx64.sys
2013-09-02 08:29 . 2013-09-02 08:29    294712    ----a-w-    c:\windows\system32\drivers\avgloga.sys
2013-09-02 08:26 . 2013-09-02 08:26    192824    ----a-w-    c:\windows\system32\drivers\avgidsha.sys
2013-09-02 08:26 . 2013-09-02 08:26    241464    ----a-w-    c:\windows\system32\drivers\avgidsdrivera.sys
2013-01-25 11:25 . 2013-01-25 11:26    11487232    ----a-w-    c:\program files (x86)\NETGEAR WG111v3 wireless USB 2.0 adapter.msi
.
.
(((((((((((((((((((((((((((((((((( Startpunkter i registret )))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Not* tomma poster & legitima standardposter visas inte.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-10-02 20474528]
"Spotify Web Helper"="c:\users\Tim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-10-17 1140736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVG_UI"="c:\program files (x86)\AVG\AVG2014\avgui.exe" [2013-10-07 4908592]
"Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2013-07-15 554384]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 vToolbarUpdater17.1.2;vToolbarUpdater17.1.2;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.2\ToolbarUpdater.exe;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.2\ToolbarUpdater.exe [x]
R3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe;c:\program files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]
R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [x]
R3 dump_wmimmc;dump_wmimmc;c:\gpotato.eu\Dragonica\Release\GameGuard\dump_wmimmc.sys;c:\gpotato.eu\Dragonica\Release\GameGuard\dump_wmimmc.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 gfiark;gfiark;c:\windows\system32\drivers\gfiark.sys;c:\windows\SYSNATIVE\drivers\gfiark.sys [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.130\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.130\McCHSvc.exe [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 RTL8187B;NETGEAR WG111v3 Wireless-G USB Adapter Win7 Driver;c:\windows\system32\DRIVERS\wg111v3.sys;c:\windows\SYSNATIVE\DRIVERS\wg111v3.sys [x]
R3 s1039bus;Sony Ericsson Device 1039 driver (WDM);c:\windows\system32\DRIVERS\s1039bus.sys;c:\windows\SYSNATIVE\DRIVERS\s1039bus.sys [x]
R3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1039mdfl.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mdfl.sys [x]
R3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1039mdm.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mdm.sys [x]
R3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1039mgmt.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mgmt.sys [x]
R3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1039nd5.sys;c:\windows\SYSNATIVE\DRIVERS\s1039nd5.sys [x]
R3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1039obex.sys;c:\windows\SYSNATIVE\DRIVERS\s1039obex.sys [x]
R3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1039unic.sys;c:\windows\SYSNATIVE\DRIVERS\s1039unic.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Aktiveringsteknologier för Windows-tjänst;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x]
R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]
R4 RsFx0105;RsFx0105 Driver;c:\windows\system32\DRIVERS\RsFx0105.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0105.sys [x]
R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE;c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys;c:\windows\SYSNATIVE\drivers\gfibto.sys [x]
S1 Avgdiska;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiska.sys;c:\windows\SYSNATIVE\DRIVERS\avgdiska.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys;c:\windows\SYSNATIVE\drivers\avgtpx64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 Greg_Service;GRegService;c:\program files (x86)\eMachines\Registration\GregHSRW.exe;c:\program files (x86)\eMachines\Registration\GregHSRW.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe [x]
S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 LavasoftAdAwareService11;Ad-Aware Service 11;c:\program files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareService.exe;c:\program files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareService.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 PasswordBox;PasswordBox;c:\program files (x86)\PasswordBox\pbbtnService.exe;c:\program files (x86)\PasswordBox\pbbtnService.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [x]
S2 Updater Service;Updater Service;c:\program files\eMachines\eMachines Updater\UpdaterService.exe;c:\program files\eMachines\eMachines Updater\UpdaterService.exe [x]
S2 VoddlerNet;VoddlerNet;c:\program files (x86)\voddler\service\voddler.exe;c:\program files (x86)\voddler\service\voddler.exe [x]
S3 gzflt;gzflt;c:\program files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys;c:\program files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
.
.
--- Övriga tjänster/drivrutiner i minnet ---
.
*Deregistered* - vwififlt
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-15 14:40    1210320    ----a-w-    c:\program files (x86)\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Innehåll i mappen 'Schemalagda aktiviteter':
.
2013-11-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 18:11]
.
2013-10-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cecb6045c391fb.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-25 15:31]
.
2013-11-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-25 15:31]
.
2013-07-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1966150783-2353473218-186421051-1000Core1ce83a996372090.job
- c:\users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-18 10:01]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-09-25 15:37    778704    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-09-25 15:37    778704    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-09-25 15:37    778704    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-09-25 15:37    778704    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-09-25 15:37    778704    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-09-25 15:37    778704    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1832760]
"SBRegRebootCleaner"="c:\program files (x86)\Ad-Aware Antivirus\SBRC.exe" [BU]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2009-11-05 2345848]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-11-08 1028384]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2013-11-08 1064224]
"AdAwareTray"="c:\program files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.0.4555.0\AdAwareTray.exe" [2013-10-18 2493272]
