Not sure what my laptop is infected with

[howardjai]

my laptops been infected for 4 days and i couldnt able to fix it.

on Tdsskiller it shows that the infection is rootkit.win32.backboot.gen

on malwarebte it doesnt show any infection

on avast it doesnt show any infection

on anvi smart defender it shows that the infection is 2 backdoor.whitesmokebar, 2 malware.generic, 3 troan.agent and 1 trojan.bho

 

Need help fixing it please!!1 thank you

[howardjai]

dds.txt

 

 

DDS (Ver_2012-11-20.01) - NTFS_AMD64 

Internet Explorer: 10.0.9200.16611  BrowserJavaVersion: 10.25.2

Run by Trinz at 6:29:36 on 2013-07-08

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.2.1033.18.6092.4113 [GMT -7:00]

.

AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

C:\Program Files (x86)\QUALCOMM\QDLService2k\QDLService2kAlienware.exe

C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\svchost.exe -k bthsvcs

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

C:\Program Files\Box Sync\BoxSyncHelper.exe

C:\Program Files\Alienware\Command Center\AWCCServiceController.exe

C:\Program Files\Alienware\Alienware TactX Mouse CI\AWMouseCI.exe

C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files\Bigfoot Networks\Killer Network Manager\KillerNetManager.exe

C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files\AVAST Software\Avast\AvastUI.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Windows\SysWOW64\RunDll32.exe

C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe

C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe

C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe

C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe

C:\Program Files\Alienware\Command Center\AlienFusionService.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

C:\Windows\System32\svchost.exe -k secsvcs

C:\Program Files\Alienware\Command Center\AlienFusionController.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

C:\Program Files\AVAST Software\Avast\AvastSvc.exe

C:\Windows\System32\WUDFHost.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\igfxsrvc.exe

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uSearch Bar = Preserve

mWinlogon: Userinit = userinit.exe

BHO: DivX Plus Web Player HTML5 <video>: {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll

TB: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

uRun: [steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent

uRun: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

uRun: [Google Update] <no file>

mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

mRun: [AlienwareOn-ScreenDisplay] C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe

mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

mRun: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

mRun: [Anvi Smart Defender] C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASDTray.exe

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\AWMouseCI.lnk - C:\Program Files\Alienware\Alienware TactX Mouse CI\AWMouseCI.exe

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\Box Sync.lnk - C:\Program Files\Box Sync\BoxSync.exe

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk - C:\Program Files\Bigfoot Networks\Killer Network Manager\KillerNetManager.exe

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

LSP: %SYSTEMROOT%\system32\BfLLR.dll

Trusted Zone: dell.com

Trusted Zone: internet

Trusted Zone: mcafee.com

Trusted Zone: mcafee.com

TCP: Interfaces\{35449EE2-FC01-45DE-B7D7-91219B092CA5} : DHCPNameServer = 64.71.255.198 64.71.255.253

TCP: Interfaces\{7B7932F6-CF46-4D91-8232-18587B926A10} : DHCPNameServer = 64.71.255.198 64.71.255.253

TCP: Interfaces\{A0CD15D4-C024-441C-A6BC-F13082DD9E79} : DHCPNameServer = 202.96.128.86 202.96.134.33

TCP: Interfaces\{BA2A2DA6-210D-47E8-81D8-CA32C0141B14} : DHCPNameServer = 61.31.233.1 168.95.1.1

TCP: Interfaces\{C47EE6B8-C3EF-4768-B9CD-89DEA5DF870B} : DHCPNameServer = 210.21.4.130 221.5.88.88

TCP: Interfaces\{F6F142B9-C72A-4E34-8FE6-E3BC23C6EFD6} : DHCPNameServer = 202.96.128.86 202.96.134.33

TCP: Interfaces\{F6F142B9-C72A-4E34-8FE6-E3BC23C6EFD6}\351445F40236163747C656026364 : DHCPNameServer = 168.95.1.1 168.95.192.1

TCP: Interfaces\{F6F142B9-C72A-4E34-8FE6-E3BC23C6EFD6}\4505D2C494E4B4F5135423533314 : DHCPNameServer = 202.96.128.86 202.96.134.33

TCP: Interfaces\{F6F142B9-C72A-4E34-8FE6-E3BC23C6EFD6}\452796E6A72E08993702960586F6E656 : DHCPNameServer = 210.21.4.130 221.5.88.88

TCP: Interfaces\{F6F142B9-C72A-4E34-8FE6-E3BC23C6EFD6}\54852364D25444A32443A33443 : DHCPNameServer = 0.0.0.0

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

AppInit_DLLs= C:\Windows\SysWOW64\nvinit.dll

SSODL: WebCheck - <orphaned>

SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

x64-BHO: avast! Online Security: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll

x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

x64-BHO: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

x64-BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll

x64-TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll

x64-TB: avast! Online Security: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll

x64-Run: [synTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe

x64-Run: [igfxTray] C:\Windows\System32\igfxtray.exe

x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe

x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe

x64-Run: [Command Center Controllers] "C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe"

x64-Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE

x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s

x64-Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3 

x64-Run: [boxSyncHelper] "C:\Program Files\Box Sync\BoxSyncHelper.exe"

x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

x64-Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll

x64-Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - <orphaned>

x64-Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll

x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

x64-Notify: igfxcui - igfxdev.dll

x64-SSODL: WebCheck - <orphaned>

.

============= SERVICES / DRIVERS ===============

.

R0 aswRvrt;aswRvrt;C:\Windows\System32\drivers\aswRvrt.sys [2013-7-4 65336]

R0 aswVmm;aswVmm;C:\Windows\System32\drivers\aswVmm.sys [2013-7-4 189936]

R0 EMSC;COMPAL Embedded System Control;C:\Windows\System32\drivers\EMSC.sys [2009-6-26 16752]

R0 johci;JMicron 1394 Filter Driver;C:\Windows\System32\drivers\johci.sys [2012-2-15 25688]

R0 nvpciflt;nvpciflt;C:\Windows\System32\drivers\nvpciflt.sys [2013-2-2 30648]

R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2013-7-4 1025808]

R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2013-7-4 378432]

R1 BfLwf;Bigfoot Networks Bandwidth Control;C:\Windows\System32\drivers\bflwfx64.sys [2012-2-15 75880]

R1 nvkflt;nvkflt;C:\Windows\System32\drivers\nvkflt.sys [2013-2-2 284600]

R2 AERTFilters;Andrea RT Filters Service;C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2012-4-4 98208]

R2 AlienFusionService;Alienware Fusion Service;C:\Program Files\Alienware\Command Center\AlienFusionService.exe [2011-1-13 15296]

R2 aswFsBlk;aswFsBlk;C:\Windows\System32\drivers\aswFsBlk.sys [2013-7-4 33400]

R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2013-7-4 80816]

R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-7-4 46808]

R2 ProtectorA;ProtectorA;C:\Windows\System32\drivers\ProtectorA.sys [2012-7-15 22672]

R2 QDLService2kAlienware;Qualcomm Gobi 2000 Download Service (Alienware);C:\Program Files (x86)\QUALCOMM\QDLService2k\QDLService2kAlienware.exe [2010-6-25 331512]

R2 Qualcomm Atheros Killer Service;Qualcomm Atheros Killer Service;C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe [2012-2-15 492032]

R2 SSPORT;SSPORT;C:\Windows\System32\drivers\SSPORT.sys [2009-11-19 11576]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-12-29 383416]

R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-2-15 2656280]

R3 Ak27x64;Killer Wireless-N 1102 device driver;C:\Windows\System32\drivers\Ak27x64.sys [2012-2-1 2740328]

R3 btwampfl;Bluetooth AMP USB Filter;C:\Windows\System32\drivers\btwampfl.sys [2012-2-15 344616]

R3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2012-2-15 39464]

R3 IntcDAud;Intel® Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2012-2-15 317440]

R3 JMCR;JMCR;C:\Windows\System32\drivers\jmcr.sys [2012-2-15 173656]

R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;C:\Windows\System32\drivers\L1C62x64.sys [2012-2-15 76912]

R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\System32\drivers\nusb3hub.sys [2011-2-1 80384]

R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\System32\drivers\nusb3xhc.sys [2011-2-1 181248]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;"C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc --> C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [?]

S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-6-3 162408]

S3 Netaapl;Apple Mobile Device Ethernet Service;C:\Windows\System32\drivers\netaapl64.sys [2011-8-2 22528]

S3 TesSafe;TesSafe;C:\Windows\System32\TesSafe.sys [2012-7-13 160384]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392]

S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232]

S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-7-9 53760]

S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2012-2-15 1255736]

.

=============== Created Last 30 ================

.

2013-07-08 13:18:11 8669240 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{87F9C29D-E65E-4EBA-8EF9-9EE0DD4B0B5C}\mpengine.dll

2013-07-08 12:30:23 208216 ----a-w- C:\Windows\System32\drivers\15473365.sys

2013-07-08 09:51:58 -------- d-----w- C:\Users\Trinz\AppData\Roaming\Anvisoft

2013-07-08 09:51:52 23376 ----a-w- C:\Windows\System32\drivers\asdrs.sys

2013-07-08 09:51:52 18768 ----a-w- C:\Windows\System32\drivers\asdrm.sys

2013-07-08 09:51:52 17232 ----a-w- C:\Windows\System32\drivers\asdws.sys

2013-07-08 09:51:52 -------- d-----w- C:\ProgramData\Anvisoft

2013-07-08 09:51:51 -------- d-----w- C:\Program Files (x86)\Anvisoft

2013-07-08 09:45:32 208216 ----a-w- C:\Windows\System32\drivers\62937670.sys

2013-07-08 08:01:26 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys

2013-07-08 08:01:26 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-07-04 15:45:30 -------- d-----w- C:\TDSSKiller_Quarantine

2013-07-04 11:31:00 80816 ----a-w- C:\Windows\System32\drivers\aswMonFlt.sys

2013-07-04 11:31:00 65336 ----a-w- C:\Windows\System32\drivers\aswRvrt.sys

2013-07-04 11:31:00 189936 ----a-w- C:\Windows\System32\drivers\aswVmm.sys

2013-07-04 11:31:00 1025808 ----a-w- C:\Windows\System32\drivers\aswSnx.sys

2013-07-04 11:30:45 41664 ----a-w- C:\Windows\avastSS.scr

2013-07-04 10:53:10 -------- d-----w- C:\Program Files\AVAST Software

2013-07-04 10:26:05 -------- d-----w- C:\ProgramData\AVAST Software

2013-07-04 10:19:53 861696 -c----w- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_c0000185_527d3ae4857ee3c17b123f7227aaf8386dbab6_cab_0aaf1a14\oleaut32.dll

2013-07-04 10:19:16 -------- d-----w- C:\Users\Trinz\AppData\Roaming\Malwarebytes

2013-07-04 10:19:00 -------- d-----w- C:\ProgramData\Malwarebytes

2013-07-02 16:11:27 -------- d-----w- C:\Users\Trinz\AppData\Roaming\uTorrent

2013-06-24 13:42:17 96168 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll

2013-06-13 17:18:38 257536 ----a-w- C:\Program Files (x86)\Internet Explorer\ieproxy.dll

2013-06-12 17:49:57 1910632 ----a-w- C:\Windows\System32\drivers\tcpip.sys

2013-06-12 17:43:49 1887232 ----a-w- C:\Windows\System32\d3d11.dll

2013-06-12 17:43:49 1505280 ----a-w- C:\Windows\SysWow64\d3d11.dll

.

==================== Find3M  ====================

.

2013-06-24 13:42:12 867240 ----a-w- C:\Windows\SysWow64\npDeployJava1.dll

2013-06-24 13:42:12 789416 ----a-w- C:\Windows\SysWow64\deployJava1.dll

2013-06-08 12:28:46 2706432 ----a-w- C:\Windows\System32\mshtml.tlb

2013-06-08 11:13:19 2706432 ----a-w- C:\Windows\SysWow64\mshtml.tlb

2013-05-17 01:25:57 1767936 ----a-w- C:\Windows\SysWow64\wininet.dll

2013-05-17 01:25:27 2877440 ----a-w- C:\Windows\SysWow64\jscript9.dll

2013-05-17 01:25:26 61440 ----a-w- C:\Windows\SysWow64\iesetup.dll

2013-05-17 01:25:26 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll

2013-05-17 00:59:03 2241024 ----a-w- C:\Windows\System32\wininet.dll

2013-05-17 00:58:10 3958784 ----a-w- C:\Windows\System32\jscript9.dll

2013-05-17 00:58:08 67072 ----a-w- C:\Windows\System32\iesetup.dll

2013-05-17 00:58:08 136704 ----a-w- C:\Windows\System32\iesysprep.dll

2013-05-14 12:23:25 89600 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe

2013-05-14 08:40:13 71680 ----a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe

2013-05-13 05:51:01 184320 ----a-w- C:\Windows\System32\cryptsvc.dll

2013-05-13 05:51:00 1464320 ----a-w- C:\Windows\System32\crypt32.dll

2013-05-13 05:51:00 139776 ----a-w- C:\Windows\System32\cryptnet.dll

2013-05-13 05:50:40 52224 ----a-w- C:\Windows\System32\certenc.dll

2013-05-13 04:45:55 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll

2013-05-13 04:45:55 1160192 ----a-w- C:\Windows\SysWow64\crypt32.dll

2013-05-13 04:45:55 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll

2013-05-13 03:43:55 1192448 ----a-w- C:\Windows\System32\certutil.exe

2013-05-13 03:08:10 903168 ----a-w- C:\Windows\SysWow64\certutil.exe

2013-05-13 03:08:06 43008 ----a-w- C:\Windows\SysWow64\certenc.dll

2013-05-10 05:49:27 30720 ----a-w- C:\Windows\System32\cryptdlg.dll

2013-05-10 03:20:54 24576 ----a-w- C:\Windows\SysWow64\cryptdlg.dll

2013-05-02 09:06:08 278800 ------w- C:\Windows\System32\MpSigStub.exe

2013-04-26 05:51:36 751104 ----a-w- C:\Windows\System32\win32spl.dll

2013-04-26 04:55:21 492544 ----a-w- C:\Windows\SysWow64\win32spl.dll

2013-04-17 07:02:06 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll

2013-04-17 06:24:46 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll

2013-04-13 05:49:23 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll

2013-04-13 05:49:19 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll

2013-04-13 05:49:19 308736 ----a-w- C:\Windows\apppatch\AppPatch64\AcGenral.dll

2013-04-13 05:49:19 111104 ----a-w- C:\Windows\apppatch\AppPatch64\acspecfc.dll

2013-04-13 04:45:16 474624 ----a-w- C:\Windows\apppatch\AcSpecfc.dll

2013-04-13 04:45:15 2176512 ----a-w- C:\Windows\apppatch\AcGenral.dll

2013-04-12 14:45:08 1656680 ----a-w- C:\Windows\System32\drivers\ntfs.sys

2013-04-10 06:01:54 265064 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys

2013-04-10 06:01:53 983400 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys

2013-04-10 03:30:50 3153920 ----a-w- C:\Windows\System32\win32k.sys

.

============= FINISH:  6:29:48.15 ===============

[howardjai]

attach.txt

 

 

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Home Premium 

Boot Device: \Device\HarddiskVolume1

Install Date: 14/02/2012 11:43:15 PM

System Uptime: 08/07/2013 6:15:50 AM (0 hours ago)

.

Motherboard: Alienware |  | M11xR3

Processor: Intel® Core i7-2637M CPU @ 1.70GHz | CPU1 | 1701/1333mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 238 GiB total, 33.299 GiB free.

D: is Removable

.

==== Disabled Device Manager Items =============

.

Class GUID: 

Description: 

Device ID: ACPI\SMO8800\1

Manufacturer: 

Name: 

PNP Device ID: ACPI\SMO8800\1

Service: 

.

==== System Restore Points ===================

.

No restore point in system.

.

==== Installed Programs ======================

.

Adobe Reader X (10.1.7) MUI

Alienware On-Screen Display

Alienware TactX Mouse CI 1.00

Amnesia - The Dark Descent 

Anvi Smart Defender 1.9

Apple Application Support

Apple Mobile Device Support

Apple Software Update

Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver

avast! Free Antivirus

BitTorrent

Bonjour

Box Sync (64 bit)

Command Center

Counter-Strike: Global Offensive

Counter-Strike: Global Offensive - SDK

D3DX10

DivX Setup

EMSC

GameSpy Comrade

Google Chrome

Google Update Helper

Intel® Management Engine Components

Intel® Processor Graphics

iTunes

Java 7 Update 25

Java Auto Updater

JavaFX 2.1.1

JMicron 1394 Filter Driver

JMicron Flash Media Controller Driver

League of Legends

Left 4 Dead 2

Magicka

Malwarebytes Anti-Malware version 1.75.0.1300

Microsoft .NET Framework 1.1

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Application Error Reporting

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Access MUI (English) 2007

Microsoft Office Access Setup Metadata MUI (English) 2007

Microsoft Office Enterprise 2007

Microsoft Office Excel MUI (English) 2007

Microsoft Office File Validation Add-In

Microsoft Office Groove MUI (English) 2007

Microsoft Office Groove Setup Metadata MUI (English) 2007

Microsoft Office InfoPath MUI (English) 2007

Microsoft Office Office 64-bit Components 2007

Microsoft Office OneNote MUI (English) 2007

Microsoft Office Outlook MUI (English) 2007

Microsoft Office PowerPoint MUI (English) 2007

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (Spanish) 2007

Microsoft Office Proofing (English) 2007

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Publisher MUI (English) 2007

Microsoft Office Shared 64-bit MUI (English) 2007

Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007

Microsoft Office Shared MUI (English) 2007

Microsoft Office Shared Setup Metadata MUI (English) 2007

Microsoft Office Word MUI (English) 2007

Microsoft Silverlight

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2005 Redistributable (x64)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

Microsoft XNA Framework Redistributable 3.1

MSVCRT

NVIDIA 3D Vision Driver 310.90

NVIDIA Control Panel 310.90

NVIDIA Graphics Driver 310.90

NVIDIA HD Audio Driver 1.3.18.0

NVIDIA Install Application

NVIDIA Optimus 1.11.3

NVIDIA PhysX

NVIDIA PhysX System Software 9.12.1031

NVIDIA Stereoscopic 3D Driver

NVIDIA Update 1.11.3

NVIDIA Update Components

Portal

Portal 2

Qualcomm Atheros Killer Network Manager

Qualcomm Gobi 2000 Package for Alienware

Realtek High Definition Audio Driver

Renesas Electronics USB 3.0 Host Controller Driver

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

Security Update for Microsoft .NET Framework 4 Extended (KB2736428)

Security Update for Microsoft .NET Framework 4 Extended (KB2742595)

Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition 

Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition 

Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition 

Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition

Security Update for Microsoft Office Publisher 2007 (KB2597971) 32-Bit Edition 

Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition 

Shared C Run-time for x64

Skype Click to Call

Skype?6.5

Steam

Synaptics Pointing Device Driver

TrueCrypt

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939)

Update for Microsoft .NET Framework 4 Extended (KB2468871)

Update for Microsoft .NET Framework 4 Extended (KB2533523)

Update for Microsoft .NET Framework 4 Extended (KB2600217)

Update for Microsoft .NET Framework 4 Extended (KB2836939)

Update for Microsoft Office 2007 Help for Common Features (KB963673)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition

Update for Microsoft Office Access 2007 Help (KB963663)

Update for Microsoft Office Excel 2007 Help (KB963678)

Update for Microsoft Office Infopath 2007 Help (KB963662)

Update for Microsoft Office OneNote 2007 Help (KB963670)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition

Update for Microsoft Office Outlook 2007 Help (KB963677)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817327) 32-Bit Edition

Update for Microsoft Office Powerpoint 2007 Help (KB963669)

Update for Microsoft Office Publisher 2007 Help (KB963667)

Update for Microsoft Office Script Editor Help (KB963671)

Update for Microsoft Office Word 2007 Help (KB963665)

VC80CRTRedist - 8.0.50727.6195

WIDCOMM Bluetooth Software

Windows Live Communications Platform

Windows Live Essentials

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Language Selector

Windows Live Messenger

Windows Live Photo Common

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

WinRAR 4.11 (64-bit)

.

==== Event Viewer Messages From Past Week ========

.

08/07/2013 6:29:41 AM, Error: atapi [11]  - The driver detected a controller error on \Device\Ide\IdePort0.

08/07/2013 6:18:11 AM, Error: Service Control Manager [7031]  - The avast! Antivirus service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.

08/07/2013 6:18:05 AM, Error: Service Control Manager [7038]  - The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:  Logon failure: the specified account password has expired. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

08/07/2013 6:18:05 AM, Error: Service Control Manager [7000]  - The NVIDIA Update Service Daemon service failed to start due to the following error:  The service did not start due to a logon failure.

08/07/2013 6:16:04 AM, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  cdrom

08/07/2013 6:16:01 AM, Error: Service Control Manager [7000]  - The McAfee SiteAdvisor Service service failed to start due to the following error:  The system cannot find the file specified.

08/07/2013 6:15:51 AM, Error: volmgr [46]  - Crash dump initialization failed!

08/07/2013 6:11:41 AM, Error: Service Control Manager [7031]  - The Windows Modules Installer service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 6:01:36 AM, Error: Microsoft-Windows-CorruptedFileRecovery-Server [10]  - The system file C:\Program Files\Windows Defender\MpSvc.dll may be corrupted, but Windows could not determine if the file was actually damaged (error code 2147956481). No repair action was taken. Run the command "sfc /scannow" at an administrative command prompt to check for errors and to repair the file if necessary.

08/07/2013 6:01:35 AM, Error: Service Control Manager [7031]  - The Windows Defender service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 6:00:34 AM, Error: Microsoft-Windows-CorruptedFileRecovery-Server [10]  - The system file C:\Program Files\Windows Defender\MpClient.dll may be corrupted, but Windows could not determine if the file was actually damaged (error code 2147956481). No repair action was taken. Run the command "sfc /scannow" at an administrative command prompt to check for errors and to repair the file if necessary.

08/07/2013 6:00:33 AM, Error: Service Control Manager [7031]  - The Windows Defender service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 6:00:11 AM, Error: Service Control Manager [7034]  - The Alienware Fusion Service service terminated unexpectedly.  It has done this 1 time(s).

08/07/2013 5:29:07 AM, Error: Service Control Manager [7000]  - The Adblocker Monitor Driver service failed to start due to the following error:  The system cannot find the file specified.

08/07/2013 4:39:47 AM, Error: Service Control Manager [7034]  - The Windows Defender service terminated unexpectedly.  It has done this 3 time(s).

08/07/2013 4:21:05 AM, Error: Service Control Manager [7031]  - The Windows Search service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.

08/07/2013 4:19:04 AM, Error: Service Control Manager [7034]  - The avast! Antivirus service terminated unexpectedly.  It has done this 3 time(s).

08/07/2013 3:32:08 AM, Error: Service Control Manager [7031]  - The avast! Antivirus service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.

08/07/2013 3:07:25 AM, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the Windows Error Reporting Service service to connect.

08/07/2013 3:04:45 AM, Error: Microsoft-Windows-Kernel-General [6]  - An I/O operation initiated by the Registry failed unrecoverably.The Registry could not flush hive (file): ''.

08/07/2013 2:53:15 AM, Error: Service Control Manager [7023]  - The Windows Defender service terminated with the following error:  Error performing inpage operation.

08/07/2013 2:52:56 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Base Filtering Engine service, but this action failed with the following error:  An instance of the service is already running.

08/07/2013 2:50:56 AM, Error: Service Control Manager [7031]  - The Windows Firewall service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:50:56 AM, Error: Service Control Manager [7031]  - The Diagnostic Policy Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:50:56 AM, Error: Service Control Manager [7031]  - The Base Filtering Engine service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:44:14 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}

08/07/2013 2:44:14 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

08/07/2013 2:44:13 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

08/07/2013 2:44:08 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}

08/07/2013 2:44:03 AM, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  aswRvrt aswSnx aswSP aswTdi aswVmm cdrom discache MpFilter spldr truecrypt Wanarpv6

08/07/2013 2:43:30 AM, Error: Microsoft-Windows-Directory-Services-SAM [12291]  - SAM failed to start the TCP/IP or SPX/IPX listening thread

08/07/2013 2:41:55 AM, Error: Microsoft Antimalware [3002]  - 

08/07/2013 2:40:37 AM, Error: Service Control Manager [7031]  - The Windows Error Reporting Service service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 300000 milliseconds: Restart the service.

08/07/2013 2:40:37 AM, Error: Service Control Manager [7031]  - The Microsoft Antimalware Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 15000 milliseconds: Restart the service.

08/07/2013 2:26:24 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Management Instrumentation service, but this action failed with the following error:  An instance of the service is already running.

08/07/2013 2:26:24 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the User Profile Service service, but this action failed with the following error:  An instance of the service is already running.

08/07/2013 2:26:24 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Multimedia Class Scheduler service, but this action failed with the following error:  An instance of the service is already running.

08/07/2013 2:26:01 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Error Reporting Service service, but this action failed with the following error:  An instance of the service is already running.

08/07/2013 2:25:21 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Update service, but this action failed with the following error:  An instance of the service is already running.

08/07/2013 2:25:21 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Background Intelligent Transfer Service service, but this action failed with the following error:  An instance of the service is already running.

08/07/2013 2:24:22 AM, Error: Service Control Manager [7023]  - The Windows Defender service terminated with the following error:  %%-2146762496

08/07/2013 2:24:21 AM, Error: Service Control Manager [7034]  - The Application Information service terminated unexpectedly.  It has done this 1 time(s).

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The Windows Update service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The Windows Management Instrumentation service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The User Profile Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The Themes service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The Task Scheduler service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The System Event Notification Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The Shell Hardware Detection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The Server service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The Secondary Logon service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The Multimedia Class Scheduler service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The IP Helper service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The IKE and AuthIP IPsec Keying Modules service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The Group Policy Client service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The Extensible Authentication Protocol service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The Background Intelligent Transfer Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 2:24:21 AM, Error: Service Control Manager [7031]  - The Application Experience service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 2:24:19 AM, Error: Service Control Manager [7034]  - The Intel® Management and Security Application User Notification Service service terminated unexpectedly.  It has done this 1 time(s).

08/07/2013 2:24:19 AM, Error: Service Control Manager [7031]  - The Software Protection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:24:01 AM, Error: Service Control Manager [7031]  - The Windows Error Reporting Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:24:00 AM, Error: Service Control Manager [7031]  - The Windows Event Log service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 2:24:00 AM, Error: Service Control Manager [7031]  - The Windows Audio service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 2:24:00 AM, Error: Service Control Manager [7031]  - The TCP/IP NetBIOS Helper service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 100 milliseconds: Restart the service.

08/07/2013 2:24:00 AM, Error: Service Control Manager [7031]  - The DHCP Client service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:22:04 AM, Error: Service Control Manager [7024]  - The Windows Firewall service terminated with service-specific error Windows Firewall is not a valid Win32 application..

08/07/2013 2:21:33 AM, Error: Service Control Manager [7031]  - The WLAN AutoConfig service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:21:33 AM, Error: Service Control Manager [7031]  - The Windows Audio Endpoint Builder service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 2:21:33 AM, Error: Service Control Manager [7031]  - The Program Compatibility Assistant Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 2:21:33 AM, Error: Service Control Manager [7031]  - The Desktop Window Manager Session Manager service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 2:21:33 AM, Error: Service Control Manager [7000]  - The Distributed Link Tracking Client service failed to start due to the following error:  The pipe has been ended.

08/07/2013 2:21:32 AM, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the McAfee Application Installer Cleanup (0009211373272780) service to connect.

08/07/2013 2:19:41 AM, Error: LsaSrv [5000]  - The security package Microsoft Unified Security Protocol Provider generated an exception. The exception information is the data.

08/07/2013 2:18:54 AM, Error: Service Control Manager [7001]  - The Computer Browser service depends on the Server service which failed to start because of the following error:  The dependency service or group failed to start.

08/07/2013 12:54:30 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service McNaiAnn with arguments "" in order to run the server: {DC7EF8E1-824F-4110-AB43-1604DA9B4F40}

08/07/2013 12:50:51 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service McNaSvc with arguments "" in order to run the server: {24F616A1-B755-4053-8018-C3425DC8B68A}

08/07/2013 12:50:29 AM, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  aswRvrt aswSnx aswSP aswTdi aswVmm cdrom discache spldr truecrypt Wanarpv6

08/07/2013 12:41:54 AM, Error: Service Control Manager [7031]  - The Superfetch service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 12:41:54 AM, Error: Service Control Manager [7031]  - The Portable Device Enumerator Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 12:41:54 AM, Error: Service Control Manager [7031]  - The Network Connections service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 100 milliseconds: Restart the service.

08/07/2013 12:41:54 AM, Error: Service Control Manager [7031]  - The Human Interface Device Access service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 12:41:54 AM, Error: Service Control Manager [7031]  - The Distributed Link Tracking Client service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

08/07/2013 1:45:40 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service NVSvc with arguments "" in order to run the server: {DCAB0989-1301-4319-BE5F-ADE89F88581C}

08/07/2013 1:38:44 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service McAfee SiteAdvisor Service with arguments "" in order to run the server: {5A90F5EE-16B8-4C2A-81B3-FD5329BA477C}

08/07/2013 1:27:23 AM, Error: Service Control Manager [7031]  - The McAfee Services service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

08/07/2013 1:27:23 AM, Error: Service Control Manager [7031]  - The McAfee Personal Firewall Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

04/07/2013 8:51:56 AM, Error: Service Control Manager [7023]  - The Software Protection service terminated with the following error:  The request could not be performed because of an I/O device error.

04/07/2013 8:44:38 AM, Error: Service Control Manager [7031]  - The Windows Media Player Network Sharing Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.

04/07/2013 4:36:07 AM, Error: Service Control Manager [7034]  - The Diagnostic System Host service terminated unexpectedly.  It has done this 1 time(s).

04/07/2013 4:36:07 AM, Error: Service Control Manager [7031]  - The HomeGroup Listener service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

04/07/2013 4:25:02 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the IKE and AuthIP IPsec Keying Modules service, but this action failed with the following error:  An instance of the service is already running.

04/07/2013 4:25:02 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Computer Browser service, but this action failed with the following error:  An instance of the service is already running.

04/07/2013 4:24:02 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Server service, but this action failed with the following error:  An instance of the service is already running.

04/07/2013 4:24:02 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Application Experience service, but this action failed with the following error:  An instance of the service is already running.

04/07/2013 4:23:02 AM, Error: Service Control Manager [7031]  - The Computer Browser service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

04/07/2013 4:19:18 AM, Error: Service Control Manager [7038]  - The eventlog service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error:  The RPC server is unavailable. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

04/07/2013 4:19:18 AM, Error: Service Control Manager [7000]  - The Windows Event Log service failed to start due to the following error:  The service did not start due to a logon failure.

04/07/2013 4:18:23 AM, Error: Service Control Manager [7038]  - The Dhcp service was unable to log on as NT Authority\LocalService with the currently configured password due to the following error:  The RPC server is unavailable. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

04/07/2013 4:18:23 AM, Error: Service Control Manager [7001]  - The WinHTTP Web Proxy Auto-Discovery Service service depends on the DHCP Client service which failed to start because of the following error:  The service did not start due to a logon failure.

04/07/2013 4:18:23 AM, Error: Service Control Manager [7000]  - The DHCP Client service failed to start due to the following error:  The service did not start due to a logon failure.

04/07/2013 4:18:18 AM, Error: Service Control Manager [7038]  - The lmhosts service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error:  The RPC server is unavailable. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

04/07/2013 4:18:18 AM, Error: Service Control Manager [7000]  - The TCP/IP NetBIOS Helper service failed to start due to the following error:  The service did not start due to a logon failure.

04/07/2013 4:11:02 AM, Error: Service Control Manager [7031]  - The McAfee Services service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

04/07/2013 4:11:02 AM, Error: Service Control Manager [7031]  - The McAfee Personal Firewall Service service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

04/07/2013 4:10:59 AM, Error: Microsoft-Windows-Kernel-General [6]  - An I/O operation initiated by the Registry failed unrecoverably.The Registry could not flush hive (file): '\SystemRoot\System32\Config\DEFAULT'.

04/07/2013 3:53:40 AM, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The dependency service or group failed to start.

04/07/2013 3:50:21 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the DNS Client service, but this action failed with the following error:  An instance of the service is already running.

04/07/2013 3:49:21 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Workstation service, but this action failed with the following error:  An instance of the service is already running.

04/07/2013 3:48:21 AM, Error: Service Control Manager [7031]  - The Workstation service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

04/07/2013 3:48:21 AM, Error: Service Control Manager [7031]  - The Network Location Awareness service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 100 milliseconds: Restart the service.

04/07/2013 3:48:21 AM, Error: Service Control Manager [7031]  - The DNS Client service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

04/07/2013 3:48:21 AM, Error: Service Control Manager [7031]  - The Cryptographic Services service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

04/07/2013 3:37:25 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Network Connections service, but this action failed with the following error:  An instance of the service is already running.

04/07/2013 3:37:14 AM, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  cdrom discache spldr truecrypt Wanarpv6

04/07/2013 3:15:35 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1726" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}

04/07/2013 3:15:35 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1726" attempting to start the service winmgmt with arguments "" in order to run the server: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

04/07/2013 3:15:35 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1726" attempting to start the service SkypeUpdate with arguments "/ComService" in order to run the server: {CC957078-B838-47C4-A7CF-626E7A82FC58}

04/07/2013 3:15:35 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1726" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}

04/07/2013 3:15:35 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1726" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}

04/07/2013 3:14:33 AM, Error: Service Control Manager [7001]  - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:  The dependency service or group failed to start.

04/07/2013 3:14:19 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}

04/07/2013 3:14:19 AM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}

04/07/2013 3:14:06 AM, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  AFD BfLwf cdrom DfsC discache mfehidk NetBIOS NetBT nsiproxy Psched rdbss spldr tdx truecrypt vwififlt Wanarpv6 WfpLwf ws2ifsl

04/07/2013 3:14:06 AM, Error: Service Control Manager [7001]  - The McAfee Proxy Service service depends on the McAfee Firewall Core Service service which failed to start because of the following error:  The dependency service or group failed to start.

04/07/2013 3:14:06 AM, Error: Service Control Manager [7001]  - The McAfee McShield service depends on the McAfee Validation Trust Protection Service service which failed to start because of the following error:  The dependency service or group failed to start.

04/07/2013 3:14:06 AM, Error: Service Control Manager [7001]  - The McAfee Firewall Core Service service depends on the McAfee Validation Trust Protection Service service which failed to start because of the following error:  The dependency service or group failed to start.

04/07/2013 3:14:06 AM, Error: Service Control Manager [7001]  - The McAfee Anti-Spam Service service depends on the McAfee Firewall Core Service service which failed to start because of the following error:  The dependency service or group failed to start.

04/07/2013 3:14:05 AM, Error: Service Control Manager [7001]  - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.

04/07/2013 3:14:05 AM, Error: Service Control Manager [7001]  - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error:  A device attached to the system is not functioning.

04/07/2013 3:14:05 AM, Error: Service Control Manager [7001]  - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error:  A device attached to the system is not functioning.

04/07/2013 3:14:05 AM, Error: Service Control Manager [7001]  - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error:  The dependency service or group failed to start.