.
------- Extra genomsökning -------
.
uStart Page = hxxp://www.google.com
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=041d&m=et1862&r=17361210b306pe485v1k5r47m1s59s
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://search.toggle.com/?lang=sv&q={searchTerms}
uSearchAssistant = hxxp://www.google.com
IE: E&xportera till Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\f28gjs0z.default\
FF - prefs.js: browser.startup.homepage - google.se
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: 2013-11-01 20:48; {5C655500-E712-41e7-9349-CE462F844B19}; c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\f28gjs0z.default\extensions\{5C655500-E712-41e7-9349-CE462F844B19}.xpi
.
- - - - FÖRÄLDRALÖSA POSTER SOM TAGITS BORT - - - -
.
Toolbar-Locked - (no file)
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-Dll-Files Fixer_is1 - c:\program files (x86)\Dll-Files.com Fixer\unins000.exe
AddRemove-DriverAgent_is1 - c:\program files (x86)\eSupport.com\driveragent\unins000.exe
AddRemove-Toggle Downloader DAEMON Tools - c:\program files (x86)\Toggle Downloader\Toggle Downloader DAEMON Tools\Uninst Toggle Downloader DAEMON Tools.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va008]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008"
.
--------------------- LÅSTA REGISTERNYCKLAR ---------------------
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Control Panel\International\Time]
@Denied: (A) (Everyone)
"{65B37A38-59FD-4FD7-BCF0-269C3895F418}"=hex:38,7a,b3,65,fd,59,d7,4f,bc,f0,26,
   9c,38,95,f4,18,3b,3d,36,51,55,25,5f,41,38,3f,49,23,41,58,59,41,5d,39,40,58,\
"{92040D32-A672-48E6-9141-F9FF6EC81BB8}"=hex:32,0d,04,92,72,a6,e6,48,91,41,f9,
   ff,6e,c8,1b,b8,56,54,33,52,42,25,4b,5d,53,5b,46,23,45,5e,49,2a,52,39,59,40,\
"{6906DA54-8766-47C7-80C4-A120C57EA37A}"=hex:54,da,06,69,66,87,c7,47,80,c4,a1,
   20,c5,7e,a3,7a,4d,51,50,33,41,25,3c,5e,3e,49,45,23,5d,40,55,5e,56,39,2d,2f,\
"{B13CC3C4-FF42-4DA7-8DCD-C9D06677C761}"=hex:c4,c3,3c,b1,42,ff,a7,4d,8d,cd,c9,
   d0,66,77,c7,61,44,4e,4d,51,5e,25,5e,33,47,59,46,23,56,43,24,53,4b,39,58,2f,\
"{92FAA829-3A53-43C2-BBD6-736B7B149B48}"=hex:29,a8,fa,92,53,3a,c2,43,bb,d6,73,
   6b,7b,14,9b,48,52,57,5c,30,41,25,42,5a,53,3e,58,23,49,5d,40,57,4a,39,4c,2f,\
"{90DB4BDC-DDC8-422A-B565-1F53ADA13191}"=hex:dc,4b,db,90,c8,dd,2a,42,b5,65,1f,
   53,ad,a1,31,91,49,50,51,4c,51,25,31,52,4f,4d,4f,23,39,48,5a,50,43,39,47,42,\
"{A9A328D0-B470-4A1F-AD30-C5C16BD46FB5}"=hex:d0,28,a3,a9,70,b4,1f,4a,ad,30,c5,
   c1,6b,d4,6f,b5,55,46,46,5c,3f,25,3f,47,53,59,3f,23,59,4a,47,45,20,39,26,41,\
"{8E63DE8B-E136-4FD1-97BF-2A2B5D28E82C}"=hex:8b,de,63,8e,36,e1,d1,4f,97,bf,2a,
   2b,5d,28,e8,2c,50,40,55,4b,55,25,41,5d,5d,44,59,23,3b,41,56,42,5e,39,46,51,\
"{FD009ACE-592E-451F-8F3C-0746241D1941}"=hex:ce,9a,00,fd,2e,59,1f,45,8f,3c,07,
   46,24,1d,19,41,5b,31,46,32,45,25,48,33,48,5f,39,23,43,46,5b,5c,46,39,56,5b,\
"{83655CAC-B7C0-4CAF-B057-6BE15D2A9B61}"=hex:ac,5c,65,83,c0,b7,af,4c,b0,57,6b,
   e1,5d,2a,9b,61,48,33,40,54,3f,25,50,40,5a,40,35,23,3b,25,5c,5f,2b,39,4f,45,\
"{EE891EF8-08DA-4645-8A01-23A9BC8A68B2}"=hex:f8,1e,89,ee,da,08,45,46,8a,01,23,
   a9,bc,8a,68,b2,4b,57,43,33,53,25,5c,4d,38,58,3f,23,58,5d,40,59,25,39,59,45,\
"{55ECDCDB-FCFE-42A0-A51F-621756D1A480}"=hex:db,dc,ec,55,fe,fc,a0,42,a5,1f,62,
   17,56,d1,a4,80,3b,3c,3d,52,41,25,50,4c,45,40,58,23,5b,5d,42,25,50,39,57,43,\
"{7B0D3076-B2AB-4CA4-9F48-24A4207DFFB7}"=hex:76,30,0d,7b,ab,b2,a4,4c,9f,48,24,
   a4,20,7d,ff,b7,4f,42,3d,42,5d,25,4c,33,4c,46,3e,23,5a,48,5f,44,5d,39,52,58,\
"{91AB175C-D0E1-4391-A739-03D5D07A7505}"=hex:5c,17,ab,91,e1,d0,91,43,a7,39,03,
   d5,d0,7a,75,05,4e,3c,4e,40,54,25,50,42,5f,44,54,23,58,26,53,4b,50,39,50,55,\
"{11C09842-018D-4D79-A8FA-4B9BA6DD6A8C}"=hex:42,98,c0,11,8d,01,79,4d,a8,fa,4b,
   9b,a6,dd,6a,8c,31,4a,32,3e,49,25,4a,4f,4c,4d,59,23,38,57,44,56,56,39,57,4c,\
"{37BC45AB-38E3-4469-BF82-39158B83E3A3}"=hex:ab,45,bc,37,e3,38,69,44,bf,82,39,
   15,8b,83,e3,a3,5b,53,55,55,45,25,4c,39,4c,4a,4f,23,5b,5b,56,25,47,39,54,44,\
"{9419340D-43ED-46EE-9DD5-6D81600FFA6E}"=hex:0d,34,19,94,ed,43,ee,46,9d,d5,6d,
   81,60,0f,fa,6e,42,48,42,5f,40,25,4a,32,5f,46,3a,23,44,27,25,50,47,39,58,20,\
"{B8550CB4-F0C8-456B-8576-7FC70AA57CDF}"=hex:b4,0c,55,b8,c8,f0,6b,45,85,76,7f,
   c7,0a,a5,7c,df,55,4c,57,55,4c,25,53,38,41,5d,5a,23,44,23,24,59,42,39,23,53,\
"{CE32B99E-971D-4BED-BD22-370684C12F19}"=hex:9e,b9,32,ce,1d,97,ed,4b,bd,22,37,
   06,84,c1,2f,19,48,37,5f,53,57,25,4d,3f,4d,5c,4a,23,4b,53,5d,57,50,39,26,5d,\
"{12377A4C-3E98-45EF-9032-16B0717CF970}"=hex:4c,7a,37,12,98,3e,ef,45,90,32,16,
   b0,71,7c,f9,70,31,55,53,40,5e,25,30,4e,5d,5b,39,23,5b,52,24,42,59,39,53,51,\
"{3FA0A203-34BB-4C9E-B826-A03BBF2B3C97}"=hex:03,a2,a0,3f,bb,34,9e,4c,b8,26,a0,
   3b,bf,2b,3c,97,5b,5d,40,4b,44,25,58,33,3c,4e,5b,23,37,5c,27,26,56,39,58,25,\
"{0879BEA0-3C99-464F-B9B3-3575EA22A53E}"=hex:a0,be,79,08,99,3c,4f,46,b9,b3,35,
   75,ea,22,a5,3e,49,48,4d,40,34,25,3d,5e,3f,5f,4e,23,3b,43,47,58,59,39,40,55,\
"{4F585855-3A90-489F-B973-E360C74C5B0A}"=hex:55,58,58,4f,90,3a,9f,48,b9,73,e3,
   60,c7,4c,5b,0a,50,4f,56,40,53,25,43,4b,33,40,4a,23,39,48,49,26,5f,39,26,5b,\
"{D87BA9F8-EB63-4FA8-B2FC-9BACDA88B7E1}"=hex:f8,a9,7b,d8,63,eb,a8,4f,b2,fc,9b,
   ac,da,88,b7,e1,5b,46,54,48,31,25,53,50,47,5f,49,23,39,58,40,5f,56,39,4d,22,\
"{8F43CC12-03BA-497D-8AC0-3D81DD3AC5EF}"=hex:12,cc,43,8f,ba,03,7d,49,8a,c0,3d,
   81,dd,3a,c5,ef,4f,43,36,45,33,25,4f,53,5b,4f,5d,23,44,54,57,54,43,39,44,5c,\
"{36509D28-6C1F-490A-B46F-F88B32685910}"=hex:28,9d,50,36,1f,6c,0a,49,b4,6f,f8,
   8b,32,68,59,10,52,4f,50,50,46,25,3d,48,3f,38,5d,23,3c,53,50,24,59,39,56,52,\
"{746E3D8C-06AE-44E9-9D14-85F09D037FB3}"=hex:8c,3d,6e,74,ae,06,e9,44,9d,14,85,
   f0,9d,03,7f,b3,41,48,4b,4d,3e,25,45,5c,47,4d,58,23,47,57,28,43,24,39,5b,41,\
"{64E1C408-505D-445E-B834-0323D5557CC5}"=hex:08,c4,e1,64,5d,50,5e,44,b8,34,03,
   23,d5,55,7c,c5,46,53,49,51,31,25,41,3d,43,49,34,23,3d,5e,23,59,41,39,54,4f,\
"{DC6683BD-2F8A-42CE-A784-05E1A2AD8921}"=hex:bd,83,66,dc,8a,2f,ce,42,a7,84,05,
   e1,a2,ad,89,21,34,51,33,35,55,25,3e,4b,5d,54,5c,23,43,28,29,2b,5b,39,58,2f,\
"{97EB4186-4771-40D0-87CB-25B584E787F8}"=hex:86,41,eb,97,71,47,d0,40,87,cb,25,
   b5,84,e7,87,f8,40,51,36,53,41,25,3c,5d,33,5c,4a,23,3b,56,49,20,59,39,5e,25,\
"{D58EA0E2-FB1B-45A1-9D1D-090F3C1A88F3}"=hex:e2,a0,8e,d5,1b,fb,a1,45,9d,1d,09,
   0f,3c,1a,88,f3,31,3c,5f,40,51,25,51,5b,5b,5e,4b,23,57,22,5b,42,59,39,26,47,\
"{F11540C9-EA60-4096-BD95-2F50B4EA874B}"=hex:c9,40,15,f1,60,ea,96,40,bd,95,2f,