04/07/2013 3:14:05 AM, Error: Service Control Manager [7001]  - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error:  The dependency service or group failed to start.

04/07/2013 3:14:05 AM, Error: Service Control Manager [7001]  - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error:  A device attached to the system is not functioning.

04/07/2013 3:14:05 AM, Error: Service Control Manager [7001]  - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.

04/07/2013 3:14:05 AM, Error: Service Control Manager [7001]  - The McAfee Validation Trust Protection Service service depends on the McAfee Inc. mfehidk service which failed to start because of the following error:  A device attached to the system is not functioning.

04/07/2013 3:14:05 AM, Error: Service Control Manager [7001]  - The McAfee Personal Firewall Service service depends on the Windows Firewall service which failed to start because of the following error:  The dependency service or group failed to start.

04/07/2013 3:14:05 AM, Error: Service Control Manager [7001]  - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.

04/07/2013 3:14:05 AM, Error: Service Control Manager [7001]  - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error:  A device attached to the system is not functioning.

04/07/2013 3:14:05 AM, Error: Service Control Manager [7001]  - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error:  A device attached to the system is not functioning.

03/07/2013 8:46:47 PM, Error: Service Control Manager [7038]  - The WdiServiceHost service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error:  The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

03/07/2013 8:46:47 PM, Error: Service Control Manager [7038]  - The netprofm service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error:  The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

03/07/2013 8:46:47 PM, Error: Service Control Manager [7023]  - The Server service terminated with the following error:  The data is invalid.

03/07/2013 8:46:47 PM, Error: Service Control Manager [7000]  - The Network List Service service failed to start due to the following error:  The service did not start due to a logon failure.

03/07/2013 8:46:47 PM, Error: Service Control Manager [7000]  - The Diagnostic Service Host service failed to start due to the following error:  The service did not start due to a logon failure.

03/07/2013 6:35:53 AM, Error: Service Control Manager [7034]  - The Bonjour Service service terminated unexpectedly.  It has done this 1 time(s).

03/07/2013 6:27:18 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error:  An instance of the service is already running.

03/07/2013 6:18:24 AM, Error: Service Control Manager [7022]  - The Windows Update service hung on starting.

.

==== End Of File ===========================

[Maniac]

Hello howardjai and ! My name is Maniac and I will be glad to help you solve your malware problem.

Please note:

• If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
• I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
• Make sure you read all of the instructions and fixes thoroughly before continuing with them.
• Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
• Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
• Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.

I'm afraid I have bad news.

One or more of the identified infections is a rootkit. Rootkits are very dangerous because they use advanced techniques (backdoors) as a means of accessing a computer system that bypasses security mechanisms and steal sensitive information which they send back to the hacker. Many rootkits can hook into the Windows 32-bit kernel, and patch several APIs to hide new registry keys and files they install. Remote attackers use backdoor Trojans and rootkits as part of an exploit to gain unauthorized access to a computer and take control of it without your knowledge.

I suggest you disconnect this computer from the Internet immediately you finish reading this post.

If you do any banking or other financial transactions on the computer, or if it contains any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Though the trojan has been identified and can be killed, your computer is very likely compromised and there is no way to be sure your computer can ever again be trusted.

Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the Operating System.

Visit the following sites for more information on Internet theft and when to reformat!

Help: I Got Hacked. Now What Do I Do?

Help: I Got Hacked. Now What Do I Do? Part II

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

When Should I Format, How Should I Reinstall

Should you decide not to follow that advice, we will of course do our best to clean the computer of any infections that we can see but, as I already stated, we can in no way guarantee it to be trustworthy.

If you have any questions before making a final decision, please feel free to ask.

Instructions how to format and reinstall Windows can be found here

[howardjai]

I would like to try fix/cure it because I have a lot of data on this computer and it would take a long time to back up those data if i choose to reformatting/reinstalling the computer.

Please try to help me fix my computer. I already disconnected my computer from the internet. although my banking accounts information arent save on this computer. one of my steam account has already been hacked without me typing the password.

as of right now, i am using a clean computer to communicate thru this forum.

thank you

[Maniac]

Step 1

Please uninstall this application: BitTorrent

Step 2

Note: Please do not run this tool without special supervision and instructions of someone authorized to do so. Otherwise, you could end up with serious problems. For more details, read this article: ComboFix usage, Questions, Help? - Look here

Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingc...to-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please post the C:\ComboFix.txt in your next reply for further review.

Note: If you encounter a message "illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.

[howardjai]

ok i just read the instruction and currently downloading combofix. can i run it after it finish downloading?

[howardjai]

ComboFix 13-07-08.03 - Trinz 08/07/2013  10:01:48.1.4 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.2.1033.18.6092.4435 [GMT -7:00]

Running from: c:\users\Trinz\Desktop\ComboFix.exe

SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Created a new restore point

.

.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Trinz\AppData\Roaming\067CE9D399BF71

.

.

(((((((((((((((((((((((((((((((((((((((   Drivers/Services   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

-------\Legacy_TESSAFE

-------\Service_TesSafe

.

.

(((((((((((((((((((((((((   Files Created from 2013-06-08 to 2013-07-08  )))))))))))))))))))))))))))))))

.

.

2013-07-08 17:00 . 2013-07-08 17:00 -------- d-s---w- c:\windows\SysWow64\Microsoft

2013-07-08 13:18 . 2012-03-14 03:27 8669240 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{87F9C29D-E65E-4EBA-8EF9-9EE0DD4B0B5C}\mpengine.dll

2013-07-08 12:30 . 2013-07-08 12:30 208216 ----a-w- c:\windows\system32\drivers\15473365.sys

2013-07-08 09:51 . 2013-07-08 09:51 -------- d-----w- c:\users\Trinz\AppData\Roaming\Anvisoft

2013-07-08 09:51 . 2013-07-08 09:51 -------- d-----w- c:\programdata\Anvisoft

2013-07-08 09:51 . 2012-11-07 07:16 17232 ----a-w- c:\windows\system32\drivers\asdws.sys

2013-07-08 09:51 . 2012-11-07 07:16 23376 ----a-w- c:\windows\system32\drivers\asdrs.sys

2013-07-08 09:51 . 2012-11-07 07:16 18768 ----a-w- c:\windows\system32\drivers\asdrm.sys

2013-07-08 09:51 . 2013-07-08 09:51 -------- d-----w- c:\program files (x86)\Anvisoft

2013-07-08 09:45 . 2013-07-08 09:45 208216 ----a-w- c:\windows\system32\drivers\62937670.sys

2013-07-08 08:01 . 2013-07-08 08:01 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

2013-07-08 08:01 . 2013-04-04 21:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys

2013-07-04 15:45 . 2013-07-08 13:09 -------- d-----w- C:\TDSSKiller_Quarantine

2013-07-04 11:31 . 2013-05-09 08:58 287840 ----a-w- c:\windows\system32\aswBoot.exe

2013-07-04 10:53 . 2013-07-04 10:53 -------- d-----w- c:\program files\AVAST Software

2013-07-04 10:26 . 2013-07-08 17:06 -------- d-----w- c:\programdata\AVAST Software

2013-07-04 10:19 . 2011-08-27 05:37 861696 -c----w- c:\programdata\Microsoft\Windows\WER\ReportQueue\AppCrash_c0000185_527d3ae4857ee3c17b123f7227aaf8386dbab6_cab_0aaf1a14\oleaut32.dll

2013-07-04 10:19 . 2013-07-04 10:19 -------- d-----w- c:\users\Trinz\AppData\Roaming\Malwarebytes

2013-07-04 10:19 . 2013-07-04 10:19 -------- d-----w- c:\programdata\Malwarebytes

2013-07-02 16:11 . 2013-07-02 16:18 -------- d-----w- c:\users\Trinz\AppData\Roaming\uTorrent

2013-06-24 13:42 . 2013-06-24 13:42 -------- d-----w- c:\program files (x86)\Common Files\Java

2013-06-24 13:42 . 2013-06-24 13:42 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll

2013-06-24 13:42 . 2013-06-24 13:42 -------- d-----w- c:\program files (x86)\Java

2013-06-13 17:18 . 2013-05-17 01:25 257536 ----a-w- c:\program files (x86)\Internet Explorer\ieproxy.dll

2013-06-12 17:49 . 2013-05-08 06:39 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys

2013-06-12 17:43 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll

2013-06-12 17:43 . 2013-03-31 22:52 1887232 ----a-w- c:\windows\system32\d3d11.dll

2013-06-11 12:31 . 2013-06-11 12:31 -------- d-----w- c:\program files (x86)\Google

.

.

.

((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-06-24 13:42 . 2012-08-07 21:58 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll

2013-06-24 13:42 . 2012-02-16 10:43 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll

2013-06-12 18:14 . 2012-02-15 22:16 75825640 ----a-w- c:\windows\system32\MRT.exe

2013-05-10 00:23 . 2011-03-28 23:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2013-05-02 09:06 . 2010-11-21 03:27 278800 ------w- c:\windows\system32\MpSigStub.exe

2013-04-30 07:39 . 2013-04-30 07:39 97280 ----a-w- c:\windows\system32\mshtmled.dll

2013-04-30 07:39 . 2013-04-30 07:39 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe

2013-04-30 07:39 . 2013-04-30 07:39 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll

2013-04-30 07:39 . 2013-04-30 07:39 81408 ----a-w- c:\windows\system32\icardie.dll

2013-04-30 07:39 . 2013-04-30 07:39 77312 ----a-w- c:\windows\system32\tdc.ocx

2013-04-30 07:39 . 2013-04-30 07:39 762368 ----a-w- c:\windows\system32\ieapfltr.dll

2013-04-30 07:39 . 2013-04-30 07:39 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe

2013-04-30 07:39 . 2013-04-30 07:39 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll

2013-04-30 07:39 . 2013-04-30 07:39 62976 ----a-w- c:\windows\system32\pngfilt.dll

2013-04-30 07:39 . 2013-04-30 07:39 61952 ----a-w- c:\windows\SysWow64\tdc.ocx

2013-04-30 07:39 . 2013-04-30 07:39 599552 ----a-w- c:\windows\system32\vbscript.dll

2013-04-30 07:39 . 2013-04-30 07:39 523264 ----a-w- c:\windows\SysWow64\vbscript.dll

2013-04-30 07:39 . 2013-04-30 07:39 52224 ----a-w- c:\windows\system32\msfeedsbs.dll

2013-04-30 07:39 . 2013-04-30 07:39 51200 ----a-w- c:\windows\system32\imgutil.dll

2013-04-30 07:39 . 2013-04-30 07:39 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll

2013-04-30 07:39 . 2013-04-30 07:39 48640 ----a-w- c:\windows\system32\mshtmler.dll

2013-04-30 07:39 . 2013-04-30 07:39 452096 ----a-w- c:\windows\system32\dxtmsft.dll

2013-04-30 07:39 . 2013-04-30 07:39 441856 ----a-w- c:\windows\system32\html.iec

2013-04-30 07:39 . 2013-04-30 07:39 38400 ----a-w- c:\windows\SysWow64\imgutil.dll

2013-04-30 07:39 . 2013-04-30 07:39 361984 ----a-w- c:\windows\SysWow64\html.iec

2013-04-30 07:39 . 2013-04-30 07:39 281600 ----a-w- c:\windows\system32\dxtrans.dll

2013-04-30 07:39 . 2013-04-30 07:39 27648 ----a-w- c:\windows\system32\licmgr10.dll

2013-04-30 07:39 . 2013-04-30 07:39 270848 ----a-w- c:\windows\system32\iedkcs32.dll

2013-04-30 07:39 . 2013-04-30 07:39 247296 ----a-w- c:\windows\system32\webcheck.dll

2013-04-30 07:39 . 2013-04-30 07:39 235008 ----a-w- c:\windows\system32\url.dll

2013-04-30 07:39 . 2013-04-30 07:39 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll

2013-04-30 07:39 . 2013-04-30 07:39 226304 ----a-w- c:\windows\system32\elshyph.dll

2013-04-30 07:39 . 2013-04-30 07:39 216064 ----a-w- c:\windows\system32\msls31.dll

2013-04-30 07:39 . 2013-04-30 07:39 197120 ----a-w- c:\windows\system32\msrating.dll

2013-04-30 07:39 . 2013-04-30 07:39 185344 ----a-w- c:\windows\SysWow64\elshyph.dll

2013-04-30 07:39 . 2013-04-30 07:39 173568 ----a-w- c:\windows\system32\ieUnatt.exe

2013-04-30 07:39 . 2013-04-30 07:39 167424 ----a-w- c:\windows\system32\iexpress.exe

2013-04-30 07:39 . 2013-04-30 07:39 158720 ----a-w- c:\windows\SysWow64\msls31.dll

2013-04-30 07:39 . 2013-04-30 07:39 1509376 ----a-w- c:\windows\system32\inetcpl.cpl

2013-04-30 07:39 . 2013-04-30 07:39 150528 ----a-w- c:\windows\SysWow64\iexpress.exe

2013-04-30 07:39 . 2013-04-30 07:39 149504 ----a-w- c:\windows\system32\occache.dll

2013-04-30 07:39 . 2013-04-30 07:39 144896 ----a-w- c:\windows\system32\wextract.exe

2013-04-30 07:39 . 2013-04-30 07:39 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl

2013-04-30 07:39 . 2013-04-30 07:39 1400416 ----a-w- c:\windows\system32\ieapfltr.dat

2013-04-30 07:39 . 2013-04-30 07:39 138752 ----a-w- c:\windows\SysWow64\wextract.exe

2013-04-30 07:39 . 2013-04-30 07:39 13824 ----a-w- c:\windows\system32\mshta.exe

2013-04-30 07:39 . 2013-04-30 07:39 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe

2013-04-30 07:39 . 2013-04-30 07:39 136192 ----a-w- c:\windows\system32\iepeers.dll

2013-04-30 07:39 . 2013-04-30 07:39 135680 ----a-w- c:\windows\system32\IEAdvpack.dll

2013-04-30 07:39 . 2013-04-30 07:39 12800 ----a-w- c:\windows\SysWow64\mshta.exe

2013-04-30 07:39 . 2013-04-30 07:39 12800 ----a-w- c:\windows\system32\msfeedssync.exe

2013-04-30 07:39 . 2013-04-30 07:39 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll

2013-04-30 07:39 . 2013-04-30 07:39 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe

2013-04-30 07:39 . 2013-04-30 07:39 102912 ----a-w- c:\windows\system32\inseng.dll

2013-04-13 05:49 . 2013-05-15 03:32 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll

2013-04-13 05:49 . 2013-05-15 03:32 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll

2013-04-13 05:49 . 2013-05-15 03:32 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll

2013-04-13 05:49 . 2013-05-15 03:32 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll

2013-04-13 04:45 . 2013-05-15 03:32 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll

2013-04-13 04:45 . 2013-05-15 03:32 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll

2013-04-12 14:45 . 2013-04-24 05:44 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys

2013-04-10 06:01 . 2013-05-15 03:32 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys

2013-04-10 06:01 . 2013-05-15 03:32 983400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys

2013-04-10 03:30 . 2013-05-15 03:32 3153920 ----a-w- c:\windows\system32\win32k.sys

.

.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Steam"="c:\program files (x86)\Steam\Steam.exe" [2013-06-06 1641896]

"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-06-03 19604072]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2011-02-01 113288]

"AlienwareOn-ScreenDisplay"="c:\program files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe" [2011-01-13 1348976]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2013-05-10 37960]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]

"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]

"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-27 30040]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-12-12 152544]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]

"Anvi Smart Defender"="c:\program files (x86)\Anvisoft\Anvi Smart Defender\ASDTray.exe" [2013-06-08 1563720]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

AWMouseCI.lnk - c:\program files\Alienware\Alienware TactX Mouse CI\AWMouseCI.exe [2009-6-25 831488]

Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-7-29 1132320]

Box Sync.lnk - c:\program files\Box Sync\BoxSync.exe -hidden [2013-2-21 7969792]

Qualcomm Atheros Killer Network Manager.lnk - c:\program files\Bigfoot Networks\Killer Network Manager\KillerNetManager.exe -minimized [2012-2-15 549888]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

R2 AlienFusionService;Alienware Fusion Service;c:\program files\Alienware\Command Center\AlienFusionService.exe;c:\program files\Alienware\Command Center\AlienFusionService.exe [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [x]

R2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [x]

R3 09035688;09035688; [x]

R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]

R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]

R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]

S0 EMSC;COMPAL Embedded System Control;c:\windows\system32\DRIVERS\EMSC.SYS;c:\windows\SYSNATIVE\DRIVERS\EMSC.SYS [x]

S0 johci;JMicron 1394 Filter Driver;c:\windows\system32\DRIVERS\johci.sys;c:\windows\SYSNATIVE\DRIVERS\johci.sys [x]

S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]

S1 BfLwf;Bigfoot Networks Bandwidth Control;c:\windows\system32\DRIVERS\bflwfx64.sys;c:\windows\SYSNATIVE\DRIVERS\bflwfx64.sys [x]

S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvkflt.sys [x]

S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [x]

S2 ProtectorA;ProtectorA;c:\windows\system32\drivers\ProtectorA.sys;c:\windows\SYSNATIVE\drivers\ProtectorA.sys [x]

S2 QDLService2kAlienware;Qualcomm Gobi 2000 Download Service (Alienware);c:\program files (x86)\QUALCOMM\QDLService2k\QDLService2kAlienware.exe;c:\program files (x86)\QUALCOMM\QDLService2k\QDLService2kAlienware.exe [x]

S2 Qualcomm Atheros Killer Service;Qualcomm Atheros Killer Service;c:\program files\Bigfoot Networks\Killer Network Manager\BFNService.exe;c:\program files\Bigfoot Networks\Killer Network Manager\BFNService.exe [x]

S2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]

S3 Ak27x64;Killer Wireless-N 1102 device driver;c:\windows\system32\DRIVERS\Ak27x64.sys;c:\windows\SYSNATIVE\DRIVERS\Ak27x64.sys [x]

S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]

S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]

S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]

S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys;c:\windows\SYSNATIVE\DRIVERS\jmcr.sys [x]

S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]

S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]

S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]

.

.

Contents of the 'Scheduled Tasks' folder

.

2013-07-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-11 12:31]

.

2013-07-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-11 12:31]

.

2013-07-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1054994720-606621868-1270912227-1000Core.job

- c:\users\Trinz\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-12 07:10]

.

2013-07-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1054994720-606621868-1270912227-1000UA.job

- c:\users\Trinz\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-12 07:10]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\000BoxDesktopFileLocked]

@="{C253B817-3A00-475f-A5A3-6F2DD704B48D}"

[HKEY_CLASSES_ROOT\CLSID\{C253B817-3A00-475f-A5A3-6F2DD704B48D}]

2010-11-21 03:23 444752 ----a-w- c:\windows\System32\mscoree.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\000BoxDesktopNotSynced]

@="{19ACC806-F7AA-46AA-A80A-726A07CA6637}"

[HKEY_CLASSES_ROOT\CLSID\{19ACC806-F7AA-46AA-A80A-726A07CA6637}]

2010-11-21 03:23 444752 ----a-w- c:\windows\System32\mscoree.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\000BoxDesktopNotSyncedCollabs]

@="{337D9DE0-3F8B-4430-AF0F-FFC24A95AE8F}"

[HKEY_CLASSES_ROOT\CLSID\{337D9DE0-3F8B-4430-AF0F-FFC24A95AE8F}]

2010-11-21 03:23 444752 ----a-w- c:\windows\System32\mscoree.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\000BoxDesktopSynced]

@="{B7AC9C6D-F15B-4B1A-A88D-F518D13861D9}"

[HKEY_CLASSES_ROOT\CLSID\{B7AC9C6D-F15B-4B1A-A88D-F518D13861D9}]

2010-11-21 03:23 444752 ----a-w- c:\windows\System32\mscoree.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\000BoxDesktopSyncedCollab]

@="{9E48C232-F601-4E41-BB3E-16CBAF317AA4}"

[HKEY_CLASSES_ROOT\CLSID\{9E48C232-F601-4E41-BB3E-16CBAF317AA4}]

2010-11-21 03:23 444752 ----a-w- c:\windows\System32\mscoree.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-09-01 167704]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-09-01 392472]

"Persistence"="c:\windows\system32\igfxpers.exe" [2011-09-01 416024]

"Command Center Controllers"="c:\program files\Alienware\Command Center\AWCCStartupOrchestrator.exe" [2011-01-13 13256]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-04-22 130576]

"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2012-03-20 6468712]

"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2012-03-09 1158248]

"BoxSyncHelper"="c:\program files\Box Sync\BoxSyncHelper.exe" [2013-02-22 393216]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"=c:\windows\System32\nvinitx.dll

.

------- Supplementary Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

LSP: %SYSTEMROOT%\system32\BfLLR.dll

Trusted Zone: dell.com

Trusted Zone: internet

Trusted Zone: mcafee.com

.

- - - - ORPHANS REMOVED - - - -

.

HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

.

.

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_USERS\S-1-5-21-1054994720-606621868-1270912227-1000\Software\SecuROM\License information*]

"datasecu"=hex:00,4e,37,f5,45,96,29,53,8b,fe,c2,8d,18,65,82,a9,bd,9e,f2,23,bb,

   28,08,d0,c8,da,c2,0e,79,c4,d6,48,31,77,e9,a5,3e,f5,c8,af,6a,66,1b,ca,63,ee,\

"rkeysecu"=hex:7d,40,10,cb,c7,39,e0,67,0a,69,a8,47,07,da,5b,5c

.

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]

"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Other Running Processes ------------------------

.

c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

.

**************************************************************************

.

Completion time: 2013-07-08  10:08:06 - machine was rebooted

ComboFix-quarantined-files.txt  2013-07-08 17:08

.

Pre-Run: 35,981,471,744 bytes free

Post-Run: 38,564,704,256 bytes free

.

- - End Of File - - 4562E72D1E864CFF40ED168D6FF151FE

A36C5E4F47E84449FF07ED3517B43A31

[Maniac]

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quotebox below into it:

File::

c:\windows\system32\drivers\15473365.sys

Save this as CFScript.txt, in the same location as ComboFix.exe

Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

[howardjai]

ComboFix 13-07-08.03 - Trinz 08/07/2013  20:48:24.2.4 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.2.1033.18.6092.4580 [GMT -7:00]

Running from: c:\users\Trinz\Desktop\ComboFix.exe

Command switches used :: c:\users\Trinz\Desktop\CFScript.txt.txt

SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Created a new restore point

.

FILE ::

"c:\windows\system32\drivers\15473365.sys"

.

.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\windows\system32\drivers\15473365.sys

.

.

(((((((((((((((((((((((((   Files Created from 2013-06-09 to 2013-07-09  )))))))))))))))))))))))))))))))

.

.

2013-07-09 03:51 . 2013-07-09 03:51 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp

2013-07-09 03:51 . 2013-07-09 03:51 -------- d-----w- c:\users\Default\AppData\Local\temp

2013-07-08 17:00 . 2013-07-08 17:00 -------- d-s---w- c:\windows\SysWow64\Microsoft

2013-07-08 13:18 . 2012-03-14 03:27 8669240 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{87F9C29D-E65E-4EBA-8EF9-9EE0DD4B0B5C}\mpengine.dll

2013-07-08 09:51 . 2013-07-08 09:51 -------- d-----w- c:\users\Trinz\AppData\Roaming\Anvisoft

2013-07-08 09:51 . 2013-07-08 09:51 -------- d-----w- c:\programdata\Anvisoft

2013-07-08 09:51 . 2012-11-07 07:16 17232 ----a-w- c:\windows\system32\drivers\asdws.sys

2013-07-08 09:51 . 2012-11-07 07:16 23376 ----a-w- c:\windows\system32\drivers\asdrs.sys

2013-07-08 09:51 . 2012-11-07 07:16 18768 ----a-w- c:\windows\system32\drivers\asdrm.sys

2013-07-08 09:51 . 2013-07-08 09:51 -------- d-----w- c:\program files (x86)\Anvisoft

2013-07-08 09:45 . 2013-07-08 09:45 208216 ----a-w- c:\windows\system32\drivers\62937670.sys

2013-07-08 08:01 . 2013-07-08 08:01 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

2013-07-08 08:01 . 2013-04-04 21:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys

2013-07-04 15:45 . 2013-07-08 13:09 -------- d-----w- C:\TDSSKiller_Quarantine

2013-07-04 11:31 . 2013-05-09 08:58 287840 ----a-w- c:\windows\system32\aswBoot.exe

2013-07-04 10:53 . 2013-07-04 10:53 -------- d-----w- c:\program files\AVAST Software

2013-07-04 10:26 . 2013-07-08 17:06 -------- d-----w- c:\programdata\AVAST Software

2013-07-04 10:19 . 2011-08-27 05:37 861696 -c----w- c:\programdata\Microsoft\Windows\WER\ReportQueue\AppCrash_c0000185_527d3ae4857ee3c17b123f7227aaf8386dbab6_cab_0aaf1a14\oleaut32.dll

2013-07-04 10:19 . 2013-07-04 10:19 -------- d-----w- c:\users\Trinz\AppData\Roaming\Malwarebytes

2013-07-04 10:19 . 2013-07-04 10:19 -------- d-----w- c:\programdata\Malwarebytes

2013-07-02 16:11 . 2013-07-02 16:18 -------- d-----w- c:\users\Trinz\AppData\Roaming\uTorrent

2013-06-24 13:42 . 2013-06-24 13:42 -------- d-----w- c:\program files (x86)\Common Files\Java

2013-06-24 13:42 . 2013-06-24 13:42 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll

2013-06-24 13:42 . 2013-06-24 13:42 -------- d-----w- c:\program files (x86)\Java

2013-06-13 17:18 . 2013-05-17 01:25 257536 ----a-w- c:\program files (x86)\Internet Explorer\ieproxy.dll

2013-06-12 17:49 . 2013-05-08 06:39 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys

2013-06-12 17:43 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll

2013-06-12 17:43 . 2013-03-31 22:52 1887232 ----a-w- c:\windows\system32\d3d11.dll

2013-06-11 12:31 . 2013-06-11 12:31 -------- d-----w- c:\program files (x86)\Google

.

.

.

((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-06-24 13:42 . 2012-08-07 21:58 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll

2013-06-24 13:42 . 2012-02-16 10:43 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll

2013-06-12 18:14 . 2012-02-15 22:16 75825640 ----a-w- c:\windows\system32\MRT.exe

2013-05-10 00:23 . 2011-03-28 23:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2013-05-02 09:06 . 2010-11-21 03:27 278800 ------w- c:\windows\system32\MpSigStub.exe

2013-04-30 07:39 . 2013-04-30 07:39 97280 ----a-w- c:\windows\system32\mshtmled.dll

2013-04-30 07:39 . 2013-04-30 07:39 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe

2013-04-30 07:39 . 2013-04-30 07:39 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll

2013-04-30 07:39 . 2013-04-30 07:39 81408 ----a-w- c:\windows\system32\icardie.dll

2013-04-30 07:39 . 2013-04-30 07:39 77312 ----a-w- c:\windows\system32\tdc.ocx

2013-04-30 07:39 . 2013-04-30 07:39 762368 ----a-w- c:\windows\system32\ieapfltr.dll

2013-04-30 07:39 . 2013-04-30 07:39 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe

2013-04-30 07:39 . 2013-04-30 07:39 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll

2013-04-30 07:39 . 2013-04-30 07:39 62976 ----a-w- c:\windows\system32\pngfilt.dll

2013-04-30 07:39 . 2013-04-30 07:39 61952 ----a-w- c:\windows\SysWow64\tdc.ocx

2013-04-30 07:39 . 2013-04-30 07:39 599552 ----a-w- c:\windows\system32\vbscript.dll

2013-04-30 07:39 . 2013-04-30 07:39 523264 ----a-w- c:\windows\SysWow64\vbscript.dll

2013-04-30 07:39 . 2013-04-30 07:39 52224 ----a-w- c:\windows\system32\msfeedsbs.dll

2013-04-30 07:39 . 2013-04-30 07:39 51200 ----a-w- c:\windows\system32\imgutil.dll

2013-04-30 07:39 . 2013-04-30 07:39 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll

2013-04-30 07:39 . 2013-04-30 07:39 48640 ----a-w- c:\windows\system32\mshtmler.dll

2013-04-30 07:39 . 2013-04-30 07:39 452096 ----a-w- c:\windows\system32\dxtmsft.dll

2013-04-30 07:39 . 2013-04-30 07:39 441856 ----a-w- c:\windows\system32\html.iec

2013-04-30 07:39 . 2013-04-30 07:39 38400 ----a-w- c:\windows\SysWow64\imgutil.dll

2013-04-30 07:39 . 2013-04-30 07:39 361984 ----a-w- c:\windows\SysWow64\html.iec

2013-04-30 07:39 . 2013-04-30 07:39 281600 ----a-w- c:\windows\system32\dxtrans.dll

2013-04-30 07:39 . 2013-04-30 07:39 27648 ----a-w- c:\windows\system32\licmgr10.dll

2013-04-30 07:39 . 2013-04-30 07:39 270848 ----a-w- c:\windows\system32\iedkcs32.dll

2013-04-30 07:39 . 2013-04-30 07:39 247296 ----a-w- c:\windows\system32\webcheck.dll

2013-04-30 07:39 . 2013-04-30 07:39 235008 ----a-w- c:\windows\system32\url.dll

2013-04-30 07:39 . 2013-04-30 07:39 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll

2013-04-30 07:39 . 2013-04-30 07:39 226304 ----a-w- c:\windows\system32\elshyph.dll

2013-04-30 07:39 . 2013-04-30 07:39 216064 ----a-w- c:\windows\system32\msls31.dll

2013-04-30 07:39 . 2013-04-30 07:39 197120 ----a-w- c:\windows\system32\msrating.dll

2013-04-30 07:39 . 2013-04-30 07:39 185344 ----a-w- c:\windows\SysWow64\elshyph.dll

2013-04-30 07:39 . 2013-04-30 07:39 173568 ----a-w- c:\windows\system32\ieUnatt.exe

2013-04-30 07:39 . 2013-04-30 07:39 167424 ----a-w- c:\windows\system32\iexpress.exe

2013-04-30 07:39 . 2013-04-30 07:39 158720 ----a-w- c:\windows\SysWow64\msls31.dll

2013-04-30 07:39 . 2013-04-30 07:39 1509376 ----a-w- c:\windows\system32\inetcpl.cpl

2013-04-30 07:39 . 2013-04-30 07:39 150528 ----a-w- c:\windows\SysWow64\iexpress.exe

2013-04-30 07:39 . 2013-04-30 07:39 149504 ----a-w- c:\windows\system32\occache.dll

2013-04-30 07:39 . 2013-04-30 07:39 144896 ----a-w- c:\windows\system32\wextract.exe

2013-04-30 07:39 . 2013-04-30 07:39 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl

2013-04-30 07:39 . 2013-04-30 07:39 1400416 ----a-w- c:\windows\system32\ieapfltr.dat

2013-04-30 07:39 . 2013-04-30 07:39 138752 ----a-w- c:\windows\SysWow64\wextract.exe

2013-04-30 07:39 . 2013-04-30 07:39 13824 ----a-w- c:\windows\system32\mshta.exe

2013-04-30 07:39 . 2013-04-30 07:39 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe

2013-04-30 07:39 . 2013-04-30 07:39 136192 ----a-w- c:\windows\system32\iepeers.dll

2013-04-30 07:39 . 2013-04-30 07:39 135680 ----a-w- c:\windows\system32\IEAdvpack.dll

2013-04-30 07:39 . 2013-04-30 07:39 12800 ----a-w- c:\windows\SysWow64\mshta.exe

2013-04-30 07:39 . 2013-04-30 07:39 12800 ----a-w- c:\windows\system32\msfeedssync.exe

2013-04-30 07:39 . 2013-04-30 07:39 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll

2013-04-30 07:39 . 2013-04-30 07:39 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe

2013-04-30 07:39 . 2013-04-30 07:39 102912 ----a-w- c:\windows\system32\inseng.dll

2013-04-13 05:49 . 2013-05-15 03:32 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll

2013-04-13 05:49 . 2013-05-15 03:32 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll

2013-04-13 05:49 . 2013-05-15 03:32 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll

2013-04-13 05:49 . 2013-05-15 03:32 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll

2013-04-13 04:45 . 2013-05-15 03:32 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll

2013-04-13 04:45 . 2013-05-15 03:32 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll

2013-04-12 14:45 . 2013-04-24 05:44 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys

2013-04-10 06:01 . 2013-05-15 03:32 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys

2013-04-10 06:01 . 2013-05-15 03:32 983400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys

.

.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Steam"="c:\program files (x86)\Steam\Steam.exe" [2013-06-06 1641896]

"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-06-03 19604072]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2011-02-01 113288]

"AlienwareOn-ScreenDisplay"="c:\program files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe" [2011-01-13 1348976]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2013-05-10 37960]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]

"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]

"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-27 30040]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-12-12 152544]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]

"Anvi Smart Defender"="c:\program files (x86)\Anvisoft\Anvi Smart Defender\ASDTray.exe" [2013-06-08 1563720]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

AWMouseCI.lnk - c:\program files\Alienware\Alienware TactX Mouse CI\AWMouseCI.exe [2009-6-25 831488]

Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-7-29 1132320]

Box Sync.lnk - c:\program files\Box Sync\BoxSync.exe -hidden [2013-2-21 7969792]

Qualcomm Atheros Killer Network Manager.lnk - c:\program files\Bigfoot Networks\Killer Network Manager\KillerNetManager.exe -minimized [2012-2-15 549888]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R3 09035688;09035688; [x]

R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]

R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]

R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]

S0 EMSC;COMPAL Embedded System Control;c:\windows\system32\DRIVERS\EMSC.SYS;c:\windows\SYSNATIVE\DRIVERS\EMSC.SYS [x]

S0 johci;JMicron 1394 Filter Driver;c:\windows\system32\DRIVERS\johci.sys;c:\windows\SYSNATIVE\DRIVERS\johci.sys [x]

S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]

S1 BfLwf;Bigfoot Networks Bandwidth Control;c:\windows\system32\DRIVERS\bflwfx64.sys;c:\windows\SYSNATIVE\DRIVERS\bflwfx64.sys [x]

S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvkflt.sys [x]

S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [x]

S2 AlienFusionService;Alienware Fusion Service;c:\program files\Alienware\Command Center\AlienFusionService.exe;c:\program files\Alienware\Command Center\AlienFusionService.exe [x]

S2 ProtectorA;ProtectorA;c:\windows\system32\drivers\ProtectorA.sys;c:\windows\SYSNATIVE\drivers\ProtectorA.sys [x]

S2 QDLService2kAlienware;Qualcomm Gobi 2000 Download Service (Alienware);c:\program files (x86)\QUALCOMM\QDLService2k\QDLService2kAlienware.exe;c:\program files (x86)\QUALCOMM\QDLService2k\QDLService2kAlienware.exe [x]

S2 Qualcomm Atheros Killer Service;Qualcomm Atheros Killer Service;c:\program files\Bigfoot Networks\Killer Network Manager\BFNService.exe;c:\program files\Bigfoot Networks\Killer Network Manager\BFNService.exe [x]

S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]

S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [x]

S3 Ak27x64;Killer Wireless-N 1102 device driver;c:\windows\system32\DRIVERS\Ak27x64.sys;c:\windows\SYSNATIVE\DRIVERS\Ak27x64.sys [x]

S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]

S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]

S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]

S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys;c:\windows\SYSNATIVE\DRIVERS\jmcr.sys [x]

S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]

S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]

S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]

.