   50,b4,ea,87,4b,50,52,30,51,4b,25,4b,39,3c,41,4b,23,47,27,43,46,24,39,52,2e,\
"{F4087A74-1BC8-4035-ABD1-F0F064750D02}"=hex:74,7a,08,f4,c8,1b,35,40,ab,d1,f0,
   f0,64,75,0d,02,59,46,4e,33,46,25,4f,39,32,58,45,23,5d,51,5f,45,2b,39,4c,42,\
"{D96A526A-22E2-4452-B0E8-0DA1F3747AF5}"=hex:6a,52,6a,d9,e2,22,52,44,b0,e8,0d,
   a1,f3,74,7a,f5,52,3d,40,4d,41,25,48,3c,4c,5e,4f,23,3b,24,26,59,40,39,5f,2f,\
"{A0EA985C-B282-4E35-B45C-C3ECE46DC57E}"=hex:5c,98,ea,a0,82,b2,35,4e,b4,5c,c3,
   ec,e4,6d,c5,7e,52,4e,4d,51,4c,25,47,38,4d,4a,46,23,3b,25,50,26,47,39,53,4f,\
"{780CCBF0-3F69-414B-AEAE-3595938E5A70}"=hex:f0,cb,0c,78,69,3f,4b,41,ae,ae,35,
   95,93,8e,5a,70,55,53,57,52,5f,25,59,48,52,3e,40,23,39,29,56,4b,49,39,52,5a,\
"{EA918AC1-2E4C-4AAE-B4DA-971D5C97C4FF}"=hex:c1,8a,91,ea,4c,2e,ae,4a,b4,da,97,
   1d,5c,97,c4,ff,55,42,41,4b,44,25,4e,44,47,5b,4f,23,5b,22,5d,25,58,39,4c,42,\
"{2F6881FE-C449-427C-A9E6-7078FBF2D490}"=hex:fe,81,68,2f,49,c4,7c,42,a9,e6,70,
   78,fb,f2,d4,90,36,56,32,3e,40,25,43,46,3e,49,54,23,3b,58,52,48,46,39,44,23,\
"{5B73420A-B228-4569-9CAB-23239A05D666}"=hex:0a,42,73,5b,28,b2,69,45,9c,ab,23,
   23,9a,05,d6,66,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
"{3B3186E7-DEF7-4176-88BB-CF733E24D038}"=hex:e7,86,31,3b,f7,de,76,41,88,bb,cf,
   73,3e,24,d0,38,41,47,52,3e,5f,25,58,3f,3d,59,45,23,45,25,24,54,5f,39,4c,5e,\
"{5536A06C-E018-4C6C-BCA9-117480DB1B39}"=hex:6c,a0,36,55,18,e0,6c,4c,bc,a9,11,
   74,80,db,1b,39,4f,31,50,3e,57,25,4e,3e,3e,55,45,23,58,47,24,26,55,39,47,5d,\
"{8378C854-74F4-4BA0-B1AE-B6A270CF17A1}"=hex:54,c8,78,83,f4,74,a0,4b,b1,ae,b6,
   a2,70,cf,17,a1,40,31,56,3f,45,25,59,48,51,3f,3e,23,37,51,46,2a,27,39,51,24,\
"{FD8EFE08-7BFE-4956-9695-F4CA91048782}"=hex:08,fe,8e,fd,fe,7b,56,49,96,95,f4,
   ca,91,04,87,82,41,31,46,50,30,25,4e,38,3e,39,4e,23,4a,26,5d,40,56,39,51,21,\
"{E1695815-719F-4EA2-B1B4-3C27C4C25ABE}"=hex:15,58,69,e1,9f,71,a2,4e,b1,b4,3c,
   27,c4,c2,5a,be,45,40,4e,4a,4d,25,42,4b,5f,55,43,23,4a,48,5c,2a,58,39,43,45,\
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Metro\AppCompat]
@Denied: (A) (Everyone)
"{65B37A38-59FD-4FD7-BCF0-269C3895F418}"=hex:38,7a,b3,65,fd,59,d7,4f,bc,f0,26,
   9c,38,95,f4,18,3b,3d,36,51,55,25,5f,41,38,3f,49,23,41,58,59,41,5d,39,40,58,\
"{92040D32-A672-48E6-9141-F9FF6EC81BB8}"=hex:32,0d,04,92,72,a6,e6,48,91,41,f9,
   ff,6e,c8,1b,b8,56,54,33,52,42,25,4b,5d,53,5b,46,23,45,5e,49,2a,52,39,59,40,\
"{6906DA54-8766-47C7-80C4-A120C57EA37A}"=hex:54,da,06,69,66,87,c7,47,80,c4,a1,
   20,c5,7e,a3,7a,4d,51,50,33,41,25,3c,5e,3e,49,45,23,5d,40,55,5e,56,39,2d,2f,\
"{B13CC3C4-FF42-4DA7-8DCD-C9D06677C761}"=hex:c4,c3,3c,b1,42,ff,a7,4d,8d,cd,c9,
   d0,66,77,c7,61,44,4e,4d,51,5e,25,5e,33,47,59,46,23,56,43,24,53,4b,39,58,2f,\
"{92FAA829-3A53-43C2-BBD6-736B7B149B48}"=hex:29,a8,fa,92,53,3a,c2,43,bb,d6,73,
   6b,7b,14,9b,48,52,57,5c,30,41,25,42,5a,53,3e,58,23,49,5d,40,57,4a,39,4c,2f,\
"{90DB4BDC-DDC8-422A-B565-1F53ADA13191}"=hex:dc,4b,db,90,c8,dd,2a,42,b5,65,1f,
   53,ad,a1,31,91,49,50,51,4c,51,25,31,52,4f,4d,4f,23,39,48,5a,50,43,39,47,42,\
"{A9A328D0-B470-4A1F-AD30-C5C16BD46FB5}"=hex:d0,28,a3,a9,70,b4,1f,4a,ad,30,c5,
   c1,6b,d4,6f,b5,55,46,46,5c,3f,25,3f,47,53,59,3f,23,59,4a,47,45,20,39,26,41,\
"{8E63DE8B-E136-4FD1-97BF-2A2B5D28E82C}"=hex:8b,de,63,8e,36,e1,d1,4f,97,bf,2a,
   2b,5d,28,e8,2c,50,40,55,4b,55,25,41,5d,5d,44,59,23,3b,41,56,42,5e,39,46,51,\
"{FD009ACE-592E-451F-8F3C-0746241D1941}"=hex:ce,9a,00,fd,2e,59,1f,45,8f,3c,07,
   46,24,1d,19,41,5b,31,46,32,45,25,48,33,48,5f,39,23,43,46,5b,5c,46,39,56,5b,\
"{83655CAC-B7C0-4CAF-B057-6BE15D2A9B61}"=hex:ac,5c,65,83,c0,b7,af,4c,b0,57,6b,
   e1,5d,2a,9b,61,48,33,40,54,3f,25,50,40,5a,40,35,23,3b,25,5c,5f,2b,39,4f,45,\
"{EE891EF8-08DA-4645-8A01-23A9BC8A68B2}"=hex:f8,1e,89,ee,da,08,45,46,8a,01,23,
   a9,bc,8a,68,b2,4b,57,43,33,53,25,5c,4d,38,58,3f,23,58,5d,40,59,25,39,59,45,\
"{55ECDCDB-FCFE-42A0-A51F-621756D1A480}"=hex:db,dc,ec,55,fe,fc,a0,42,a5,1f,62,
   17,56,d1,a4,80,3b,3c,3d,52,41,25,50,4c,45,40,58,23,5b,5d,42,25,50,39,57,43,\
"{7B0D3076-B2AB-4CA4-9F48-24A4207DFFB7}"=hex:76,30,0d,7b,ab,b2,a4,4c,9f,48,24,
   a4,20,7d,ff,b7,4f,42,3d,42,5d,25,4c,33,4c,46,3e,23,5a,48,5f,44,5d,39,52,58,\
"{91AB175C-D0E1-4391-A739-03D5D07A7505}"=hex:5c,17,ab,91,e1,d0,91,43,a7,39,03,
   d5,d0,7a,75,05,4e,3c,4e,40,54,25,50,42,5f,44,54,23,58,26,53,4b,50,39,50,55,\
"{11C09842-018D-4D79-A8FA-4B9BA6DD6A8C}"=hex:42,98,c0,11,8d,01,79,4d,a8,fa,4b,
   9b,a6,dd,6a,8c,31,4a,32,3e,49,25,4a,4f,4c,4d,59,23,38,57,44,56,56,39,57,4c,\
"{37BC45AB-38E3-4469-BF82-39158B83E3A3}"=hex:ab,45,bc,37,e3,38,69,44,bf,82,39,
   15,8b,83,e3,a3,5b,53,55,55,45,25,4c,39,4c,4a,4f,23,5b,5b,56,25,47,39,54,44,\
"{9419340D-43ED-46EE-9DD5-6D81600FFA6E}"=hex:0d,34,19,94,ed,43,ee,46,9d,d5,6d,
   81,60,0f,fa,6e,42,48,42,5f,40,25,4a,32,5f,46,3a,23,44,27,25,50,47,39,58,20,\
"{B8550CB4-F0C8-456B-8576-7FC70AA57CDF}"=hex:b4,0c,55,b8,c8,f0,6b,45,85,76,7f,
   c7,0a,a5,7c,df,55,4c,57,55,4c,25,53,38,41,5d,5a,23,44,23,24,59,42,39,23,53,\
"{CE32B99E-971D-4BED-BD22-370684C12F19}"=hex:9e,b9,32,ce,1d,97,ed,4b,bd,22,37,
   06,84,c1,2f,19,48,37,5f,53,57,25,4d,3f,4d,5c,4a,23,4b,53,5d,57,50,39,26,5d,\
"{12377A4C-3E98-45EF-9032-16B0717CF970}"=hex:4c,7a,37,12,98,3e,ef,45,90,32,16,
   b0,71,7c,f9,70,31,55,53,40,5e,25,30,4e,5d,5b,39,23,5b,52,24,42,59,39,53,51,\
"{3FA0A203-34BB-4C9E-B826-A03BBF2B3C97}"=hex:03,a2,a0,3f,bb,34,9e,4c,b8,26,a0,
   3b,bf,2b,3c,97,5b,5d,40,4b,44,25,58,33,3c,4e,5b,23,37,5c,27,26,56,39,58,25,\
"{0879BEA0-3C99-464F-B9B3-3575EA22A53E}"=hex:a0,be,79,08,99,3c,4f,46,b9,b3,35,
   75,ea,22,a5,3e,49,48,4d,40,34,25,3d,5e,3f,5f,4e,23,3b,43,47,58,59,39,40,55,\
"{4F585855-3A90-489F-B973-E360C74C5B0A}"=hex:55,58,58,4f,90,3a,9f,48,b9,73,e3,
   60,c7,4c,5b,0a,50,4f,56,40,53,25,43,4b,33,40,4a,23,39,48,49,26,5f,39,26,5b,\
"{D87BA9F8-EB63-4FA8-B2FC-9BACDA88B7E1}"=hex:f8,a9,7b,d8,63,eb,a8,4f,b2,fc,9b,
   ac,da,88,b7,e1,5b,46,54,48,31,25,53,50,47,5f,49,23,39,58,40,5f,56,39,4d,22,\
"{8F43CC12-03BA-497D-8AC0-3D81DD3AC5EF}"=hex:12,cc,43,8f,ba,03,7d,49,8a,c0,3d,
   81,dd,3a,c5,ef,4f,43,36,45,33,25,4f,53,5b,4f,5d,23,44,54,57,54,43,39,44,5c,\
"{36509D28-6C1F-490A-B46F-F88B32685910}"=hex:28,9d,50,36,1f,6c,0a,49,b4,6f,f8,
   8b,32,68,59,10,52,4f,50,50,46,25,3d,48,3f,38,5d,23,3c,53,50,24,59,39,56,52,\
"{746E3D8C-06AE-44E9-9D14-85F09D037FB3}"=hex:8c,3d,6e,74,ae,06,e9,44,9d,14,85,
   f0,9d,03,7f,b3,41,48,4b,4d,3e,25,45,5c,47,4d,58,23,47,57,28,43,24,39,5b,41,\
"{64E1C408-505D-445E-B834-0323D5557CC5}"=hex:08,c4,e1,64,5d,50,5e,44,b8,34,03,
   23,d5,55,7c,c5,46,53,49,51,31,25,41,3d,43,49,34,23,3d,5e,23,59,41,39,54,4f,\