.

Contents of the 'Scheduled Tasks' folder

.

2013-07-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-11 12:31]

.

2013-07-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-11 12:31]

.

2013-07-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1054994720-606621868-1270912227-1000Core.job

- c:\users\Trinz\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-12 07:10]

.

2013-07-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1054994720-606621868-1270912227-1000UA.job

- c:\users\Trinz\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-12 07:10]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\000BoxDesktopFileLocked]

@="{C253B817-3A00-475f-A5A3-6F2DD704B48D}"

[HKEY_CLASSES_ROOT\CLSID\{C253B817-3A00-475f-A5A3-6F2DD704B48D}]

2010-11-21 03:23 444752 ----a-w- c:\windows\System32\mscoree.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\000BoxDesktopNotSynced]

@="{19ACC806-F7AA-46AA-A80A-726A07CA6637}"

[HKEY_CLASSES_ROOT\CLSID\{19ACC806-F7AA-46AA-A80A-726A07CA6637}]

2010-11-21 03:23 444752 ----a-w- c:\windows\System32\mscoree.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\000BoxDesktopNotSyncedCollabs]

@="{337D9DE0-3F8B-4430-AF0F-FFC24A95AE8F}"

[HKEY_CLASSES_ROOT\CLSID\{337D9DE0-3F8B-4430-AF0F-FFC24A95AE8F}]

2010-11-21 03:23 444752 ----a-w- c:\windows\System32\mscoree.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\000BoxDesktopSynced]

@="{B7AC9C6D-F15B-4B1A-A88D-F518D13861D9}"

[HKEY_CLASSES_ROOT\CLSID\{B7AC9C6D-F15B-4B1A-A88D-F518D13861D9}]

2010-11-21 03:23 444752 ----a-w- c:\windows\System32\mscoree.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\000BoxDesktopSyncedCollab]

@="{9E48C232-F601-4E41-BB3E-16CBAF317AA4}"

[HKEY_CLASSES_ROOT\CLSID\{9E48C232-F601-4E41-BB3E-16CBAF317AA4}]

2010-11-21 03:23 444752 ----a-w- c:\windows\System32\mscoree.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [bU]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-09-01 167704]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-09-01 392472]

"Persistence"="c:\windows\system32\igfxpers.exe" [2011-09-01 416024]

"Command Center Controllers"="c:\program files\Alienware\Command Center\AWCCStartupOrchestrator.exe" [2011-01-13 13256]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-04-22 130576]

"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2012-03-20 6468712]

"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2012-03-09 1158248]

"BoxSyncHelper"="c:\program files\Box Sync\BoxSyncHelper.exe" [2013-02-22 393216]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"=c:\windows\System32\nvinitx.dll

.

------- Supplementary Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

LSP: %SYSTEMROOT%\system32\BfLLR.dll

Trusted Zone: dell.com

Trusted Zone: internet

Trusted Zone: mcafee.com

.

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_USERS\S-1-5-21-1054994720-606621868-1270912227-1000\Software\SecuROM\License information*]

"datasecu"=hex:00,4e,37,f5,45,96,29,53,8b,fe,c2,8d,18,65,82,a9,bd,9e,f2,23,bb,

   28,08,d0,c8,da,c2,0e,79,c4,d6,48,31,77,e9,a5,3e,f5,c8,af,6a,66,1b,ca,63,ee,\

"rkeysecu"=hex:7d,40,10,cb,c7,39,e0,67,0a,69,a8,47,07,da,5b,5c

.

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]

"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Completion time: 2013-07-08  20:53:02

ComboFix-quarantined-files.txt  2013-07-09 03:53

ComboFix2.txt  2013-07-08 17:08

.

Pre-Run: 38,673,612,800 bytes free

Post-Run: 38,591,631,360 bytes free

.

- - End Of File - - 401D87EE86EF086670F92BAA27F8F48A

A36C5E4F47E84449FF07ED3517B43A31

[Maniac]

Please scan your machine with ESET OnlineScan

• Hold down Control and click on the following link to open ESET OnlineScan in a new window.

  ESET OnlineScan

• Click the button.
• For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer.

    Save it to your Desktop.

  • Double click on the to download the ESET Smart Installer. icon on your Desktop.
• Check "YES, I accept the Terms of Use."
• Click the Start button.
• Accept any security warnings from your browser.
• Under Scan Settings, check "Scan Archives" and "Remove found threats"
• Click Advanced settings and select the following:
  • Scan potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth technology
• ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
• When the scan completes, click List Threats
• Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
• Click the Back button.
• Click the Finish button.

[howardjai]

I can't use my browser on my computer.

on chrome it always go to aw snap something went wron while displaying this webpage, To continue, reload or go t another page. when i press reload it goes back to that page again. same thing on whatever website i try to go on

[Maniac]

Please transfer the following tools to your infected PC:

Step 1

Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

Step 2

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click on Delete.
• Confirm each time with Ok.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the content of that logfile with your next answer.
• You can find the logfile at C:\AdwCleaner[s1].txt as well.

In your next reply, post the following log files:

• Junkware Removal Tool log
• AdwCleaner log

[howardjai]

the Junkware Removal Tool doesnt work for me. it could've been because i am currently in china. is there another link that i can download Junkware Removal Tool?

[howardjai]

the Junkware Removal Tool doesnt work for me. it could've been because i am currently in china. is there another link that i can download Junkware Removal Tool?

Nevermind it worked. sorry about that

[howardjai]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 5.0.2 (07.09.2013:1)

OS: Windows 7 Home Premium x64

Ran by Trinz on 09/07/2013 at  3:59:31.15

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

 

 

~~~ Services

 

 

 

~~~ Registry Values

 

 

 

~~~ Registry Keys

 

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\freeze.com

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\startsearch

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\classes\Toolbar.CT2790392

 

 

 

~~~ Files

 

 

 

~~~ Folders

 

Successfully deleted: [Folder] "C:\ProgramData\tarma installer"

Successfully deleted: [Folder] "C:\ProgramData\tencent"

Successfully deleted: [Folder] "C:\Users\Trinz\AppData\Roaming\software4u"

Successfully deleted: [Folder] "C:\Users\Trinz\AppData\Roaming\tencent"

Successfully deleted: [Folder] "C:\Users\Trinz\appdata\local\conduit"

Successfully deleted: [Folder] "C:\Users\Trinz\appdata\locallow\boost_interprocess"

Successfully deleted: [Folder] "C:\Users\Trinz\appdata\locallow\conduit"

Successfully deleted: [Folder] "C:\Program Files (x86)\conduit"

Successfully deleted: [Folder] "C:\Program Files (x86)\driver-soft"

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{002570F8-93FA-470C-8131-68957D5ECA96}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0074EF36-1749-409E-94D7-AA8654BDBE2C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{01137109-0D7F-44CA-BE61-C091E05A70EF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0119042D-E89E-4955-BB01-340F204D6BC2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0120A6F1-0363-4480-9E37-410EA3EABE54}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{01784638-85C6-48F4-BBC9-E28A6F599245}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{01AFE473-443D-414D-A847-74E65B0EEE02}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{01CF8CA7-E9AB-4EB5-B144-8080FD346698}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{026B6A74-5CCF-4008-AE7A-91D941C58A23}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{02EA1F9F-E2B1-46A1-AF6A-E31739222254}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0376AA08-5771-4850-9922-725B6CD2FDA6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{03B4A29D-6AF3-405C-8B37-D36D045810F1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{03C752C5-C336-4823-870E-A0344548280E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{03FC7E42-7F70-407D-90D7-1EDC76C840DE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{040D9E5B-C0DE-4EAC-8AFF-F8AE61281FB6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{04294DAD-B3A8-4829-B548-E882057CEB0D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{048FC981-F6E1-4304-A368-51F61B522FB1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{04AF01DC-B80F-4AAC-8FF5-EDAAB89A3647}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{05DDC4A7-6F57-44C4-A31F-385919BA5A93}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{06822CBA-359D-4DC8-9231-E62595B943EA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{082C9162-39FD-4751-9554-94C63CDCD7AE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0853BCF8-775C-4915-A269-2BA009B7A563}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{093B98C6-C230-4ADC-8CAD-C73C51DB6DE7}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{09633065-7CC8-4697-8BA4-4BF719E01C9F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0968CE42-E56A-4734-A178-EC03F43C9957}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{09D9372E-B0D0-491E-A196-FE643724054E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0A73F2A3-DF75-4ED8-97A8-D835229231AE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0A77354E-11DD-439C-B9AE-3C7633023686}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0A92494F-A40F-4751-B7A0-E5F3AC20F65A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0AF11DAF-CD96-4260-818E-0BFCA2EBEEFD}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0AF8BCDE-AD26-4E0F-BB3F-02695317A0E9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0B8A3D9B-902C-420B-BA8A-24D73CA0D7B6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0BF6D46C-0588-429D-9C4E-10BB2FBFF90D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0D307722-7CB3-4A33-B23D-D30C8BF6C4EC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0D659CEC-3C63-4E8F-BB1C-A574E16E6D39}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0E56712E-F58D-495D-90F7-488ED8480B31}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0E58200D-171B-4B47-81EA-C5B23F99365A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{0F2D6231-32E9-4386-87D3-BADC935C7635}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{10925F1C-640A-4151-A49D-260F87D359B0}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{10DE6397-B408-4B08-A005-CB757AAD4B2A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{10FABC58-48E9-4739-A2FE-BC855D07A6BB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{111E6DE0-AB55-4399-80A7-CCF72377EF20}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{112B8B40-5638-4644-A7AE-F575B656A5CA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{117FC989-5A54-4ADF-8618-1418507C3E3F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{11B7F480-96B3-4FDB-8F2A-228D35B5B6A4}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{11D72C09-17DD-4FA6-BB69-35BAA370A1A2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1232B204-F806-44C2-B59B-F37AB800AA0D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{12AB0A01-6144-4701-9BD1-A98B3BA7F536}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{12E75C86-86E0-4710-89E1-A034EE88DA45}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{13A1C88A-AEEE-4A4F-BF14-6376B7A825A1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{13B54EEF-F52E-43F1-8DA7-9D7AD4B1C1A4}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{13F1F0CA-24B6-4C20-9386-27385F02CE01}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{13FAE133-91A0-46F9-91C1-0A3466717AED}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{142EDCC8-7391-406C-9AF0-8C9E1792B9E9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{14ABA7E8-0E15-4B6A-A073-05A8B48347BE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{15154A27-FB23-4A5B-9ABB-585B559FEFC8}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{156044FD-281E-4FE9-9704-055378D6AA63}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{15E940E6-C7F6-4FCB-8FCF-D05B7B4FB8C6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{164D78C5-745A-470E-9EF7-4F73A9650697}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{16B06347-30CE-4862-84F3-64ECA59E44AC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{16BA479F-1058-4A32-AC3C-7376F05749C1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{174C4DB8-0441-470B-AACC-35E0B4DAE5CB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{178629F5-99BB-4C60-9AB6-511AFDE694E6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{17B0E653-F0C0-4607-A87B-226111310F4E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1834392B-5AC8-41F5-9717-890AE283D495}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{183FAFDB-981C-48B2-A21D-16506A032390}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{184DEDBB-1379-46BC-B87E-6D17C38C6F0E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{191C385A-CD74-4547-ACED-8C891CE2D833}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{19D5DEA8-E90C-4BD8-A929-EA9F9095EE4A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{19FBBABA-C7B0-4FF0-A0B7-B1605F104ACE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1A39906B-EEB4-4F34-8882-B197ACDFC26D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1A4B2A84-48DF-41C3-A88A-F03E22B4615B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1A6FC7A7-F029-4B2C-911E-D23C2E315348}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1A819550-7436-42B0-B910-B33F8FAE7432}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1AC58028-68C8-4DE0-AA2F-917395395359}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1B943C8D-9F86-4582-9AFB-75E8D88B5D5D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1BA1AA13-5355-48D3-B6E9-682E96F49444}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1BA9F133-0300-4B41-A93A-E170FB830DAF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1C931B5F-40ED-4176-B686-B8234A8C46CE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1D5FFFBF-1599-410E-BE10-D9542CB4336F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1E8F09B5-7D4D-4581-986D-2FC7DB432181}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1F54441B-8F70-4579-A42C-F9FED27167F8}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1F9C55C1-E964-493C-9862-C81173793F90}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{1FDC13D2-8BC3-4D07-B6DC-62A3F2B821D2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{201DBD78-79E0-40D1-A4BE-308788E83D91}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{205DB773-BE94-4A1F-B7A9-FC4F639D7C06}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{210A4AA5-4023-4B73-AB3E-7F132A75A347}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2125CE76-5EC5-46C4-BA4C-A02DA9783B21}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2133F696-2F20-4C09-91E3-F03EC825B0E9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{217A67D8-E6CB-4F52-9575-12E6F634037B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2186A72A-4DC8-44D8-ADE4-1F1938CAC817}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{21AF2F7E-55A4-4D06-8F3D-2814E2A7AC7A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{22372697-B293-46A8-993F-79C2C2D2AB7D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{22437FA3-81A5-4680-8AB1-0AB5CB75F9E3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{224B3AA6-A566-453F-8004-B7B5F736902F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{224FCD5F-CDED-4F4E-B7EF-3883575FB9E2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{226830C3-D2A7-4BA9-81F1-B1F29BC7DD90}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{22B6C743-DD47-4710-A9B9-BF15739E9C2B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2346639E-6B71-427E-8FE4-136D6A0717E2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{23AA1E13-A762-4FEC-A8AA-69FD0862F6E6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2493FC87-B337-4A00-9AD5-B165BA42EF69}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{24FEDBDD-2716-4D14-B156-9DD9CAEA842C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{252B7AF1-AB13-41FE-B422-23689183A8F2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{25A6B53C-0717-4587-B4FF-C6D1D710BA13}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{25FEAD7D-7B61-4C85-A9DC-AD3C191DDFBF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2642218A-DB2C-4B57-AAD7-07A1DE6B12C3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{265C6347-4538-4299-A27F-0EF95B59B427}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{26981D6D-ABF4-445B-8E94-78BD0D8CDDB4}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{26A58EAC-FEF9-4F92-AF3D-E4EACE08BA6A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2765EA14-EBF6-40C7-9E9C-FAFB79B3BBDA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{27F5E341-FBC6-4D30-A1C6-CEDD3354E973}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{280892E0-F865-461F-93A4-0C068BEA94D3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2842A6C1-7AE2-4467-A100-61F0F9B4AC6F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{28551602-A58A-41AB-8FBA-117A51ED7278}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2868E7DC-C48A-4F3B-95B1-402FC5D09936}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2875DB62-E517-48BD-9DFE-EE44EB809BFB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2885315B-EF1C-4C20-8E67-5DD97F01D7D2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{29526E1A-1014-4CBD-8856-28E1EF400745}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{29C83B1F-E4FA-4C87-8F5B-C69ED32CAF6B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{29EE7A65-72F1-4187-8611-657E7F6EDA54}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2A27C0D4-77DD-42D5-BD45-DA4049EBBECB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2A89926C-8139-42B6-9C0C-414CCF661350}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2A8E2EDE-CD20-4FC0-BFBF-A9EB4A336B1A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2BF3524F-F37D-4EDD-B657-5A781B767CD0}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2C117C40-0F07-4ED0-BEB0-0C56BE0A2F7C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2C6132CA-A004-4627-85CB-EF94C7CB447C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2C702769-4CA1-4615-8D47-3C0E06FA0E0C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2C7CB677-F711-4FDE-8CD9-AD76E3979619}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2CB3AB77-55A8-4F6E-A64F-3C3D3541C197}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2D8663E9-4BDF-4762-A10A-79BE07639E02}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2D90D269-7C73-48AC-975A-B7DEC1DE1A65}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2E29598D-D9E0-43FE-B6FD-5015AEA2EF16}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2E51B7DB-1F3B-4B70-853F-EDF1CB51D5D0}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2EF6BA02-51BE-4AAA-81C9-9AD7D0488E54}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2F25F717-0CAB-45EB-BC43-A89974A3E812}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2F59BE5B-E1D4-46CC-B4B5-9A360ED5BA38}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2F5EEC5B-55B6-451F-B62B-567AA0381649}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2FA7210A-F9E6-4517-95FE-42C8BDC48F9D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2FF2C003-8150-48B8-8125-C9C677123375}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{2FF31AAF-854C-4525-83FA-A8F2D3C82197}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{30E3ECE7-74BE-4F2A-BC7E-1F94520F5F85}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{30EE11E8-F762-4855-AFFB-1E86D5350E96}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3104446B-E89B-4E93-B934-3A5C9605A5B5}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{313AD1D8-B51F-4D04-B836-280D76CE9E93}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{31EE7D58-93DE-4B45-83D1-E3A6A277B050}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{335022FD-1940-4EBE-8680-76A05EBC8C8F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{33FEEF31-8A8B-4165-BCFF-C0F0472F4D8B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3427A416-DDD4-4E74-9965-7876F315F770}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3504C360-ED45-4ACE-B067-212AEF0F7891}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3516925A-83CF-4D95-99D5-416D63E7E5E9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{351A7D76-2F25-42F4-95E3-C8F5A86199DA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{354E9BED-21B4-4954-90B0-7CF6B801EDFF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{36463F6E-0584-45C4-BC2E-74B63F496E9C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3649EA72-A98A-4E46-A3FE-77978E5776F2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{36779557-57E6-4E71-B8D5-12E812C763F6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{36A1AC82-EFC1-45B4-84FD-7BA2BAE5B672}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{372753DC-C1C9-4BDF-A39B-31CC1E3B5400}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{37534D7F-165F-4EFA-8479-05E772905D5C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3767EDC8-1DAB-4093-A244-7C2DE35EDCA6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{378318D7-A9F9-44A6-8FD1-9E77204AC000}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{37C9AB97-7B75-4567-9EC3-2CBAD074577A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{37F1C87F-3E4B-4126-B7F1-2E9080603DEA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{37F23BCD-27D7-4674-8601-838056AA7A6E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{380E8AC0-1388-47D3-8BAE-0C96DCD4F1D2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{38168985-AAE9-45EB-807D-DCA52905278C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3823173A-F869-488D-9B36-ADA6032D61C7}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{391FE8C9-E054-4CBF-A30E-05510B8E477F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3A9859E4-8D99-438E-B279-14AEA5303E18}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3AAE1C9A-AA86-4ACB-90D4-903CB8C1F07E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3B487987-CB9C-40CA-8EBB-B91C50F555C7}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3B552C4D-6836-4EB5-BCE6-4C99DCACC670}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3C10189A-0FAC-4BB9-8A62-1C49727424DF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3C40A6A5-15FC-47FF-A753-AD8C9350EE73}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3C685C39-B673-45CA-9D6B-01DBFC700A86}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3CB934E1-A4F0-4181-9920-DDD73FCB7580}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3D337F5B-E51F-43A8-9FA9-52C4BA5788D3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3D94097A-0963-48BB-A0E4-ACAE87A00EA7}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3DE53ED4-A024-4EDA-9C63-B530DA77B915}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3E62760B-9820-42CF-803A-C41C9342062D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3FB39605-C6DB-4897-AB62-D5CBEDCC9DBE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3FB99A92-D550-435D-B26C-2AA10FEB52FC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{3FFA4D5E-AB38-4108-9470-D84128607655}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{40D9438C-4F56-41D9-BF19-55A5F7A304B0}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{41107D72-F38D-45B1-8D92-DB13FD8313E1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{414DEA5F-7DD4-4317-8A05-7A6C5C2B3630}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{41C292AD-F9D8-441E-8AD2-0F83E34D84FA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{41C70A7D-BCD9-408A-8965-158A535437B2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4261F309-F58A-4133-87B5-0F30D78090FC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{42AD4319-F953-4279-BF4A-F8E87E47B8DB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{43CBAC5E-7BAF-414B-AE6D-C9AF37BA1A15}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{43E1CF36-5ABF-45D1-B68B-273D91EF9025}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{43E25B1B-06DB-46E8-84FD-68323A0CAA52}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4406A04C-8245-4B67-9FC9-85F4A53A2B14}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{441D502B-7DE7-4757-8243-2E41FB827E79}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{451B1A70-A501-47EA-B011-0E933EEE0D06}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{45BEC462-ED83-4066-8624-2946788EA87F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{46184823-5F53-48CC-9DC2-F713308BB4C0}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{46432E58-BAF2-49C9-9411-58965AA3F742}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{464F5C32-616D-45A5-A51F-568619961BFD}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{46B1A10C-C538-4080-9BC3-024D61D87125}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{470A292A-8EE5-4607-B187-BC5EEF29A1E5}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{47739318-C725-4239-B170-90ED24E84414}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{47876F72-216B-43CA-9520-E1EF068B6AEA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{478FADD6-CBBF-4A34-BFB6-6FE802DC0882}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{47B5DAB3-38C7-4AA7-A029-F28896B67250}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{47D197A9-8892-4562-95DC-552C7A33078D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{48136E44-D447-44AD-941E-5CCA3C4D9246}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{486FFDF1-2EE2-4558-91F0-4541B1244F39}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{49045269-F9E9-429C-BE47-6DB173B0C6E2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{493BF0DA-C2D1-4F60-861B-7BBE12978FA8}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{49418669-BC70-48F8-B754-793F018A220C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{49667F85-73C0-40A5-8154-EF5394E89CCA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4A5FE87D-CD9A-473E-AC8F-49258314F903}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4B240BEC-8ABE-487C-AB45-6606F29BE1A4}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4B861A66-A965-47FB-BAFE-D807282B627D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4B9CC316-F925-4E5C-8CEC-35EF96E449B1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4C29AD0F-2E7C-4A5A-B0A3-1BFC61848F57}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4CB9ED4E-489F-4F8E-ACF5-1672A08920A5}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4D00C7A8-D50E-4669-B993-0D110D4F8ED3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4E8F2BA6-90DC-4040-93ED-60B80DA85B5F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4ECDBD2C-ACB9-4DE2-814E-B5A54C48C9D2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4EEA31B4-87DF-46E8-943B-0970DD27A778}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4F1F3E0B-199F-4488-9C4C-7D062084882A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4F341F7D-0F47-4DBF-8F5D-FEF9472EEA64}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{4FEEAFED-2B05-445F-9F98-A740A21839AB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{50A5DE32-7BA3-4CC7-ADCC-41645F440D47}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{50BF29DC-B51C-4A52-A2C4-AA0C17AF11D6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{513DC4EC-129E-428F-A88A-DD534EF7DE67}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{51762510-28DE-46FA-86FA-C49DF5602020}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{51A7D640-8F48-4921-ADE5-D5D113CB16DF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{51DB8695-E293-400B-B2A0-5A8BDEAB8C5E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{520443F7-CC2F-41C5-BC21-CB594BB2700E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{523A9BDF-3E7E-430D-9275-7DA12A8AA20B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{53503921-B0F0-4322-B9A3-2AF3CA147550}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5362686A-0CAB-44EC-8611-E3FAE70C12AB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{547ADA12-0B4D-4B4D-B127-3B89216E6A6F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{54D6CFA0-CA42-4B19-B2A8-BCD59950E42D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{55430E1F-5281-48ED-9681-CB8DE68C9CA7}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{558CDE14-2310-4C30-9C6E-C7F29FA43C89}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{559804E3-8342-4450-934B-9D36844EEB85}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{55FA91BC-B1E1-491D-BD9B-22133EAED6FA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{561B6D2B-8085-43AF-BA87-A5CEA97E7644}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{567F313A-D0F1-4C15-954E-CE72E5B10D3D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{569C60A2-77BD-441A-AD3D-CF31B60419A4}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5749823D-A24C-422E-AE9E-054919CD4C3E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5784963C-47B0-4805-A1B3-41D82463EBFA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{584572C7-AADE-4117-B4C5-5609BD579B16}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{58649EE5-7C69-4086-A164-1DD716F6DB9E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{586D8B93-F2C4-4F5A-8A39-791ED1C2F7AC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{58965E6F-E6F0-49E5-8903-60F70F3C5098}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5907B770-30A4-4E68-9867-B0E6385B43CE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{593BFD20-5C97-4E2A-BB70-9A544DAE9AC3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{59449B96-9A60-47DA-A269-C8B3C83A2634}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{594B60D8-B46C-4C27-A88D-7A4DDF8E61CD}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{59674ADC-6C60-4788-A183-8BAFBAA3792F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5985B7A6-8045-4CD7-8783-C54447D5D1FF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{59B5DE14-8E2C-473D-9683-5E9C9148BC9D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5AB12A56-8C48-46DD-9D19-A6E780195777}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5AC045BD-4247-4F43-9AEF-C899632303D5}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5B08E9A3-8902-42F7-83EA-9F08A5285FC3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5B28B85B-3FB9-4FC5-8823-3C98A40F0EFA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5B7A5FA8-8D4C-436F-8A0E-9488C8C7E324}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5C1FD161-126F-4C1B-80A0-F0731C60D5CA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5C5774AC-97C7-4532-A04B-2FFCC78B26B2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5CA796F9-0AF8-46B1-83CC-289CC84CF21D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5E329DBB-F4DD-497D-B428-654CD8010713}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5E529018-65AD-48BF-AABD-8BD5CD732413}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5EDC2043-E7F6-40D7-9EF4-495D96EC62E4}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5EE1F12F-5F28-4529-BFD4-3C702639445B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{5FEB01D5-B1F5-4EBB-B187-72CDD024CAFE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{602D66C4-3EC9-40CA-9467-9185C540FEA9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{60685F39-4106-4C64-BB29-8D264DC80B32}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6095238D-9A82-47B4-BEC9-61D7DC35341A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{609F42E5-C924-4557-B16E-F3C738309FA6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{60A84346-DEA1-475B-B862-2342957347CC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{60B74547-0A6F-4C4C-9973-EC69768D6258}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{60D24663-FA76-4BC4-BEFA-442721CE3C04}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{618F2B09-9FA7-428B-83A4-C0542FC37861}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{619C5B1A-D9DC-4913-83F1-2EDD2F4DA552}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{619FF8C9-524D-43CC-BB44-E95E6FB86323}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{61C067C0-7A8D-4870-95BE-971AFF59D462}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{62202476-FA57-4507-A826-9F54F5B06692}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{623C33CB-8E22-4516-A9B4-37185A9A91D8}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{62D09E74-ED33-4C97-B213-6063651D60C8}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{62F4F5AD-5321-4BCC-9D2B-C7151EA1FE3D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{63551A0D-7346-47D6-8616-325BFF06C4B8}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6387D595-D077-4A77-8E76-C0D7C78D165F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{63ED1A14-2344-4E3E-ABB2-6B448B606B0C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{64DB89C8-B23A-44C0-902A-059F40EC083E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{64F70FDB-E1C0-4F0F-8711-2CD60A44AA44}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{65BE66ED-ECB6-4C14-B33F-9FB74DD0D44B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{662EB4C8-4475-4ABC-A247-2CC5C9431725}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{667CA450-FB72-4983-8DCD-F03E77398A32}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{66AC1A7D-8CDB-4B2C-9F75-CCD83E385A80}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{672810F8-09FC-412F-B662-194C23B472E6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{67C6859E-F3C1-4487-BCC9-4807C8B3C564}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{67F6E701-1DA0-44F7-959D-A335D759C387}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{69C8D9B1-F120-4DDC-89C8-68816B2C5D98}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{69F302B9-946F-4967-906A-2B875A713218}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6A74F0A4-D0EA-4B5F-A1DE-E54F0BAAB1B7}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6C6E489C-B958-4630-8D61-6E6B9459709B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6CA0CB38-B3F6-46BC-A09F-E2EDE54D0BD2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6CC3A395-B586-439C-AAAE-A83499825292}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6CEFA286-B80A-4167-BC68-C88ED1FE7872}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6D36EF9E-8595-479B-972C-0050C99167A3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6D603294-2F36-4A7F-AF28-E6740E7F20EB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6D911A05-55E0-4484-8BF4-05AF163ED3D1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6E210BB9-FB1C-4691-A41C-C9108F11DA19}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6E961542-E2B9-4C0E-A01A-3B20F45645D1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6EFCA212-9CEA-4DD0-8475-2E2465FCF54E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6F7A47B5-1682-4CB3-BF45-78822F6A3232}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{6FE7B4EC-25C4-404A-AB2E-983EF731939D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{70057E08-2E06-45D6-9931-EC5BBE104356}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7174131C-7506-4C35-A808-0C979D675459}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{71FF12B7-6746-4F02-83AA-E42348A4F227}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{720393B9-7FE4-4ADB-98C4-AAC17E8A580D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{720C5117-84C5-4EAD-8C30-A2625312BA7A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{728E6840-4929-4F84-AD43-D88CAC8465F3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{72C0AF4F-C396-465A-9941-22CBAD1211EF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{733EB0B5-BF21-4E71-BB7E-7857356BF742}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{73703BAE-C3C4-4534-B183-EDF93536EA4F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{73793EAD-7183-4059-BD28-FFD3D812DE91}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{73D037DC-DAB9-4E03-ADBD-B95DA061EA47}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{73F1DA4E-C7E3-4464-A86A-4E30F71CDDE9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{73F558C8-D628-4EC5-BAC8-1219DDD07816}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7402C1DC-70E3-4E8C-8768-913DF529B3AE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{741A4FBA-71AC-4B16-9C9A-BFC24C8C14FE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{74603AC5-847B-4C92-BD23-8B90BA49D783}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{74CE3E0D-141F-47B4-AD2A-60F8DE7F7480}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{74E97C41-C859-4C56-9B80-B01BCF71829D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{74FED4D6-975C-4429-AE4D-AF84A834CCB3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7537E7BA-F606-4E6B-8CF3-5D6BDA10F96A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{753DBA03-F7B9-4F2D-B41E-62D4D54AE46B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{759ECE8F-F876-4074-A3A4-5B25632CDA89}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{75AA6CF5-8E4D-43BC-B68A-B9304064B797}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7610A689-166F-4CEF-9642-1F3977ADA0B8}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7617C788-2179-45F1-9B5A-F4C0D3F0801D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7619C855-6B8F-4AA4-80E9-FCFD2159CC78}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{762A8225-DEF1-4D4B-AC34-33C79B1638DF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{763DC7EA-922F-495A-8163-3FFDE0A5783F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7683BB7C-83DB-4315-8657-27F2C25BE262}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{76B09E3D-51A8-411E-AC3A-54B3A52EB2EF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{776DCFAB-18D0-4F24-B950-5F96819BE523}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{77BE7B58-446B-4CB4-BFEF-B4FE1BB51B1B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{77E4116F-BCED-4640-9448-4F4AF6C2E739}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{77F6AA7A-7B1D-47D6-B66A-D68FB3402481}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7856766D-9683-4A65-A841-31F9928492F6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{78CF7F98-64C7-48EF-89A3-3310DD19C2F5}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{798B45B8-F48F-405A-A5C9-898F659B3C6E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{79ED5961-5B19-43B7-A491-F2B21C7196AB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7A5FC5BB-0B6E-4E07-B5E9-4BAE4ADA8F9C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7A64BA7A-53E1-4C64-81D0-070B9687E260}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7A7B1A28-A578-4A4E-BA81-0C2521CB19AF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7A821993-6993-453B-BCA4-0EE52AC2D6D1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7BE702E8-359E-43A4-9F5D-DD36D863DC7A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7BF8F114-492D-4DD1-BD74-B4484585855B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7C8193C8-73AF-4DA5-A4AE-9919650D6602}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7C97D084-600F-4C54-BB53-9B79F614F84