"{DC6683BD-2F8A-42CE-A784-05E1A2AD8921}"=hex:bd,83,66,dc,8a,2f,ce,42,a7,84,05,
   e1,a2,ad,89,21,34,51,33,35,55,25,3e,4b,5d,54,5c,23,43,28,29,2b,5b,39,58,2f,\
"{97EB4186-4771-40D0-87CB-25B584E787F8}"=hex:86,41,eb,97,71,47,d0,40,87,cb,25,
   b5,84,e7,87,f8,40,51,36,53,41,25,3c,5d,33,5c,4a,23,3b,56,49,20,59,39,5e,25,\
"{D58EA0E2-FB1B-45A1-9D1D-090F3C1A88F3}"=hex:e2,a0,8e,d5,1b,fb,a1,45,9d,1d,09,
   0f,3c,1a,88,f3,31,3c,5f,40,51,25,51,5b,5b,5e,4b,23,57,22,5b,42,59,39,26,47,\
"{F11540C9-EA60-4096-BD95-2F50B4EA874B}"=hex:c9,40,15,f1,60,ea,96,40,bd,95,2f,
   50,b4,ea,87,4b,50,52,30,51,4b,25,4b,39,3c,41,4b,23,47,27,43,46,24,39,52,2e,\
"{F4087A74-1BC8-4035-ABD1-F0F064750D02}"=hex:74,7a,08,f4,c8,1b,35,40,ab,d1,f0,
   f0,64,75,0d,02,59,46,4e,33,46,25,4f,39,32,58,45,23,5d,51,5f,45,2b,39,4c,42,\
"{D96A526A-22E2-4452-B0E8-0DA1F3747AF5}"=hex:6a,52,6a,d9,e2,22,52,44,b0,e8,0d,
   a1,f3,74,7a,f5,52,3d,40,4d,41,25,48,3c,4c,5e,4f,23,3b,24,26,59,40,39,5f,2f,\
"{A0EA985C-B282-4E35-B45C-C3ECE46DC57E}"=hex:5c,98,ea,a0,82,b2,35,4e,b4,5c,c3,
   ec,e4,6d,c5,7e,52,4e,4d,51,4c,25,47,38,4d,4a,46,23,3b,25,50,26,47,39,53,4f,\
"{780CCBF0-3F69-414B-AEAE-3595938E5A70}"=hex:f0,cb,0c,78,69,3f,4b,41,ae,ae,35,
   95,93,8e,5a,70,55,53,57,52,5f,25,59,48,52,3e,40,23,39,29,56,4b,49,39,52,5a,\
"{EA918AC1-2E4C-4AAE-B4DA-971D5C97C4FF}"=hex:c1,8a,91,ea,4c,2e,ae,4a,b4,da,97,
   1d,5c,97,c4,ff,55,42,41,4b,44,25,4e,44,47,5b,4f,23,5b,22,5d,25,58,39,4c,42,\
"{2F6881FE-C449-427C-A9E6-7078FBF2D490}"=hex:fe,81,68,2f,49,c4,7c,42,a9,e6,70,
   78,fb,f2,d4,90,36,56,32,3e,40,25,43,46,3e,49,54,23,3b,58,52,48,46,39,44,23,\
"{5B73420A-B228-4569-9CAB-23239A05D666}"=hex:0a,42,73,5b,28,b2,69,45,9c,ab,23,
   23,9a,05,d6,66,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
"{3B3186E7-DEF7-4176-88BB-CF733E24D038}"=hex:e7,86,31,3b,f7,de,76,41,88,bb,cf,
   73,3e,24,d0,38,41,47,52,3e,5f,25,58,3f,3d,59,45,23,45,25,24,54,5f,39,4c,5e,\
"{5536A06C-E018-4C6C-BCA9-117480DB1B39}"=hex:6c,a0,36,55,18,e0,6c,4c,bc,a9,11,
   74,80,db,1b,39,4f,31,50,3e,57,25,4e,3e,3e,55,45,23,58,47,24,26,55,39,47,5d,\
"{8378C854-74F4-4BA0-B1AE-B6A270CF17A1}"=hex:54,c8,78,83,f4,74,a0,4b,b1,ae,b6,
   a2,70,cf,17,a1,40,31,56,3f,45,25,59,48,51,3f,3e,23,37,51,46,2a,27,39,51,24,\
"{FD8EFE08-7BFE-4956-9695-F4CA91048782}"=hex:08,fe,8e,fd,fe,7b,56,49,96,95,f4,
   ca,91,04,87,82,41,31,46,50,30,25,4e,38,3e,39,4e,23,4a,26,5d,40,56,39,51,21,\
"{E1695815-719F-4EA2-B1B4-3C27C4C25ABE}"=hex:15,58,69,e1,9f,71,a2,4e,b1,b4,3c,
   27,c4,c2,5a,be,45,40,4e,4a,4d,25,42,4b,5f,55,43,23,4a,48,5c,2a,58,39,43,45,\
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\DlgInfo]
@Denied: (A) (Everyone)
"{65B37A38-59FD-4FD7-BCF0-269C3895F418}"=hex:38,7a,b3,65,fd,59,d7,4f,bc,f0,26,
   9c,38,95,f4,18,3b,3d,36,51,55,25,5f,41,38,3f,49,23,41,58,59,41,5d,39,40,58,\
"{92040D32-A672-48E6-9141-F9FF6EC81BB8}"=hex:32,0d,04,92,72,a6,e6,48,91,41,f9,
   ff,6e,c8,1b,b8,56,54,33,52,42,25,4b,5d,53,5b,46,23,45,5e,49,2a,52,39,59,40,\
"{6906DA54-8766-47C7-80C4-A120C57EA37A}"=hex:54,da,06,69,66,87,c7,47,80,c4,a1,
   20,c5,7e,a3,7a,4d,51,50,33,41,25,3c,5e,3e,49,45,23,5d,40,55,5e,56,39,2d,2f,\
"{B13CC3C4-FF42-4DA7-8DCD-C9D06677C761}"=hex:c4,c3,3c,b1,42,ff,a7,4d,8d,cd,c9,
   d0,66,77,c7,61,44,4e,4d,51,5e,25,5e,33,47,59,46,23,56,43,24,53,4b,39,58,2f,\
"{92FAA829-3A53-43C2-BBD6-736B7B149B48}"=hex:29,a8,fa,92,53,3a,c2,43,bb,d6,73,
   6b,7b,14,9b,48,52,57,5c,30,41,25,42,5a,53,3e,58,23,49,5d,40,57,4a,39,4c,2f,\
"{90DB4BDC-DDC8-422A-B565-1F53ADA13191}"=hex:dc,4b,db,90,c8,dd,2a,42,b5,65,1f,
   53,ad,a1,31,91,49,50,51,4c,51,25,31,52,4f,4d,4f,23,39,48,5a,50,43,39,47,42,\
"{A9A328D0-B470-4A1F-AD30-C5C16BD46FB5}"=hex:d0,28,a3,a9,70,b4,1f,4a,ad,30,c5,
   c1,6b,d4,6f,b5,55,46,46,5c,3f,25,3f,47,53,59,3f,23,59,4a,47,45,20,39,26,41,\
"{8E63DE8B-E136-4FD1-97BF-2A2B5D28E82C}"=hex:8b,de,63,8e,36,e1,d1,4f,97,bf,2a,
   2b,5d,28,e8,2c,50,40,55,4b,55,25,41,5d,5d,44,59,23,3b,41,56,42,5e,39,46,51,\
"{FD009ACE-592E-451F-8F3C-0746241D1941}"=hex:ce,9a,00,fd,2e,59,1f,45,8f,3c,07,
   46,24,1d,19,41,5b,31,46,32,45,25,48,33,48,5f,39,23,43,46,5b,5c,46,39,56,5b,\
"{83655CAC-B7C0-4CAF-B057-6BE15D2A9B61}"=hex:ac,5c,65,83,c0,b7,af,4c,b0,57,6b,
   e1,5d,2a,9b,61,48,33,40,54,3f,25,50,40,5a,40,35,23,3b,25,5c,5f,2b,39,4f,45,\
"{EE891EF8-08DA-4645-8A01-23A9BC8A68B2}"=hex:f8,1e,89,ee,da,08,45,46,8a,01,23,
   a9,bc,8a,68,b2,4b,57,43,33,53,25,5c,4d,38,58,3f,23,58,5d,40,59,25,39,59,45,\
"{55ECDCDB-FCFE-42A0-A51F-621756D1A480}"=hex:db,dc,ec,55,fe,fc,a0,42,a5,1f,62,
   17,56,d1,a4,80,3b,3c,3d,52,41,25,50,4c,45,40,58,23,5b,5d,42,25,50,39,57,43,\
"{7B0D3076-B2AB-4CA4-9F48-24A4207DFFB7}"=hex:76,30,0d,7b,ab,b2,a4,4c,9f,48,24,
   a4,20,7d,ff,b7,4f,42,3d,42,5d,25,4c,33,4c,46,3e,23,5a,48,5f,44,5d,39,52,58,\
"{91AB175C-D0E1-4391-A739-03D5D07A7505}"=hex:5c,17,ab,91,e1,d0,91,43,a7,39,03,
   d5,d0,7a,75,05,4e,3c,4e,40,54,25,50,42,5f,44,54,23,58,26,53,4b,50,39,50,55,\
"{11C09842-018D-4D79-A8FA-4B9BA6DD6A8C}"=hex:42,98,c0,11,8d,01,79,4d,a8,fa,4b,
   9b,a6,dd,6a,8c,31,4a,32,3e,49,25,4a,4f,4c,4d,59,23,38,57,44,56,56,39,57,4c,\
"{37BC45AB-38E3-4469-BF82-39158B83E3A3}"=hex:ab,45,bc,37,e3,38,69,44,bf,82,39,
   15,8b,83,e3,a3,5b,53,55,55,45,25,4c,39,4c,4a,4f,23,5b,5b,56,25,47,39,54,44,\
"{9419340D-43ED-46EE-9DD5-6D81600FFA6E}"=hex:0d,34,19,94,ed,43,ee,46,9d,d5,6d,
   81,60,0f,fa,6e,42,48,42,5f,40,25,4a,32,5f,46,3a,23,44,27,25,50,47,39,58,20,\
"{B8550CB4-F0C8-456B-8576-7FC70AA57CDF}"=hex:b4,0c,55,b8,c8,f0,6b,45,85,76,7f,
   c7,0a,a5,7c,df,55,4c,57,55,4c,25,53,38,41,5d,5a,23,44,23,24,59,42,39,23,53,\
"{CE32B99E-971D-4BED-BD22-370684C12F19}"=hex:9e,b9,32,ce,1d,97,ed,4b,bd,22,37,
   06,84,c1,2f,19,48,37,5f,53,57,25,4d,3f,4d,5c,4a,23,4b,53,5d,57,50,39,26,5d,\
"{12377A4C-3E98-45EF-9032-16B0717CF970}"=hex:4c,7a,37,12,98,3e,ef,45,90,32,16,
   b0,71,7c,f9,70,31,55,53,40,5e,25,30,4e,5d,5b,39,23,5b,52,24,42,59,39,53,51,\
"{3FA0A203-34BB-4C9E-B826-A03BBF2B3C97}"=hex:03,a2,a0,3f,bb,34,9e,4c,b8,26,a0,
   3b,bf,2b,3c,97,5b,5d,40,4b,44,25,58,33,3c,4e,5b,23,37,5c,27,26,56,39,58,25,\
"{0879BEA0-3C99-464F-B9B3-3575EA22A53E}"=hex:a0,be,79,08,99,3c,4f,46,b9,b3,35,
   75,ea,22,a5,3e,49,48,4d,40,34,25,3d,5e,3f,5f,4e,23,3b,43,47,58,59,39,40,55,\
"{4F585855-3A90-489F-B973-E360C74C5B0A}"=hex:55,58,58,4f,90,3a,9f,48,b9,73,e3,
   60,c7,4c,5b,0a,50,4f,56,40,53,25,43,4b,33,40,4a,23,39,48,49,26,5f,39,26,5b,\
"{D87BA9F8-EB63-4FA8-B2FC-9BACDA88B7E1}"=hex:f8,a9,7b,d8,63,eb,a8,4f,b2,fc,9b,
   ac,da,88,b7,e1,5b,46,54,48,31,25,53,50,47,5f,49,23,39,58,40,5f,56,39,4d,22,\
"{8F43CC12-03BA-497D-8AC0-3D81DD3AC5EF}"=hex:12,cc,43,8f,ba,03,7d,49,8a,c0,3d,
   81,dd,3a,c5,ef,4f,43,36,45,33,25,4f,53,5b,4f,5d,23,44,54,57,54,43,39,44,5c,\
"{36509D28-6C1F-490A-B46F-F88B32685910}"=hex:28,9d,50,36,1f,6c,0a,49,b4,6f,f8,
   8b,32,68,59,10,52,4f,50,50,46,25,3d,48,3f,38,5d,23,3c,53,50,24,59,39,56,52,\
"{746E3D8C-06AE-44E9-9D14-85F09D037FB3}"=hex:8c,3d,6e,74,ae,06,e9,44,9d,14,85,
   f0,9d,03,7f,b3,41,48,4b,4d,3e,25,45,5c,47,4d,58,23,47,57,28,43,24,39,5b,41,\
"{64E1C408-505D-445E-B834-0323D5557CC5}"=hex:08,c4,e1,64,5d,50,5e,44,b8,34,03,
   23,d5,55,7c,c5,46,53,49,51,31,25,41,3d,43,49,34,23,3d,5e,23,59,41,39,54,4f,\
"{DC6683BD-2F8A-42CE-A784-05E1A2AD8921}"=hex:bd,83,66,dc,8a,2f,ce,42,a7,84,05,
   e1,a2,ad,89,21,34,51,33,35,55,25,3e,4b,5d,54,5c,23,43,28,29,2b,5b,39,58,2f,\
"{97EB4186-4771-40D0-87CB-25B584E787F8}"=hex:86,41,eb,97,71,47,d0,40,87,cb,25,
   b5,84,e7,87,f8,40,51,36,53,41,25,3c,5d,33,5c,4a,23,3b,56,49,20,59,39,5e,25,\
"{D58EA0E2-FB1B-45A1-9D1D-090F3C1A88F3}"=hex:e2,a0,8e,d5,1b,fb,a1,45,9d,1d,09,
   0f,3c,1a,88,f3,31,3c,5f,40,51,25,51,5b,5b,5e,4b,23,57,22,5b,42,59,39,26,47,\
"{F11540C9-EA60-4096-BD95-2F50B4EA874B}"=hex:c9,40,15,f1,60,ea,96,40,bd,95,2f,
   50,b4,ea,87,4b,50,52,30,51,4b,25,4b,39,3c,41,4b,23,47,27,43,46,24,39,52,2e,\
"{F4087A74-1BC8-4035-ABD1-F0F064750D02}"=hex:74,7a,08,f4,c8,1b,35,40,ab,d1,f0,
   f0,64,75,0d,02,59,46,4e,33,46,25,4f,39,32,58,45,23,5d,51,5f,45,2b,39,4c,42,\
"{D96A526A-22E2-4452-B0E8-0DA1F3747AF5}"=hex:6a,52,6a,d9,e2,22,52,44,b0,e8,0d,
   a1,f3,74,7a,f5,52,3d,40,4d,41,25,48,3c,4c,5e,4f,23,3b,24,26,59,40,39,5f,2f,\
"{A0EA985C-B282-4E35-B45C-C3ECE46DC57E}"=hex:5c,98,ea,a0,82,b2,35,4e,b4,5c,c3,
   ec,e4,6d,c5,7e,52,4e,4d,51,4c,25,47,38,4d,4a,46,23,3b,25,50,26,47,39,53,4f,\
"{780CCBF0-3F69-414B-AEAE-3595938E5A70}"=hex:f0,cb,0c,78,69,3f,4b,41,ae,ae,35,
   95,93,8e,5a,70,55,53,57,52,5f,25,59,48,52,3e,40,23,39,29,56,4b,49,39,52,5a,\
"{EA918AC1-2E4C-4AAE-B4DA-971D5C97C4FF}"=hex:c1,8a,91,ea,4c,2e,ae,4a,b4,da,97,
   1d,5c,97,c4,ff,55,42,41,4b,44,25,4e,44,47,5b,4f,23,5b,22,5d,25,58,39,4c,42,\
"{2F6881FE-C449-427C-A9E6-7078FBF2D490}"=hex:fe,81,68,2f,49,c4,7c,42,a9,e6,70,
   78,fb,f2,d4,90,36,56,32,3e,40,25,43,46,3e,49,54,23,3b,58,52,48,46,39,44,23,\
"{5B73420A-B228-4569-9CAB-23239A05D666}"=hex:0a,42,73,5b,28,b2,69,45,9c,ab,23,
   23,9a,05,d6,66,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
"{3B3186E7-DEF7-4176-88BB-CF733E24D038}"=hex:e7,86,31,3b,f7,de,76,41,88,bb,cf,
   73,3e,24,d0,38,41,47,52,3e,5f,25,58,3f,3d,59,45,23,45,25,24,54,5f,39,4c,5e,\
"{5536A06C-E018-4C6C-BCA9-117480DB1B39}"=hex:6c,a0,36,55,18,e0,6c,4c,bc,a9,11,
   74,80,db,1b,39,4f,31,50,3e,57,25,4e,3e,3e,55,45,23,58,47,24,26,55,39,47,5d,\
"{8378C854-74F4-4BA0-B1AE-B6A270CF17A1}"=hex:54,c8,78,83,f4,74,a0,4b,b1,ae,b6,
   a2,70,cf,17,a1,40,31,56,3f,45,25,59,48,51,3f,3e,23,37,51,46,2a,27,39,51,24,\
"{FD8EFE08-7BFE-4956-9695-F4CA91048782}"=hex:08,fe,8e,fd,fe,7b,56,49,96,95,f4,
   ca,91,04,87,82,41,31,46,50,30,25,4e,38,3e,39,4e,23,4a,26,5d,40,56,39,51,21,\
"{E1695815-719F-4EA2-B1B4-3C27C4C25ABE}"=hex:15,58,69,e1,9f,71,a2,4e,b1,b4,3c,
   27,c4,c2,5a,be,45,40,4e,4a,4d,25,42,4b,5f,55,43,23,4a,48,5c,2a,58,39,43,45,\
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\GVZCN-QNGBE]
@Denied: (A) (Everyone)
"{65B37A38-59FD-4FD7-BCF0-269C3895F418}"=hex:38,7a,b3,65,fd,59,d7,4f,bc,f0,26,
   9c,38,95,f4,18,3b,3d,36,51,55,25,5f,41,38,3f,49,23,41,58,59,41,5d,39,40,58,\
"{92040D32-A672-48E6-9141-F9FF6EC81BB8}"=hex:32,0d,04,92,72,a6,e6,48,91,41,f9,
   ff,6e,c8,1b,b8,56,54,33,52,42,25,4b,5d,53,5b,46,23,45,5e,49,2a,52,39,59,40,\
"{6906DA54-8766-47C7-80C4-A120C57EA37A}"=hex:54,da,06,69,66,87,c7,47,80,c4,a1,
   20,c5,7e,a3,7a,4d,51,50,33,41,25,3c,5e,3e,49,45,23,5d,40,55,5e,56,39,2d,2f,\
"{B13CC3C4-FF42-4DA7-8DCD-C9D06677C761}"=hex:c4,c3,3c,b1,42,ff,a7,4d,8d,cd,c9,
   d0,66,77,c7,61,44,4e,4d,51,5e,25,5e,33,47,59,46,23,56,43,24,53,4b,39,58,2f,\
"{92FAA829-3A53-43C2-BBD6-736B7B149B48}"=hex:29,a8,fa,92,53,3a,c2,43,bb,d6,73,
   6b,7b,14,9b,48,52,57,5c,30,41,25,42,5a,53,3e,58,23,49,5d,40,57,4a,39,4c,2f,\
"{90DB4BDC-DDC8-422A-B565-1F53ADA13191}"=hex:dc,4b,db,90,c8,dd,2a,42,b5,65,1f,
   53,ad,a1,31,91,49,50,51,4c,51,25,31,52,4f,4d,4f,23,39,48,5a,50,43,39,47,42,\
"{A9A328D0-B470-4A1F-AD30-C5C16BD46FB5}"=hex:d0,28,a3,a9,70,b4,1f,4a,ad,30,c5,
   c1,6b,d4,6f,b5,55,46,46,5c,3f,25,3f,47,53,59,3f,23,59,4a,47,45,20,39,26,41,\
"{8E63DE8B-E136-4FD1-97BF-2A2B5D28E82C}"=hex:8b,de,63,8e,36,e1,d1,4f,97,bf,2a,
   2b,5d,28,e8,2c,50,40,55,4b,55,25,41,5d,5d,44,59,23,3b,41,56,42,5e,39,46,51,\
"{FD009ACE-592E-451F-8F3C-0746241D1941}"=hex:ce,9a,00,fd,2e,59,1f,45,8f,3c,07,
   46,24,1d,19,41,5b,31,46,32,45,25,48,33,48,5f,39,23,43,46,5b,5c,46,39,56,5b,\
"{83655CAC-B7C0-4CAF-B057-6BE15D2A9B61}"=hex:ac,5c,65,83,c0,b7,af,4c,b0,57,6b,
   e1,5d,2a,9b,61,48,33,40,54,3f,25,50,40,5a,40,35,23,3b,25,5c,5f,2b,39,4f,45,\
"{EE891EF8-08DA-4645-8A01-23A9BC8A68B2}"=hex:f8,1e,89,ee,da,08,45,46,8a,01,23,
   a9,bc,8a,68,b2,4b,57,43,33,53,25,5c,4d,38,58,3f,23,58,5d,40,59,25,39,59,45,\
"{55ECDCDB-FCFE-42A0-A51F-621756D1A480}"=hex:db,dc,ec,55,fe,fc,a0,42,a5,1f,62,
   17,56,d1,a4,80,3b,3c,3d,52,41,25,50,4c,45,40,58,23,5b,5d,42,25,50,39,57,43,\
"{7B0D3076-B2AB-4CA4-9F48-24A4207DFFB7}"=hex:76,30,0d,7b,ab,b2,a4,4c,9f,48,24,
   a4,20,7d,ff,b7,4f,42,3d,42,5d,25,4c,33,4c,46,3e,23,5a,48,5f,44,5d,39,52,58,\
"{91AB175C-D0E1-4391-A739-03D5D07A7505}"=hex:5c,17,ab,91,e1,d0,91,43,a7,39,03,
   d5,d0,7a,75,05,4e,3c,4e,40,54,25,50,42,5f,44,54,23,58,26,53,4b,50,39,50,55,\
"{11C09842-018D-4D79-A8FA-4B9BA6DD6A8C}"=hex:42,98,c0,11,8d,01,79,4d,a8,fa,4b,
   9b,a6,dd,6a,8c,31,4a,32,3e,49,25,4a,4f,4c,4d,59,23,38,57,44,56,56,39,57,4c,\
"{37BC45AB-38E3-4469-BF82-39158B83E3A3}"=hex:ab,45,bc,37,e3,38,69,44,bf,82,39,
   15,8b,83,e3,a3,5b,53,55,55,45,25,4c,39,4c,4a,4f,23,5b,5b,56,25,47,39,54,44,\
"{9419340D-43ED-46EE-9DD5-6D81600FFA6E}"=hex:0d,34,19,94,ed,43,ee,46,9d,d5,6d,
   81,60,0f,fa,6e,42,48,42,5f,40,25,4a,32,5f,46,3a,23,44,27,25,50,47,39,58,20,\
"{B8550CB4-F0C8-456B-8576-7FC70AA57CDF}"=hex:b4,0c,55,b8,c8,f0,6b,45,85,76,7f,
   c7,0a,a5,7c,df,55,4c,57,55,4c,25,53,38,41,5d,5a,23,44,23,24,59,42,39,23,53,\
"{CE32B99E-971D-4BED-BD22-370684C12F19}"=hex:9e,b9,32,ce,1d,97,ed,4b,bd,22,37,
   06,84,c1,2f,19,48,37,5f,53,57,25,4d,3f,4d,5c,4a,23,4b,53,5d,57,50,39,26,5d,\
"{12377A4C-3E98-45EF-9032-16B0717CF970}"=hex:4c,7a,37,12,98,3e,ef,45,90,32,16,
   b0,71,7c,f9,70,31,55,53,40,5e,25,30,4e,5d,5b,39,23,5b,52,24,42,59,39,53,51,\
"{3FA0A203-34BB-4C9E-B826-A03BBF2B3C97}"=hex:03,a2,a0,3f,bb,34,9e,4c,b8,26,a0,
   3b,bf,2b,3c,97,5b,5d,40,4b,44,25,58,33,3c,4e,5b,23,37,5c,27,26,56,39,58,25,\