D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7CE3B302-A45A-4DE4-951F-4DD7292040C6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7D634356-1BAF-4652-A57D-A7DA5F7A7F02}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7D776D3A-CBDE-45C5-AA19-1E79A84080CA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7D9F51BE-9904-4E41-A355-D22E747421DE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7DFDFEB4-74EB-4E83-8C99-4F94A6F92FF8}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7E08703B-F0E5-4FF5-9E55-0BD7BFD5449D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7E16ED29-ED81-44C0-B121-1AB2E447ACBF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7EAD1063-8C6A-4D0B-990B-B48D966C8D7D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7F138E67-86CF-4F06-9BFB-6631DB86B60F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{7F263A23-52D5-49E5-A602-025BA18A8A32}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8039EE72-2A4A-496B-B8E4-A7E3DB3F0381}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{806EFFF9-F116-4DBA-BE90-5E64E1CB1B19}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8073C240-500C-4F1E-849F-14D22406478B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{80A90193-8240-4517-8078-95BF9EF53E5F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{80B1EFF8-9D08-4DCB-ACA6-16ED9B11B926}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{80D8CE4B-2AAB-47DD-91B1-482C9DB2DB04}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{80FCF810-80D5-4678-B9C9-7BF60BE9CD74}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8107E2E5-3406-47CF-A982-D15F2F4371EE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{814519EF-16C8-4B0B-888A-9DD78D9E1529}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{816838DE-472F-4791-A3D0-32197CEDC9D5}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{82995B13-C834-400B-ABDE-8D1CC4FAFD54}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{829F04C7-C8D9-4611-8C13-7B662CC167A9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8324E2E9-DA59-4525-A7AE-B2F08AA93027}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8380E720-C977-4423-86EF-7A04ED70FECB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{83F4E09F-B2FB-4AAB-B73C-6B662DE0E8F7}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{842C5C59-9E98-474D-A0B0-BA0B2E94F392}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8435528D-9AA7-435F-BB2B-27F34942AE40}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8499395D-8F12-420E-B6B9-F817CC45A9BE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{849FFA64-6CC9-4EE6-9CBF-98B16AED4B22}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{84C6F7F2-C70F-497B-9A1A-2759C87DE105}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{85901ECD-8485-4885-8922-1F6360BE8E73}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{864418D0-BF97-4883-8FE7-7D19F5A70E83}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{86C20FD8-18D7-4398-889A-671655E6D103}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{86F033EA-3052-45DA-9E5C-C314B3A8A11E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{87161897-26DE-4AF2-8095-7825A2859040}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{87559756-97BC-4AC7-B03B-75475363423B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{87668BDF-8F66-4EBE-9802-EC0A9FA92112}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{884DD4C3-A913-4C35-AE41-3E940B1F1820}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8889B177-A769-41AB-882A-D8F27CF8663F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{889F1EC7-4F40-4974-B784-FBFC0EBC764B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8940B7EF-9742-476C-ADDB-AEBC045CBD57}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8956AE1D-8CB2-4300-8E40-0BCA4DC42B11}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8A60C321-B548-476F-BDFD-160413BFB95E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8A71CD32-8B34-48C4-801C-F27092F803BF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8AA225B4-B36C-4648-AD29-BD683C7BBC04}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8AB099A1-B1F7-4082-84D1-82DA22F6B3D1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8B1399F1-32AB-40BF-962B-F247BC3465C9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8C02923B-479F-4DE4-B325-5FD01EE927CB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8CC64185-11DE-4783-90AD-EA2C3574073C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8CE6A6C2-2898-4209-80BE-0065BEF3F33D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8CFDDB0C-9A5D-487F-8BF3-30873454BB9D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8D28EAA0-16FC-43AA-9115-48A9EE1598E9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8D482E36-AAD5-4393-A8F9-A0C1076CDBE0}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8E7F5694-B41C-4F96-B12D-BCA13AECE214}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8EF848AE-C358-4BEF-8B84-DA8551DFAF1C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8F2EF320-EF88-4261-83CE-644D1835E50B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8F339854-CA88-4D65-92B5-6C2D85AB2EEA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{8F5AA4EC-9DA3-4FA4-AE68-92E245733479}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{90758100-F19F-461D-84BB-14A9B9861907}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{90831CF4-1028-41F9-A946-3962EE9AF6CD}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{90A2B9CC-D86B-4F1C-B989-CB160DB9FCCC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{90A77F64-5A3E-4D4D-8AA5-176FDF169660}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{90C896EC-4A6A-483C-8FD2-48D21DA84C1C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{90F822ED-55F6-4A8C-B090-10A8956F54F3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{90FC5421-98DB-4885-985F-ECF6B686C38F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9149FD05-D147-4640-B22C-A3B9137B0B97}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9196E4CE-AF8A-4B8D-8299-2DD62DD10999}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{91FEFF8D-E1C7-486A-AD80-DCBFCBA996B2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{920AD2D8-35E4-4AF6-8C46-67C041EF22C0}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{926B5E29-9048-4502-BF49-CBC57B2A4CF4}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{92AA8037-0247-4BDA-A2EC-ED0D5B7AA2BC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{92B7638F-0B44-4B04-BBBC-1FF671A7D389}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{935DFFB2-3445-41ED-8460-64CDE265D819}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{939E1F63-2966-43F0-B2C7-9B182400D397}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{93E3578A-6FA5-4458-9DB8-BDC1D152529D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{93F999C9-B454-4F00-AF24-231BF6693E85}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{94B5E85B-15C8-4595-9BFF-686D790EC619}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{951428E6-CCD6-4557-93AF-E4A47142AF8B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{959E4C8B-7B90-46ED-8E95-CFBC20370FDB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{95E3369E-2D1C-4B73-9008-08E31C6EC514}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{96513826-792B-468C-A735-3A4511094343}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{96F3FB84-FBD8-4ADB-82CE-CF879089BC22}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9735FC56-6C24-4A6D-A03D-4E3E93C02F86}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{978C6919-C2B6-4A33-9737-E3119F383A74}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{981C222E-EBB2-46AA-8A9C-CDC891ABC9E3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{984C5DEF-EA33-46DA-AE6C-60B40770DFBC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9868DC04-6FA6-4DFA-AB14-1E0162D63544}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{98A1F0EA-60E7-404C-B1FB-DD413204A9A3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{98F51EF3-3666-41A4-B7ED-37DDB6F83B93}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9915D32A-DA91-4C55-BDFD-DC70582F6C54}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{99300C8B-5449-43A5-AA62-0745D8CD4D50}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{99AAE641-C963-45AC-BCA1-C3CB702466DF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{99D06AA1-AF28-4FAE-A2CE-D11CB04A4BA9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9A244F4A-BE68-4186-BA40-AA03716BB0CA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9BEC63BD-D784-48E7-96D5-A5871E535D99}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9C00B9DA-3FF8-4C50-A59B-CD1DBC1B6606}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9C331006-5926-41A3-A048-F2027E18EC66}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9C44C1AF-E1C3-48A6-A779-CEC8041A6C3E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9CBF9ABF-ECA0-444A-B0BC-1E4F35DC8DFD}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9CD03E41-3904-4A0A-81D0-30D02A327C41}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9D1F851F-7E75-4D62-A627-36707B1C0516}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9D79CA79-0C85-4DB0-990F-D71D7722E89B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9D96634C-85B5-4978-B0EE-B69CE0992B8D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9D98A8CD-4033-41B8-8D80-1CC6AB3BD57C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9DA14BFE-CD46-4094-94CE-D635B9870C7E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9E43EC54-5FAB-4F2F-B5B5-EDCD1D48C1FD}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9E8AF690-6625-4AF6-ADE0-A6D5935C31DA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9F0B22B2-70D2-4478-98D2-79F1312E0250}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9F7A7B5D-248F-4669-A8F1-1CB3538E7F4E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{9FADBE5C-77AD-4295-A70B-DA514DDE1D42}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A022D58E-9927-47A5-8AC3-373CFAF0A53D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A033FD71-FE32-4C11-AA4F-18CF51959686}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A05E8597-3C65-4D47-98FA-87C053459E2F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A113C50A-E3BA-4117-914C-F3D156245D36}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A1351E1F-DA83-4A32-82BD-BFA196D6AAF4}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A17D78B1-46A2-4267-AB0C-7248DB2B12C2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A1FEE289-77B0-4D47-98D2-1E02F654994F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A26DC04B-22E2-4BBE-A4F1-DBB53DCE9972}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A2D5A3A3-0D62-47D5-87B9-8C97595A8FAA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A3B5C9C2-355C-4980-B05C-D3C9D841D3FC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A401B392-8092-4C83-B6E4-0E431564DD01}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A4942C07-8501-4055-940C-8636EE2D597B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A49A91C2-0DB2-40F3-8CA1-A446F9B90C4F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A4AB801E-B301-4343-BDD8-47EA1B648093}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A56AF645-A726-4D20-9FFE-6EC32FDA42C9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A5984DC4-7B02-42B3-BEAB-488B6A995BA8}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A5A58E14-76ED-45CF-AE4C-2E3F2EDCC461}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A5ABA2F9-BBDF-4C0C-8368-781DA7BBB17A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A5C476E3-AD69-4DA3-AEAC-0D69BE29F8FD}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A66D2E38-83B3-437D-BA40-79AB3B6DD1B0}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A695504A-A291-412D-808F-051F887F47F1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A72D9B42-E743-4725-9AE8-190FABEB7DAF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A785F92E-3AFE-4A83-A5C1-33D98718CFCE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A7D8D5FB-0908-4892-A8D5-DB3FF9FA93CD}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A7D8EE34-54C3-4D94-9203-17E1BDFA1BCB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A80815FE-C292-4473-95F0-8D7436EE328D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A8150AA9-BB52-436B-A951-FB0163A9A060}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A8CC290F-9B15-48E5-8C32-D3E139A3311A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A90D0C73-924A-4353-B70D-925206E845E3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A9182CCD-EBA1-4172-B709-96A066064451}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A92AD487-FFEF-42E6-BD4E-1E8FAC05B108}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A94D8051-9286-4F74-A628-5D5894D54E5A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A9AF3010-BAB4-479A-A012-46AA4A416F4B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{A9F8A70F-6F9B-435C-BCE1-4457D1041B7D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{AA8448BF-2679-4748-AD0A-C954238CE0D5}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{AA96C55F-A453-43CE-A9E0-E8BFD989E936}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{AB33C0EA-D54D-485D-82C3-FFE34E0B185C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{AC1A7A34-22CD-4C0A-A80E-F4EE165CD6EA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{AC7C0D51-8CD9-4ED2-967B-54380BFAF70E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{AD913FD8-EB3A-4940-ACB3-A4BC0F82D67D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{ADE36B8D-7610-47C1-AF9C-2F6A81524127}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{AEE7BA75-9325-436B-9124-FACB2A0F6E2E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{AFB00EC0-8E52-42C2-A138-ACDC071B462C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{AFDB4341-293B-4CFB-8090-8FD7E7878F0D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B02EED9D-7A67-4950-9119-F1F9173296DD}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B0819FB0-A637-44D6-B87B-E9B38B663D18}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B125A1AF-07B4-4E5D-A9ED-56058C6888E1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B17AE405-C657-48E2-85B3-B8E6D45FFAA3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B2198DEA-4318-4B3E-A0D7-06BD6CACCD2D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B300E341-726A-4587-8031-B86AB9BEA01C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B30DC503-2222-4A5D-B83D-0C9F5748647A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B34EB314-7959-4C90-8C42-063EAF8ED91F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B45B5268-5F9F-4C0B-A8C3-E1AB9FC74B2C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B481D433-D9C0-4A8E-8AD7-5C12DC80BD61}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B4894887-9C71-4DFB-8925-EEC95400B7B6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B49944E8-664D-485B-A2B2-DA2302BDD21E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B4B79006-9057-427D-9940-5BF41CF307CB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B70838AA-2044-41A2-BAC2-2EFD5C8E4F2C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B7493C1A-F76C-46F0-932A-1E8E4D4110B2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B86D4807-285F-436B-AC79-0ED4C405F6C6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{B8F2A3AC-9906-4340-8C41-4E97B1894E4E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BA541F2F-8E63-42F2-805A-77E0D72E5A82}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BA6031C4-FCD6-40C7-B024-37F99B21CF2C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BA81884B-5AC0-4E2F-9829-AE936B289571}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BA8C0F40-EC0A-445F-A022-09AC6348A716}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BAE2BEFB-BBE2-4DAC-A2E0-9F71E74E23D5}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BB2573AD-A066-44AF-9362-E46880B12C52}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BB51CC31-F4BD-4E86-93E1-9B8F9F079D0F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BB6804D2-01D8-4955-852E-66BEB40B03D1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BC29421C-DD93-4FA3-8A97-801D222BBC31}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BC37B8A5-A08A-4975-B26C-5E58B86FBCFC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BC99B1C4-2AE8-4C7A-BFD1-86C40961927F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BCDCCB46-27AC-4113-9DFF-DD5CA0571788}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BE38A3F0-422C-4FD1-AE16-0ABDFC4C8F06}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BE5642FA-A176-44EB-99E0-E4CE77501F74}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BE91541F-CB41-44F8-9353-999BEFB594FB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BED4EE71-F284-4211-8064-6921DF8F045B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BEE62D5F-EE3C-4FC6-B659-9FF7911FF151}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BF2878A4-273F-4EFD-A048-7AFE50EFB993}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BFADEFBB-B62E-46DA-BD40-FA94656FE029}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{BFD14AA7-C937-413E-BD61-F9FA06581571}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C069D703-7E7D-42D5-9725-131EAACC33B7}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C098F5D9-6625-469E-9D8A-C0EBDD93475A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C1264BD0-68BF-435E-8180-9DBC1F1DFDE5}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C241FBC5-9788-48AA-8294-EAB6ADC94680}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C28F6FD4-D160-457C-9DC7-213968999E09}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C2917DEE-D8B6-4FD5-B405-DCA733A47D99}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C2C1922A-BC71-481A-A7F9-74A5E0CE2549}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C3079F41-F562-4B90-AF08-5A8E42C84306}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C38C9791-C831-43A5-ADF3-550790B1E76F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C3C2D296-B3B5-492B-956F-345A7C6F486B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C456132F-14EB-42C1-A2D8-EB5922B054A9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C467EC98-7600-460E-9F7A-28B2959D1745}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C52D4693-A5DC-4DF1-9318-D3D69C6DC0B7}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C5C6420A-DD5F-4DA6-80EE-8E98FD519147}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C744D51D-9579-4911-A86B-C25D45676D60}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C7E2AC50-1978-488D-A342-2ECFBC5BA393}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C7F2DC4A-F7D3-4C13-8C4F-266A49EC2E40}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C8025845-CEC8-43D4-B9C4-3AD1AE0996CB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C898F722-6620-469E-BB60-DA8F016A41C2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C9A150D0-37A6-49CD-A23B-6F41E7B3E20D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{C9FE7B7D-1BA0-4A2D-8C41-A5043412EA36}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CA043C60-75B4-4146-ABE3-5DC7D246738E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CA4E7203-1DB9-46E1-A3EE-4EA514A8CDEF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CA8DC25C-D7BF-471F-89DC-EFF7883418A3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CB76E168-D116-4302-B6A1-E933F324530A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CBBA42F6-5E2A-43D1-B0C5-0023E89833B4}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CC508709-DE98-4736-B78A-0E6FA975181B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CC7B2723-F90A-4EA4-A5E7-1A1FE3087F68}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CCA6A9A8-DCA5-4258-B283-1A06D7A2AA54}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CCE31B60-EEC7-4E7C-A95D-BAA8D52D47C2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CD42FE14-E142-4511-B199-9AC3B848759E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CD7FE0A8-9B82-4054-A685-89FE4550CD2E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CDBEF844-F76A-4152-BEF4-AC86205CBC26}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CE0C6BB0-65DF-4F01-B80F-B31508DA8A6E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CE44377A-4602-4D8E-9B58-1D0B318DF61F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CE5D27A7-9378-4254-A4A1-FFA132CF637C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CE77A82F-B773-4809-9CB7-E9EC3D3C1053}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CEBE42A7-0EAF-47DD-9F45-B79AB873BD3C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CECB9B9A-59E9-4112-B18C-D3EB70781DA2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CF23AB76-66C6-4CFD-905A-875697A65908}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{CFC90001-587C-4DD4-A4A7-8BE572299625}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D02B40ED-5C3A-4E26-9284-348C0DD236A0}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D08471F2-A5E5-410B-911F-6C6AD7EE1E41}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D126F480-2EA9-45F7-BEF6-70977B75E48A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D159AFC3-42F9-4347-B9CC-4935EC70ADE0}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D19A0C9C-D037-4DA9-89C7-E9AB42D54547}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D1B672B0-BECF-468B-8E54-DDA8EBF9F0C7}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D1CEA509-87E4-4FB8-BB60-2252BBC7539D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D1D275B3-1E28-4E07-8A6A-8EE0B0581F61}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D1EFC253-0742-480E-B632-59F16D38C538}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D2A1EAEC-A3F9-464F-8E88-7F03C57B552F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D2E3A6BA-7529-4B4E-B6BA-B95D0A00F057}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D30A68E4-7B75-45CF-BDCC-0467AB310A3A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D3903196-C5EE-473E-A62E-26EDB07FA9BC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D3A9479E-DB5C-4119-9041-DD45FFAFAA0D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D3D08280-BF9E-4C94-8620-5BD534743224}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D4103A5C-5040-4091-AE52-99AB7CC2CAB5}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D4D5573A-C966-4AAC-8639-567D8FBF925E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D55F6A18-43ED-4629-9786-8B17A611C712}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D58466BA-F17C-491F-8AD9-D4DBBB327E1F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D5E7E495-9F8F-4D0E-89D8-589D3BDA1661}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D6600342-0D0C-4759-BED0-0835E8AB691C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D712F201-9589-43DE-9862-76B8B92E8928}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D74F6A88-1BC4-4C1C-B166-E0BB27B32701}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D7BD29CE-B084-4F26-856F-D74C09A9D9AB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D7C583EF-932C-4090-A55C-74778DE5C832}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D7D9AFDC-3894-4F90-B095-9FC744F13C68}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D7D9B7B9-245E-48AF-B5D2-851A0136D98E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D7DC992B-D8C9-4928-B9AA-97072EB24963}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D7E0B35F-2DD6-464B-8C9C-11388C36BAAE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D94FF258-0180-406B-841F-9C5F831D710F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D961C4F2-96FF-4F0C-AD3C-4C0B6C67EFA8}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D97C14C6-56D0-48CC-9FC7-97E6C7BDC57E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D995187F-968B-4566-BC7F-4ABFC35FC9CA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D9AF1A28-0551-44A3-8E5E-C8882E12FF78}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D9CFB57A-A4C5-4A61-9AD8-8F359DC1C00F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{D9F4D91E-E613-45FF-856D-8F9F06A67D13}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{DA094939-F6C2-4DD7-B5F6-A81C6B52F8F3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{DA1014C2-A9BE-48E1-B689-3CFA19DA891D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{DB314B65-B192-4F90-AF86-3E5108312ACF}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{DB761753-3F88-4696-81F9-71FEA731A0E4}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{DC136C09-5EC5-4CA0-8871-9EA85DB4ADD7}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{DD4AB35D-F55C-4E15-A2C0-D8BD277ED544}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{DD4BFF6C-04C6-4B04-8668-0CB71C4112C4}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{DD8F026A-3364-451D-83B5-B40D0317BA26}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{DD96DCFD-87C1-42AD-9A5D-3DCDB8456DED}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{DDDD754B-9483-47F1-9060-769DD4731CC3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{DE03362D-79C2-4EC4-9EBC-C6970B8E8875}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{DE573076-9F36-4D11-9B54-CE47EDA9714E}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{DF58F2E7-510D-48CF-9DD1-54A7A02B3E0D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{DF96229E-59BD-4C15-AC67-CB52C948D7EB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E024DA0E-97AB-4206-A01B-EBF26705B7FE}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E142D109-434B-4E77-8A84-8993A950FEE1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E193B494-DE5C-4579-AD73-4884057E170F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E195A505-1CE5-433A-A44E-A5B4237FC4D1}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E22D8DEA-469F-4C7A-844C-C623992D4D77}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E250B1B8-5CEA-4D7B-AA38-BE2F0F6CF4C8}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E28605BE-7D97-4EF7-AC23-3689F98E5522}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E2BE8876-1F55-421E-B484-8F8F334E460B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E3575984-C9C2-430C-B6EA-A3FEBBAF573F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E3F6AA8B-B052-4A8B-B09E-AC46BC22FF22}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E401AB0B-5687-4AAF-9765-09884584945C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E47DCE92-A126-4BB1-BED4-D833BFFB0477}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E4AD73C3-3577-414C-AEAE-BA01C41B6A2A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E51A9EC9-FD39-41EC-828A-0FC657194617}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E5408FEE-EE43-415A-AD1E-B00E1F56B8AC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E59B5641-C93F-4C7F-8B1A-CB6783976609}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E5A3B2F3-7E8B-408D-820F-A2BE8E0F9F3A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E62ED216-C90D-40CB-814C-65B1E22D1526}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E63011A2-7DEB-4005-B524-F957F6834000}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E645CC1A-0125-47EA-9548-950D3FD396C3}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E653143C-D827-4F8C-A585-BB59D4C7A447}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E66AA779-D271-4049-B831-A73FE1286467}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E6E1C4C5-54AF-48D0-82CB-440E673F1DC5}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E7404603-E65E-47AC-B45C-2CC48920FB39}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E75C1729-979E-42AE-96E2-FFC5BEF9881B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E75ED2C4-7CFC-4578-B1D8-54172B58C562}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E7A7C447-E63A-4F26-A87E-4C1057D87C7F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E7AC2203-67A4-451D-9F95-2EE070E0E0E9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E7B65135-21BF-43CB-9C20-BBE80D5E34EB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E88C8007-8618-419F-899F-B0856629325C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E8BB5A4C-1DF6-4266-81D7-30718598A398}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{E8E93A7E-975A-4615-888A-5A30732C9B06}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{EA4D1420-E664-4737-8546-BF369DD475D4}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{EAC8E629-23C1-4093-B1ED-52F2FAC27839}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{EB1B95F5-FE10-43C7-8CCE-AB7D6926CE45}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{EC70FBE8-0A32-4115-9185-86CFD42F788F}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{ED0D3740-AB6F-41AD-81BA-E10B00A4CF5D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{EE8C8C8E-D4FA-4C63-8340-16DB4CA67A68}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{EF05FBB4-8EFA-45DB-948E-E65ED2C9D07A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{EF641048-4194-4C1A-B848-BBEDD0877E53}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F03CEBEC-07EF-4563-BFAD-859D1C8166D8}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F0865C6A-A069-453A-910C-76D530558309}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F09CFFC9-0260-47B7-BF06-54B075EA5E15}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F166A432-E701-4FD7-A00D-FD4D977E0AA6}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F17B071D-CE56-4D19-8DE5-D7CB4D3AD8CC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F1C4FCB9-6385-473D-836A-4354B9A7E781}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F1C5E2AE-DA6D-425D-8BBB-BE7626B49359}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F20D3147-FEBC-4C68-B5AD-3A018B80345C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F3268F22-BC39-4516-8D53-51EA2A82EA81}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F3B60CA9-F15F-44F2-8EBB-D180407FFC85}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F3D690B0-68D7-49DD-A2DE-8E3B1CD69686}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F3ED84A0-CA12-4EB3-ADC3-7C9720DAA0C2}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F4F981FD-0AB3-4036-ADB4-8A4AE21AC761}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F57AA7D5-9F80-42B9-B354-2FA16B12E576}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F5C362BE-C1EF-4FDF-B2E0-DF12C035B9C5}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F5CCA4A9-9981-49B2-8E1C-E2D602443467}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F5CF0954-83F4-4EDD-990B-7341AF5C15A7}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F690A251-51A9-4BB1-8688-9DEA5983BC9C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F6DBF136-2F2E-4C85-9BE0-01C73ADBEC81}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F6FE235A-507C-4223-9A1F-F05FD31FA8E7}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F73938F9-E486-415F-86BD-41520DACB17B}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F7E805E2-BE7E-412B-86A5-4DA2B79DDAAB}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F817062A-CBF6-4AF4-AA6F-684EC8D00FCA}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F81A6F81-49F7-40BF-A9A4-3B724404F304}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F8B58B13-12F7-4975-9A3C-60851F0B3A41}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F8BA9320-06B2-4804-879A-0EAC8B04AD1A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F93FB771-F5F2-4F49-AADF-C9C2A1DD84FC}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{F99838BB-5FD4-41E9-87AF-214F1E572994}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FA0733A3-D2C1-4EC7-B2EE-02A97D96DE18}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FA690D5C-A570-449D-BD43-087C519DEB06}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FA9E24EC-C39F-4305-B5BD-658D269FA209}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FB012B9C-10DA-4795-B19B-84FC7D151EC4}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FB4B2F90-136D-4FD2-B6AE-127399785187}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FBBAB283-CD70-4FD3-856C-8432FC22665C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FBD5BAC6-CDAD-4122-ACD9-FAF04829AEA9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FBDEB82B-5CC2-45AC-920F-63F65DFE507C}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FBEB22ED-FF52-4593-A2B1-F78FF7EA8A51}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FC6990AE-9CD6-4F8A-BCD1-EAAE1A7CBF95}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FD71C598-66A5-48E4-95C9-7EB7A290D394}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FE57F740-11BC-4AF1-8E73-551DC2CF9EE9}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FE812523-C5A6-4C4F-9C81-BB4986DB3F5A}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FEC0E45C-8CB8-43A6-9DDD-B5969EC52767}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FF7AFE06-55DA-4614-931D-AA3D78A7133D}

Successfully deleted: [Empty Folder] C:\Users\Trinz\appdata\local\{FF81B2F2-0EE1-4D8A-AE25-1FD2F35EE491}

 

 

 