"{0879BEA0-3C99-464F-B9B3-3575EA22A53E}"=hex:a0,be,79,08,99,3c,4f,46,b9,b3,35,
   75,ea,22,a5,3e,49,48,4d,40,34,25,3d,5e,3f,5f,4e,23,3b,43,47,58,59,39,40,55,\
"{4F585855-3A90-489F-B973-E360C74C5B0A}"=hex:55,58,58,4f,90,3a,9f,48,b9,73,e3,
   60,c7,4c,5b,0a,50,4f,56,40,53,25,43,4b,33,40,4a,23,39,48,49,26,5f,39,26,5b,\
"{D87BA9F8-EB63-4FA8-B2FC-9BACDA88B7E1}"=hex:f8,a9,7b,d8,63,eb,a8,4f,b2,fc,9b,
   ac,da,88,b7,e1,5b,46,54,48,31,25,53,50,47,5f,49,23,39,58,40,5f,56,39,4d,22,\
"{8F43CC12-03BA-497D-8AC0-3D81DD3AC5EF}"=hex:12,cc,43,8f,ba,03,7d,49,8a,c0,3d,
   81,dd,3a,c5,ef,4f,43,36,45,33,25,4f,53,5b,4f,5d,23,44,54,57,54,43,39,44,5c,\
"{36509D28-6C1F-490A-B46F-F88B32685910}"=hex:28,9d,50,36,1f,6c,0a,49,b4,6f,f8,
   8b,32,68,59,10,52,4f,50,50,46,25,3d,48,3f,38,5d,23,3c,53,50,24,59,39,56,52,\
"{746E3D8C-06AE-44E9-9D14-85F09D037FB3}"=hex:8c,3d,6e,74,ae,06,e9,44,9d,14,85,
   f0,9d,03,7f,b3,41,48,4b,4d,3e,25,45,5c,47,4d,58,23,47,57,28,43,24,39,5b,41,\
"{64E1C408-505D-445E-B834-0323D5557CC5}"=hex:08,c4,e1,64,5d,50,5e,44,b8,34,03,
   23,d5,55,7c,c5,46,53,49,51,31,25,41,3d,43,49,34,23,3d,5e,23,59,41,39,54,4f,\
"{DC6683BD-2F8A-42CE-A784-05E1A2AD8921}"=hex:bd,83,66,dc,8a,2f,ce,42,a7,84,05,
   e1,a2,ad,89,21,34,51,33,35,55,25,3e,4b,5d,54,5c,23,43,28,29,2b,5b,39,58,2f,\
"{97EB4186-4771-40D0-87CB-25B584E787F8}"=hex:86,41,eb,97,71,47,d0,40,87,cb,25,
   b5,84,e7,87,f8,40,51,36,53,41,25,3c,5d,33,5c,4a,23,3b,56,49,20,59,39,5e,25,\
"{D58EA0E2-FB1B-45A1-9D1D-090F3C1A88F3}"=hex:e2,a0,8e,d5,1b,fb,a1,45,9d,1d,09,
   0f,3c,1a,88,f3,31,3c,5f,40,51,25,51,5b,5b,5e,4b,23,57,22,5b,42,59,39,26,47,\
"{F11540C9-EA60-4096-BD95-2F50B4EA874B}"=hex:c9,40,15,f1,60,ea,96,40,bd,95,2f,
   50,b4,ea,87,4b,50,52,30,51,4b,25,4b,39,3c,41,4b,23,47,27,43,46,24,39,52,2e,\
"{F4087A74-1BC8-4035-ABD1-F0F064750D02}"=hex:74,7a,08,f4,c8,1b,35,40,ab,d1,f0,
   f0,64,75,0d,02,59,46,4e,33,46,25,4f,39,32,58,45,23,5d,51,5f,45,2b,39,4c,42,\
"{D96A526A-22E2-4452-B0E8-0DA1F3747AF5}"=hex:6a,52,6a,d9,e2,22,52,44,b0,e8,0d,
   a1,f3,74,7a,f5,52,3d,40,4d,41,25,48,3c,4c,5e,4f,23,3b,24,26,59,40,39,5f,2f,\
"{A0EA985C-B282-4E35-B45C-C3ECE46DC57E}"=hex:5c,98,ea,a0,82,b2,35,4e,b4,5c,c3,
   ec,e4,6d,c5,7e,52,4e,4d,51,4c,25,47,38,4d,4a,46,23,3b,25,50,26,47,39,53,4f,\
"{780CCBF0-3F69-414B-AEAE-3595938E5A70}"=hex:f0,cb,0c,78,69,3f,4b,41,ae,ae,35,
   95,93,8e,5a,70,55,53,57,52,5f,25,59,48,52,3e,40,23,39,29,56,4b,49,39,52,5a,\
"{EA918AC1-2E4C-4AAE-B4DA-971D5C97C4FF}"=hex:c1,8a,91,ea,4c,2e,ae,4a,b4,da,97,
   1d,5c,97,c4,ff,55,42,41,4b,44,25,4e,44,47,5b,4f,23,5b,22,5d,25,58,39,4c,42,\
"{2F6881FE-C449-427C-A9E6-7078FBF2D490}"=hex:fe,81,68,2f,49,c4,7c,42,a9,e6,70,
   78,fb,f2,d4,90,36,56,32,3e,40,25,43,46,3e,49,54,23,3b,58,52,48,46,39,44,23,\
"{5B73420A-B228-4569-9CAB-23239A05D666}"=hex:0a,42,73,5b,28,b2,69,45,9c,ab,23,
   23,9a,05,d6,66,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
"{3B3186E7-DEF7-4176-88BB-CF733E24D038}"=hex:e7,86,31,3b,f7,de,76,41,88,bb,cf,
   73,3e,24,d0,38,41,47,52,3e,5f,25,58,3f,3d,59,45,23,45,25,24,54,5f,39,4c,5e,\
"{5536A06C-E018-4C6C-BCA9-117480DB1B39}"=hex:6c,a0,36,55,18,e0,6c,4c,bc,a9,11,
   74,80,db,1b,39,4f,31,50,3e,57,25,4e,3e,3e,55,45,23,58,47,24,26,55,39,47,5d,\
"{8378C854-74F4-4BA0-B1AE-B6A270CF17A1}"=hex:54,c8,78,83,f4,74,a0,4b,b1,ae,b6,
   a2,70,cf,17,a1,40,31,56,3f,45,25,59,48,51,3f,3e,23,37,51,46,2a,27,39,51,24,\
"{FD8EFE08-7BFE-4956-9695-F4CA91048782}"=hex:08,fe,8e,fd,fe,7b,56,49,96,95,f4,
   ca,91,04,87,82,41,31,46,50,30,25,4e,38,3e,39,4e,23,4a,26,5d,40,56,39,51,21,\
"{E1695815-719F-4EA2-B1B4-3C27C4C25ABE}"=hex:15,58,69,e1,9f,71,a2,4e,b1,b4,3c,
   27,c4,c2,5a,be,45,40,4e,4a,4d,25,42,4b,5f,55,43,23,4a,48,5c,2a,58,39,43,45,\
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Disallowed]
@Denied: (A) (Everyone)
"{65B37A38-59FD-4FD7-BCF0-269C3895F418}"=hex:38,7a,b3,65,fd,59,d7,4f,bc,f0,26,
   9c,38,95,f4,18,3b,3d,36,51,55,25,5f,41,38,3f,49,23,41,58,59,41,5d,39,40,58,\
"{92040D32-A672-48E6-9141-F9FF6EC81BB8}"=hex:32,0d,04,92,72,a6,e6,48,91,41,f9,
   ff,6e,c8,1b,b8,56,54,33,52,42,25,4b,5d,53,5b,46,23,45,5e,49,2a,52,39,59,40,\
"{6906DA54-8766-47C7-80C4-A120C57EA37A}"=hex:54,da,06,69,66,87,c7,47,80,c4,a1,
   20,c5,7e,a3,7a,4d,51,50,33,41,25,3c,5e,3e,49,45,23,5d,40,55,5e,56,39,2d,2f,\
"{B13CC3C4-FF42-4DA7-8DCD-C9D06677C761}"=hex:c4,c3,3c,b1,42,ff,a7,4d,8d,cd,c9,
   d0,66,77,c7,61,44,4e,4d,51,5e,25,5e,33,47,59,46,23,56,43,24,53,4b,39,58,2f,\
"{92FAA829-3A53-43C2-BBD6-736B7B149B48}"=hex:29,a8,fa,92,53,3a,c2,43,bb,d6,73,
   6b,7b,14,9b,48,52,57,5c,30,41,25,42,5a,53,3e,58,23,49,5d,40,57,4a,39,4c,2f,\
"{90DB4BDC-DDC8-422A-B565-1F53ADA13191}"=hex:dc,4b,db,90,c8,dd,2a,42,b5,65,1f,
   53,ad,a1,31,91,49,50,51,4c,51,25,31,52,4f,4d,4f,23,39,48,5a,50,43,39,47,42,\
"{A9A328D0-B470-4A1F-AD30-C5C16BD46FB5}"=hex:d0,28,a3,a9,70,b4,1f,4a,ad,30,c5,
   c1,6b,d4,6f,b5,55,46,46,5c,3f,25,3f,47,53,59,3f,23,59,4a,47,45,20,39,26,41,\
"{8E63DE8B-E136-4FD1-97BF-2A2B5D28E82C}"=hex:8b,de,63,8e,36,e1,d1,4f,97,bf,2a,
   2b,5d,28,e8,2c,50,40,55,4b,55,25,41,5d,5d,44,59,23,3b,41,56,42,5e,39,46,51,\
"{FD009ACE-592E-451F-8F3C-0746241D1941}"=hex:ce,9a,00,fd,2e,59,1f,45,8f,3c,07,
   46,24,1d,19,41,5b,31,46,32,45,25,48,33,48,5f,39,23,43,46,5b,5c,46,39,56,5b,\
"{83655CAC-B7C0-4CAF-B057-6BE15D2A9B61}"=hex:ac,5c,65,83,c0,b7,af,4c,b0,57,6b,
   e1,5d,2a,9b,61,48,33,40,54,3f,25,50,40,5a,40,35,23,3b,25,5c,5f,2b,39,4f,45,\
"{EE891EF8-08DA-4645-8A01-23A9BC8A68B2}"=hex:f8,1e,89,ee,da,08,45,46,8a,01,23,
   a9,bc,8a,68,b2,4b,57,43,33,53,25,5c,4d,38,58,3f,23,58,5d,40,59,25,39,59,45,\
"{55ECDCDB-FCFE-42A0-A51F-621756D1A480}"=hex:db,dc,ec,55,fe,fc,a0,42,a5,1f,62,
   17,56,d1,a4,80,3b,3c,3d,52,41,25,50,4c,45,40,58,23,5b,5d,42,25,50,39,57,43,\
"{7B0D3076-B2AB-4CA4-9F48-24A4207DFFB7}"=hex:76,30,0d,7b,ab,b2,a4,4c,9f,48,24,
   a4,20,7d,ff,b7,4f,42,3d,42,5d,25,4c,33,4c,46,3e,23,5a,48,5f,44,5d,39,52,58,\
"{91AB175C-D0E1-4391-A739-03D5D07A7505}"=hex:5c,17,ab,91,e1,d0,91,43,a7,39,03,
   d5,d0,7a,75,05,4e,3c,4e,40,54,25,50,42,5f,44,54,23,58,26,53,4b,50,39,50,55,\
"{11C09842-018D-4D79-A8FA-4B9BA6DD6A8C}"=hex:42,98,c0,11,8d,01,79,4d,a8,fa,4b,
   9b,a6,dd,6a,8c,31,4a,32,3e,49,25,4a,4f,4c,4d,59,23,38,57,44,56,56,39,57,4c,\
"{37BC45AB-38E3-4469-BF82-39158B83E3A3}"=hex:ab,45,bc,37,e3,38,69,44,bf,82,39,
   15,8b,83,e3,a3,5b,53,55,55,45,25,4c,39,4c,4a,4f,23,5b,5b,56,25,47,39,54,44,\
"{9419340D-43ED-46EE-9DD5-6D81600FFA6E}"=hex:0d,34,19,94,ed,43,ee,46,9d,d5,6d,
   81,60,0f,fa,6e,42,48,42,5f,40,25,4a,32,5f,46,3a,23,44,27,25,50,47,39,58,20,\
"{B8550CB4-F0C8-456B-8576-7FC70AA57CDF}"=hex:b4,0c,55,b8,c8,f0,6b,45,85,76,7f,
   c7,0a,a5,7c,df,55,4c,57,55,4c,25,53,38,41,5d,5a,23,44,23,24,59,42,39,23,53,\
"{CE32B99E-971D-4BED-BD22-370684C12F19}"=hex:9e,b9,32,ce,1d,97,ed,4b,bd,22,37,
   06,84,c1,2f,19,48,37,5f,53,57,25,4d,3f,4d,5c,4a,23,4b,53,5d,57,50,39,26,5d,\
"{12377A4C-3E98-45EF-9032-16B0717CF970}"=hex:4c,7a,37,12,98,3e,ef,45,90,32,16,
   b0,71,7c,f9,70,31,55,53,40,5e,25,30,4e,5d,5b,39,23,5b,52,24,42,59,39,53,51,\
"{3FA0A203-34BB-4C9E-B826-A03BBF2B3C97}"=hex:03,a2,a0,3f,bb,34,9e,4c,b8,26,a0,
   3b,bf,2b,3c,97,5b,5d,40,4b,44,25,58,33,3c,4e,5b,23,37,5c,27,26,56,39,58,25,\
"{0879BEA0-3C99-464F-B9B3-3575EA22A53E}"=hex:a0,be,79,08,99,3c,4f,46,b9,b3,35,
   75,ea,22,a5,3e,49,48,4d,40,34,25,3d,5e,3f,5f,4e,23,3b,43,47,58,59,39,40,55,\
"{4F585855-3A90-489F-B973-E360C74C5B0A}"=hex:55,58,58,4f,90,3a,9f,48,b9,73,e3,
   60,c7,4c,5b,0a,50,4f,56,40,53,25,43,4b,33,40,4a,23,39,48,49,26,5f,39,26,5b,\
"{D87BA9F8-EB63-4FA8-B2FC-9BACDA88B7E1}"=hex:f8,a9,7b,d8,63,eb,a8,4f,b2,fc,9b,
   ac,da,88,b7,e1,5b,46,54,48,31,25,53,50,47,5f,49,23,39,58,40,5f,56,39,4d,22,\
"{8F43CC12-03BA-497D-8AC0-3D81DD3AC5EF}"=hex:12,cc,43,8f,ba,03,7d,49,8a,c0,3d,
   81,dd,3a,c5,ef,4f,43,36,45,33,25,4f,53,5b,4f,5d,23,44,54,57,54,43,39,44,5c,\
"{36509D28-6C1F-490A-B46F-F88B32685910}"=hex:28,9d,50,36,1f,6c,0a,49,b4,6f,f8,
   8b,32,68,59,10,52,4f,50,50,46,25,3d,48,3f,38,5d,23,3c,53,50,24,59,39,56,52,\
"{746E3D8C-06AE-44E9-9D14-85F09D037FB3}"=hex:8c,3d,6e,74,ae,06,e9,44,9d,14,85,
   f0,9d,03,7f,b3,41,48,4b,4d,3e,25,45,5c,47,4d,58,23,47,57,28,43,24,39,5b,41,\
"{64E1C408-505D-445E-B834-0323D5557CC5}"=hex:08,c4,e1,64,5d,50,5e,44,b8,34,03,
   23,d5,55,7c,c5,46,53,49,51,31,25,41,3d,43,49,34,23,3d,5e,23,59,41,39,54,4f,\
"{DC6683BD-2F8A-42CE-A784-05E1A2AD8921}"=hex:bd,83,66,dc,8a,2f,ce,42,a7,84,05,
   e1,a2,ad,89,21,34,51,33,35,55,25,3e,4b,5d,54,5c,23,43,28,29,2b,5b,39,58,2f,\
"{97EB4186-4771-40D0-87CB-25B584E787F8}"=hex:86,41,eb,97,71,47,d0,40,87,cb,25,
   b5,84,e7,87,f8,40,51,36,53,41,25,3c,5d,33,5c,4a,23,3b,56,49,20,59,39,5e,25,\
"{D58EA0E2-FB1B-45A1-9D1D-090F3C1A88F3}"=hex:e2,a0,8e,d5,1b,fb,a1,45,9d,1d,09,
   0f,3c,1a,88,f3,31,3c,5f,40,51,25,51,5b,5b,5e,4b,23,57,22,5b,42,59,39,26,47,\
"{F11540C9-EA60-4096-BD95-2F50B4EA874B}"=hex:c9,40,15,f1,60,ea,96,40,bd,95,2f,
   50,b4,ea,87,4b,50,52,30,51,4b,25,4b,39,3c,41,4b,23,47,27,43,46,24,39,52,2e,\
"{F4087A74-1BC8-4035-ABD1-F0F064750D02}"=hex:74,7a,08,f4,c8,1b,35,40,ab,d1,f0,
   f0,64,75,0d,02,59,46,4e,33,46,25,4f,39,32,58,45,23,5d,51,5f,45,2b,39,4c,42,\
"{D96A526A-22E2-4452-B0E8-0DA1F3747AF5}"=hex:6a,52,6a,d9,e2,22,52,44,b0,e8,0d,
   a1,f3,74,7a,f5,52,3d,40,4d,41,25,48,3c,4c,5e,4f,23,3b,24,26,59,40,39,5f,2f,\
"{A0EA985C-B282-4E35-B45C-C3ECE46DC57E}"=hex:5c,98,ea,a0,82,b2,35,4e,b4,5c,c3,
   ec,e4,6d,c5,7e,52,4e,4d,51,4c,25,47,38,4d,4a,46,23,3b,25,50,26,47,39,53,4f,\
"{780CCBF0-3F69-414B-AEAE-3595938E5A70}"=hex:f0,cb,0c,78,69,3f,4b,41,ae,ae,35,
   95,93,8e,5a,70,55,53,57,52,5f,25,59,48,52,3e,40,23,39,29,56,4b,49,39,52,5a,\
"{EA918AC1-2E4C-4AAE-B4DA-971D5C97C4FF}"=hex:c1,8a,91,ea,4c,2e,ae,4a,b4,da,97,
   1d,5c,97,c4,ff,55,42,41,4b,44,25,4e,44,47,5b,4f,23,5b,22,5d,25,58,39,4c,42,\
"{2F6881FE-C449-427C-A9E6-7078FBF2D490}"=hex:fe,81,68,2f,49,c4,7c,42,a9,e6,70,
   78,fb,f2,d4,90,36,56,32,3e,40,25,43,46,3e,49,54,23,3b,58,52,48,46,39,44,23,\
"{5B73420A-B228-4569-9CAB-23239A05D666}"=hex:0a,42,73,5b,28,b2,69,45,9c,ab,23,
   23,9a,05,d6,66,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
"{3B3186E7-DEF7-4176-88BB-CF733E24D038}"=hex:e7,86,31,3b,f7,de,76,41,88,bb,cf,
   73,3e,24,d0,38,41,47,52,3e,5f,25,58,3f,3d,59,45,23,45,25,24,54,5f,39,4c,5e,\
"{5536A06C-E018-4C6C-BCA9-117480DB1B39}"=hex:6c,a0,36,55,18,e0,6c,4c,bc,a9,11,
   74,80,db,1b,39,4f,31,50,3e,57,25,4e,3e,3e,55,45,23,58,47,24,26,55,39,47,5d,\
"{8378C854-74F4-4BA0-B1AE-B6A270CF17A1}"=hex:54,c8,78,83,f4,74,a0,4b,b1,ae,b6,
   a2,70,cf,17,a1,40,31,56,3f,45,25,59,48,51,3f,3e,23,37,51,46,2a,27,39,51,24,\
"{FD8EFE08-7BFE-4956-9695-F4CA91048782}"=hex:08,fe,8e,fd,fe,7b,56,49,96,95,f4,
   ca,91,04,87,82,41,31,46,50,30,25,4e,38,3e,39,4e,23,4a,26,5d,40,56,39,51,21,\
"{E1695815-719F-4EA2-B1B4-3C27C4C25ABE}"=hex:15,58,69,e1,9f,71,a2,4e,b1,b4,3c,
   27,c4,c2,5a,be,45,40,4e,4a,4d,25,42,4b,5f,55,43,23,4a,48,5c,2a,58,39,43,45,\
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Handlers]
@Denied: (A) (Everyone)
"{65B37A38-59FD-4FD7-BCF0-269C3895F418}"=hex:38,7a,b3,65,fd,59,d7,4f,bc,f0,26,
   9c,38,95,f4,18,3b,3d,36,51,55,25,5f,41,38,3f,49,23,41,58,59,41,5d,39,40,58,\
"{92040D32-A672-48E6-9141-F9FF6EC81BB8}"=hex:32,0d,04,92,72,a6,e6,48,91,41,f9,
   ff,6e,c8,1b,b8,56,54,33,52,42,25,4b,5d,53,5b,46,23,45,5e,49,2a,52,39,59,40,\
"{6906DA54-8766-47C7-80C4-A120C57EA37A}"=hex:54,da,06,69,66,87,c7,47,80,c4,a1,
   20,c5,7e,a3,7a,4d,51,50,33,41,25,3c,5e,3e,49,45,23,5d,40,55,5e,56,39,2d,2f,\
"{B13CC3C4-FF42-4DA7-8DCD-C9D06677C761}"=hex:c4,c3,3c,b1,42,ff,a7,4d,8d,cd,c9,
   d0,66,77,c7,61,44,4e,4d,51,5e,25,5e,33,47,59,46,23,56,43,24,53,4b,39,58,2f,\
"{92FAA829-3A53-43C2-BBD6-736B7B149B48}"=hex:29,a8,fa,92,53,3a,c2,43,bb,d6,73,
   6b,7b,14,9b,48,52,57,5c,30,41,25,42,5a,53,3e,58,23,49,5d,40,57,4a,39,4c,2f,\
"{90DB4BDC-DDC8-422A-B565-1F53ADA13191}"=hex:dc,4b,db,90,c8,dd,2a,42,b5,65,1f,
   53,ad,a1,31,91,49,50,51,4c,51,25,31,52,4f,4d,4f,23,39,48,5a,50,43,39,47,42,\
"{A9A328D0-B470-4A1F-AD30-C5C16BD46FB5}"=hex:d0,28,a3,a9,70,b4,1f,4a,ad,30,c5,
   c1,6b,d4,6f,b5,55,46,46,5c,3f,25,3f,47,53,59,3f,23,59,4a,47,45,20,39,26,41,\
"{8E63DE8B-E136-4FD1-97BF-2A2B5D28E82C}"=hex:8b,de,63,8e,36,e1,d1,4f,97,bf,2a,
   2b,5d,28,e8,2c,50,40,55,4b,55,25,41,5d,5d,44,59,23,3b,41,56,42,5e,39,46,51,\
"{FD009ACE-592E-451F-8F3C-0746241D1941}"=hex:ce,9a,00,fd,2e,59,1f,45,8f,3c,07,
   46,24,1d,19,41,5b,31,46,32,45,25,48,33,48,5f,39,23,43,46,5b,5c,46,39,56,5b,\
"{83655CAC-B7C0-4CAF-B057-6BE15D2A9B61}"=hex:ac,5c,65,83,c0,b7,af,4c,b0,57,6b,
   e1,5d,2a,9b,61,48,33,40,54,3f,25,50,40,5a,40,35,23,3b,25,5c,5f,2b,39,4f,45,\
"{EE891EF8-08DA-4645-8A01-23A9BC8A68B2}"=hex:f8,1e,89,ee,da,08,45,46,8a,01,23,
   a9,bc,8a,68,b2,4b,57,43,33,53,25,5c,4d,38,58,3f,23,58,5d,40,59,25,39,59,45,\
"{55ECDCDB-FCFE-42A0-A51F-621756D1A480}"=hex:db,dc,ec,55,fe,fc,a0,42,a5,1f,62,
   17,56,d1,a4,80,3b,3c,3d,52,41,25,50,4c,45,40,58,23,5b,5d,42,25,50,39,57,43,\
"{7B0D3076-B2AB-4CA4-9F48-24A4207DFFB7}"=hex:76,30,0d,7b,ab,b2,a4,4c,9f,48,24,
   a4,20,7d,ff,b7,4f,42,3d,42,5d,25,4c,33,4c,46,3e,23,5a,48,5f,44,5d,39,52,58,\
"{91AB175C-D0E1-4391-A739-03D5D07A7505}"=hex:5c,17,ab,91,e1,d0,91,43,a7,39,03,
   d5,d0,7a,75,05,4e,3c,4e,40,54,25,50,42,5f,44,54,23,58,26,53,4b,50,39,50,55,\
"{11C09842-018D-4D79-A8FA-4B9BA6DD6A8C}"=hex:42,98,c0,11,8d,01,79,4d,a8,fa,4b,
   9b,a6,dd,6a,8c,31,4a,32,3e,49,25,4a,4f,4c,4d,59,23,38,57,44,56,56,39,57,4c,\
"{37BC45AB-38E3-4469-BF82-39158B83E3A3}"=hex:ab,45,bc,37,e3,38,69,44,bf,82,39,
   15,8b,83,e3,a3,5b,53,55,55,45,25,4c,39,4c,4a,4f,23,5b,5b,56,25,47,39,54,44,\
"{9419340D-43ED-46EE-9DD5-6D81600FFA6E}"=hex:0d,34,19,94,ed,43,ee,46,9d,d5,6d,
   81,60,0f,fa,6e,42,48,42,5f,40,25,4a,32,5f,46,3a,23,44,27,25,50,47,39,58,20,\
"{B8550CB4-F0C8-456B-8576-7FC70AA57CDF}"=hex:b4,0c,55,b8,c8,f0,6b,45,85,76,7f,
   c7,0a,a5,7c,df,55,4c,57,55,4c,25,53,38,41,5d,5a,23,44,23,24,59,42,39,23,53,\
"{CE32B99E-971D-4BED-BD22-370684C12F19}"=hex:9e,b9,32,ce,1d,97,ed,4b,bd,22,37,
   06,84,c1,2f,19,48,37,5f,53,57,25,4d,3f,4d,5c,4a,23,4b,53,5d,57,50,39,26,5d,\
"{12377A4C-3E98-45EF-9032-16B0717CF970}"=hex:4c,7a,37,12,98,3e,ef,45,90,32,16,
   b0,71,7c,f9,70,31,55,53,40,5e,25,30,4e,5d,5b,39,23,5b,52,24,42,59,39,53,51,\
"{3FA0A203-34BB-4C9E-B826-A03BBF2B3C97}"=hex:03,a2,a0,3f,bb,34,9e,4c,b8,26,a0,
   3b,bf,2b,3c,97,5b,5d,40,4b,44,25,58,33,3c,4e,5b,23,37,5c,27,26,56,39,58,25,\
"{0879BEA0-3C99-464F-B9B3-3575EA22A53E}"=hex:a0,be,79,08,99,3c,4f,46,b9,b3,35,
   75,ea,22,a5,3e,49,48,4d,40,34,25,3d,5e,3f,5f,4e,23,3b,43,47,58,59,39,40,55,\
"{4F585855-3A90-489F-B973-E360C74C5B0A}"=hex:55,58,58,4f,90,3a,9f,48,b9,73,e3,
   60,c7,4c,5b,0a,50,4f,56,40,53,25,43,4b,33,40,4a,23,39,48,49,26,5f,39,26,5b,\
"{D87BA9F8-EB63-4FA8-B2FC-9BACDA88B7E1}"=hex:f8,a9,7b,d8,63,eb,a8,4f,b2,fc,9b,
   ac,da,88,b7,e1,5b,46,54,48,31,25,53,50,47,5f,49,23,39,58,40,5f,56,39,4d,22,\
"{8F43CC12-03BA-497D-8AC0-3D81DD3AC5EF}"=hex:12,cc,43,8f,ba,03,7d,49,8a,c0,3d,
   81,dd,3a,c5,ef,4f,43,36,45,33,25,4f,53,5b,4f,5d,23,44,54,57,54,43,39,44,5c,\
"{36509D28-6C1F-490A-B46F-F88B32685910}"=hex:28,9d,50,36,1f,6c,0a,49,b4,6f,f8,
   8b,32,68,59,10,52,4f,50,50,46,25,3d,48,3f,38,5d,23,3c,53,50,24,59,39,56,52,\
"{746E3D8C-06AE-44E9-9D14-85F09D037FB3}"=hex:8c,3d,6e,74,ae,06,e9,44,9d,14,85,
   f0,9d,03,7f,b3,41,48,4b,4d,3e,25,45,5c,47,4d,58,23,47,57,28,43,24,39,5b,41,\
"{64E1C408-505D-445E-B834-0323D5557CC5}"=hex:08,c4,e1,64,5d,50,5e,44,b8,34,03,
   23,d5,55,7c,c5,46,53,49,51,31,25,41,3d,43,49,34,23,3d,5e,23,59,41,39,54,4f,\
"{DC6683BD-2F8A-42CE-A784-05E1A2AD8921}"=hex:bd,83,66,dc,8a,2f,ce,42,a7,84,05,
   e1,a2,ad,89,21,34,51,33,35,55,25,3e,4b,5d,54,5c,23,43,28,29,2b,5b,39,58,2f,\
"{97EB4186-4771-40D0-87CB-25B584E787F8}"=hex:86,41,eb,97,71,47,d0,40,87,cb,25,
   b5,84,e7,87,f8,40,51,36,53,41,25,3c,5d,33,5c,4a,23,3b,56,49,20,59,39,5e,25,\
"{D58EA0E2-FB1B-45A1-9D1D-090F3C1A88F3}"=hex:e2,a0,8e,d5,1b,fb,a1,45,9d,1d,09,
   0f,3c,1a,88,f3,31,3c,5f,40,51,25,51,5b,5b,5e,4b,23,57,22,5b,42,59,39,26,47,\
"{F11540C9-EA60-4096-BD95-2F50B4EA874B}"=hex:c9,40,15,f1,60,ea,96,40,bd,95,2f,
   50,b4,ea,87,4b,50,52,30,51,4b,25,4b,39,3c,41,4b,23,47,27,43,46,24,39,52,2e,\
"{F4087A74-1BC8-4035-ABD1-F0F064750D02}"=hex:74,7a,08,f4,c8,1b,35,40,ab,d1,f0,
   f0,64,75,0d,02,59,46,4e,33,46,25,4f,39,32,58,45,23,5d,51,5f,45,2b,39,4c,42,\
"{D96A526A-22E2-4452-B0E8-0DA1F3747AF5}"=hex:6a,52,6a,d9,e2,22,52,44,b0,e8,0d,
   a1,f3,74,7a,f5,52,3d,40,4d,41,25,48,3c,4c,5e,4f,23,3b,24,26,59,40,39,5f,2f,\
"{A0EA985C-B282-4E35-B45C-C3ECE46DC57E}"=hex:5c,98,ea,a0,82,b2,35,4e,b4,5c,c3,
   ec,e4,6d,c5,7e,52,4e,4d,51,4c,25,47,38,4d,4a,46,23,3b,25,50,26,47,39,53,4f,\
"{780CCBF0-3F69-414B-AEAE-3595938E5A70}"=hex:f0,cb,0c,78,69,3f,4b,41,ae,ae,35,
   95,93,8e,5a,70,55,53,57,52,5f,25,59,48,52,3e,40,23,39,29,56,4b,49,39,52,5a,\
"{EA918AC1-2E4C-4AAE-B4DA-971D5C97C4FF}"=hex:c1,8a,91,ea,4c,2e,ae,4a,b4,da,97,
   1d,5c,97,c4,ff,55,42,41,4b,44,25,4e,44,47,5b,4f,23,5b,22,5d,25,58,39,4c,42,\
"{2F6881FE-C449-427C-A9E6-7078FBF2D490}"=hex:fe,81,68,2f,49,c4,7c,42,a9,e6,70,
   78,fb,f2,d4,90,36,56,32,3e,40,25,43,46,3e,49,54,23,3b,58,52,48,46,39,44,23,\
"{5B73420A-B228-4569-9CAB-23239A05D666}"=hex:0a,42,73,5b,28,b2,69,45,9c,ab,23,
   23,9a,05,d6,66,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
"{3B3186E7-DEF7-4176-88BB-CF733E24D038}"=hex:e7,86,31,3b,f7,de,76,41,88,bb,cf,
   73,3e,24,d0,38,41,47,52,3e,5f,25,58,3f,3d,59,45,23,45,25,24,54,5f,39,4c,5e,\
"{5536A06C-E018-4C6C-BCA9-117480DB1B39}"=hex:6c,a0,36,55,18,e0,6c,4c,bc,a9,11,
   74,80,db,1b,39,4f,31,50,3e,57,25,4e,3e,3e,55,45,23,58,47,24,26,55,39,47,5d,\
"{8378C854-74F4-4BA0-B1AE-B6A270CF17A1}"=hex:54,c8,78,83,f4,74,a0,4b,b1,ae,b6,
   a2,70,cf,17,a1,40,31,56,3f,45,25,59,48,51,3f,3e,23,37,51,46,2a,27,39,51,24,\
"{FD8EFE08-7BFE-4956-9695-F4CA91048782}"=hex:08,fe,8e,fd,fe,7b,56,49,96,95,f4,
   ca,91,04,87,82,41,31,46,50,30,25,4e,38,3e,39,4e,23,4a,26,5d,40,56,39,51,21,\
"{E1695815-719F-4EA2-B1B4-3C27C4C25ABE}"=hex:15,58,69,e1,9f,71,a2,4e,b1,b4,3c,
   27,c4,c2,5a,be,45,40,4e,4a,4d,25,42,4b,5f,55,43,23,4a,48,5c,2a,58,39,43,45,\
.
[HKEY_USERS\S-1-5-21-1966150783-2353473218-186421051-1000\Software\SecuROM\License information*]
"datasecu"=hex:41,8e,dd,a8,68,18,e0,ad,34,22,a5,2f,bc,02,d5,6a,87,be,7a,7d,b2,
   fe,b8,d7,3e,63,4f,24,e7,70,1b,65,0a,db,cf,65,87,af,fe,a2,8a,d1,07,94,d0,77,\
"rkeysecu"=hex:27,14,5d,c0,8d,38,37,a6,c5,13,56,73,1c,14,84,9f
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Andra processer som körs ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\program files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
.
**************************************************************************
.
Sluttid: 2013-11-20  12:28:45 - datorn startades om.
ComboFix-quarantined-files.txt  2013-11-20 11:28
ComboFix2.txt  2013-11-18 17:23
.
Före genomsökningen: 241 765 167 104 byte ledigt
Efter genomsökningen: 241 158 934 528 byte ledigt
.
- - End Of File - - 56638107F72B8AFB1CEC9A864C88D4FA
 



#14 TimL

TimL
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:56 PM

Posted 20 November 2013 - 06:41 AM

From what I've seen so far nothing has changed. My firewall wont start som am I supposed to start a new topic?



#15 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:11:56 AM

Posted 20 November 2013 - 11:33 AM

are you using a third party firewall or is it the Windows firewall that is the issue?

 

Please run the following:

 

Please download Farbar Service Scanner and run it

  • Make sure the following options are checked:
    • Internet Services

    • Windows Firewall

    • System Restore

    • Security Center

    • Windows Update

    • Windows Defender

  • Press "Scan".

  • It will create a log (FSS.txt) in the same directory the tool is run.

  • Please copy and paste the log to your reply.


Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users