~~~ Event Viewer Logs were cleared

 

 

 

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 09/07/2013 at  4:03:05.44

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[howardjai]

# AdwCleaner v2.304 - Logfile created 07/09/2013 at 04:04:08

# Updated 03/07/2013 by Xplode

# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)

# User : Trinz - TRINZ-PC

# Boot Mode : Normal

# Running from : C:\Users\Trinz\Desktop\AdwCleaner.exe

# Option [Delete]

 

 

***** [services] *****

 

 

***** [Files / Folders] *****

 

Deleted on reboot : C:\Users\Trinz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhfdcmehmjcclgopdodkjdicohagipid

Folder Deleted : C:\Users\Trinz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhfdcmehmjcclgopdodkjdicohagipid

 

***** [Registry] *****

 

Key Deleted : HKCU\Software\Google\Chrome\Extensions\mhfdcmehmjcclgopdodkjdicohagipid

Key Deleted : HKCU\Software\TENCENT

Key Deleted : HKCU\Software\YahooPartnerToolbar

Key Deleted : HKLM\Software\TENCENT

Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}

Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}

Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mhfdcmehmjcclgopdodkjdicohagipid

 

***** [internet Browsers] *****

 

-\\ Internet Explorer v10.0.9200.16611

 

[OK] Registry is clean.

 

-\\ Google Chrome v27.0.1453.116

 

File : C:\Users\Trinz\AppData\Local\Google\Chrome\User Data\Default\Preferences

 

[OK] File is clean.

 

*************************

 

AdwCleaner[s1].txt - [1600 octets] - [09/07/2013 04:04:08]

 

########## EOF - C:\AdwCleaner[s1].txt - [1660 octets] ##########

[howardjai]

should i use the esetsmartinstaller_enu.exe now, or wait for your command?

[Maniac]

Yes, please try again with ESET Online Scanner.

[howardjai]

i can download the eset online scanner and transfer it to the infected computer. but the infected computer's chrome is still stuck at the aw snap stage.

i will try now with the eset online scanner.

[howardjai]

C:\Users\Trinz\Desktop\FL Studio 10.0.9c Producer Edition Final key [ChingLiu]\flstudio_10.0.9c.exe Win32/OpenCandy application cleaned by deleting

[AdvancedSetup]

C:\Users\Trinz\Desktop\FL Studio 10.0.9c Producer Edition Final key [ChingLiu]\flstudio_10.0.9c.exe Win32/OpenCandy application cleaned by deleting

That file is evidence of software piracy. As it was deleted we won't close the post but please read the Piracy Policy and if further evidence is found during scanning your post will be closed and no further assistance will be provided.

Piracy Policy

Thank you

[howardjai]

Ok sorry about it. I will uninstall it. What should I do for my next step?

[AdvancedSetup]

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

 

[howardjai]

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-07-2013 01

Ran by Trinz (administrator) on 09-07-2013 21:05:05

Running from C:\Users\Trinz\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)

Internet Explorer Version 10

Boot Mode: Normal

 

==================== Processes (Whitelisted) =================

 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

(QUALCOMM, Inc.) C:\Program Files (x86)\QUALCOMM\QDLService2k\QDLService2kAlienware.exe

() C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Box, Inc.) C:\Program Files\Box Sync\BoxSyncHelper.exe

( Inc.) C:\Program Files\Alienware\Alienware TactX Mouse CI\AWMouseCI.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

() C:\Program Files\Bigfoot Networks\Killer Network Manager\KillerNetManager.exe

(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Alienware Corp) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe

() C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Anvisoft) C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASDTray.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe

(Alienware Corporation) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe

(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe

(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe

(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

() C:\Program Files\Alienware\Command Center\AlienFusionController.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

 

==================== Registry (Whitelisted) ==================

 

HKLM\...\Run: [synTPEnh] - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2735400 2011-03-31] (Synaptics Incorporated)

HKLM\...\Run: [igfxTray] - C:\Windows\system32\igfxtray.exe [167704 2011-08-31] (Intel Corporation)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [392472 2011-08-31] (Intel Corporation)

HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [416024 2011-08-31] (Intel Corporation)

HKLM\...\Run: [Command Center Controllers] - "C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe" [13256 2011-01-13] (Microsoft)

HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - KHALMNPR.EXE [x]

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s [6468712 2012-03-20] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3  [1158248 2012-03-09] (Realtek Semiconductor)

HKLM\...\Run: [boxSyncHelper] - "C:\Program Files\Box Sync\BoxSyncHelper.exe" [393216 2013-02-21] (Box, Inc.)

HKLM\...\Winlogon: [userinit] C:\Windows\system32\userinit.exe,

HKCU\...\Run: [steam] - "C:\Program Files (x86)\Steam\Steam.exe" -silent [1641896 2013-06-06] (Valve Corporation)

HKCU\...\Run: [skype] - "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [19604072 2013-06-03] (Skype Technologies S.A.)

HKLM-x32\...\Run: [NUSB3MON] - "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [113288 2011-02-01] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [AlienwareOn-ScreenDisplay] - C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe [1348976 2011-01-13] ()

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [37960 2013-05-10] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-11-28] (Apple Inc.)

HKLM-x32\...\Run: [DivXUpdate] - "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1259376 2011-07-28] ()

HKLM-x32\...\Run: [GrooveMonitor] - "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152544 2012-12-12] (Apple Inc.)

HKLM-x32\...\Run: [sunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [Anvi Smart Defender] - C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASDTray.exe [1563720 2013-06-08] (Anvisoft)

HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-13] (Microsoft Corporation)

HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-13] (Microsoft Corporation)

HKU\UpdatusUser\...\Run: [Google Update] - "C:\Users\Trinz\AppData\Local\Google\Update\GoogleUpdate.exe" /c [116648 2013-06-12] (Google Inc.)

HKU\UpdatusUser\...\Run: [msnmsgr] - "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background [x]

HKU\UpdatusUser\...\Run: [skype] - "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [19604072 2013-06-03] (Skype Technologies S.A.)

HKU\UpdatusUser\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-13] (Microsoft Corporation)

AppInit_DLLs: C:\Windows\System32\nvinitx.dll [246024 2012-12-29] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201728 2012-12-29] (NVIDIA Corporation)

Startup: C:\ProgramData\Start Menu\Programs\Startup\AWMouseCI.lnk

ShortcutTarget: AWMouseCI.lnk -> C:\Program Files\Alienware\Alienware TactX Mouse CI\AWMouseCI.exe ( Inc.)

Startup: C:\ProgramData\Start Menu\Programs\Startup\Bluetooth.lnk

ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

Startup: C:\ProgramData\Start Menu\Programs\Startup\Box Sync.lnk

ShortcutTarget: Box Sync.lnk -> C:\Program Files\Box Sync\BoxSync.exe (Box, Inc.)

Startup: C:\ProgramData\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk

ShortcutTarget: Qualcomm Atheros Killer Network Manager.lnk -> C:\Program Files\Bigfoot Networks\Killer Network Manager\KillerNetManager.exe ()

 

==================== Internet (Whitelisted) ====================

 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)

BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll (McAfee, Inc.)

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll (McAfee, Inc.)

BHO-x32: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll (McAfee, Inc.)

Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll (McAfee, Inc.)

DPF: HKLM-x32 {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} https://support.dell.com/systemprofiler/SysProExe.CAB

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll (McAfee, Inc.)

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll (McAfee, Inc.)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll (McAfee, Inc.)

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File

Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll (McAfee, Inc.)

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll (Skype Technologies)

Winsock: Catalog9 01 %SYSTEMROOT%\system32\BfLLR.dll [174592] (Bigfoot Networks, Inc.)

Winsock: Catalog9 02 %SYSTEMROOT%\system32\BfLLR.dll [174592] (Bigfoot Networks, Inc.)

Winsock: Catalog9 03 %SYSTEMROOT%\system32\BfLLR.dll [174592] (Bigfoot Networks, Inc.)

Winsock: Catalog9 04 %SYSTEMROOT%\system32\BfLLR.dll [174592] (Bigfoot Networks, Inc.)

Winsock: Catalog9 16 %SYSTEMROOT%\system32\BfLLR.dll [174592] (Bigfoot Networks, Inc.)

Winsock: Catalog9-x64 01 %SYSTEMROOT%\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)

Winsock: Catalog9-x64 02 %SYSTEMROOT%\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)

Winsock: Catalog9-x64 03 %SYSTEMROOT%\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)

Winsock: Catalog9-x64 04 %SYSTEMROOT%\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)

Winsock: Catalog9-x64 16 %SYSTEMROOT%\system32\BfLLR.dll [189952] (Bigfoot Networks, Inc.)

 

Chrome: 

=======

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Users\Trinz\AppData\Local\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\Trinz\AppData\Local\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\Trinz\AppData\Local\Google\Chrome\Application\27.0.1453.116\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (\u6B6A\u6B6A) - C:\Program Files (x86)\Common Files\duowan\yy4.0\YYSSO\1.0.0.3\npChecker.dll (广州多玩信息技术有限公司)

CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

CHR Plugin: (Java Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)

CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

CHR Plugin: (McAfee SecurityCenter) - c:\PROGRA~2\mcafee\msc\npmcsnffpl.dll No File

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

CHR Extension: (Google Docs) - C:\Users\Trinz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0

CHR Extension: (Google Drive) - C:\Users\Trinz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YouTube) - C:\Users\Trinz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Trinz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Trinz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0

CHR Extension: (Gmail) - C:\Users\Trinz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

 

==================== Services (Whitelisted) =================

 

R2 QDLService2kAlienware; C:\Program Files (x86)\QUALCOMM\QDLService2k\QDLService2kAlienware.exe [331512 2010-06-25] (QUALCOMM, Inc.)

R2 Qualcomm Atheros Killer Service; C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe [492032 2012-02-15] ()

S2 McAfee SiteAdvisor Service; "C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [x]

 

==================== Drivers (Whitelisted) ====================

 

R3 Ak27x64; C:\Windows\System32\DRIVERS\Ak27x64.sys [2740328 2012-02-01] (Bigfoot Networks, Inc.)

R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [75880 2012-02-15] (Bigfoot Networks, Inc.)

R0 johci; C:\Windows\System32\DRIVERS\johci.sys [25688 2010-12-26] (JMicron Technology Corp.)

R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [284600 2012-12-29] (NVIDIA Corporation)

R2 ProtectorA; C:\Windows\system32\drivers\ProtectorA.sys [22672 2012-01-11] (www.ISRA.org.cn)

R2 ProtectorA; C:\Windows\system32\drivers\ProtectorA.sys [22672 2012-01-11] (www.ISRA.org.cn)

S3 sscdserd; C:\Windows\System32\DRIVERS\sscdserd.sys [141384 2010-11-11] (MCCI Corporation)

S3 09035688; No ImagePath

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]

 

==================== NetSvcs (Whitelisted) ===================

 

 

==================== One Month Created Files and Folders ========

 

2013-07-09 21:05 - 2013-07-09 21:05 - 00000000 ____D C:\FRST

2013-07-09 21:04 - 2013-07-11 12:03 - 01776221 ____A (Farbar) C:\Users\Trinz\Desktop\FRST64.exe

2013-07-09 10:58 - 2013-07-09 10:58 - 00000149 ____A C:\Users\Trinz\Desktop\ESETScan.txt

2013-07-09 04:04 - 2013-07-09 04:04 - 00001729 ____A C:\AdwCleaner[s1].txt

2013-07-09 04:04 - 2013-07-09 04:04 - 00000172 ____A C:\Windows\DeleteOnReboot.bat

2013-07-09 03:59 - 2013-07-09 03:59 - 00000000 ____D C:\Windows\ERUNT

2013-07-09 03:58 - 2013-07-10 18:57 - 00650027 ____A C:\Users\Trinz\Desktop\AdwCleaner.exe

2013-07-09 03:58 - 2013-07-10 18:56 - 00552389 ____A (Oleg N. Scherbakov) C:\Users\Trinz\Desktop\JRT.exe

2013-07-09 03:51 - 2013-07-10 18:44 - 02347384 ____A (ESET) C:\Users\Trinz\Desktop\esetsmartinstaller_enu.exe

2013-07-09 03:51 - 2013-07-09 03:51 - 00000000 ____D C:\Program Files (x86)\ESET

2013-07-08 20:53 - 2013-07-08 20:53 - 00020713 ____A C:\ComboFix.txt

2013-07-08 10:09 - 2013-07-08 10:09 - 00021127 ____A C:\Users\Trinz\Desktop\combofix.txt

2013-07-08 10:00 - 2011-06-25 23:45 - 00256000 ____A C:\Windows\PEV.exe

2013-07-08 10:00 - 2010-11-07 10:20 - 00208896 ____A C:\Windows\MBR.exe

2013-07-08 10:00 - 2009-04-19 21:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe

2013-07-08 10:00 - 2000-08-30 17:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe

2013-07-08 10:00 - 2000-08-30 17:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe

2013-07-08 10:00 - 2000-08-30 17:00 - 00098816 ____A C:\Windows\sed.exe

2013-07-08 10:00 - 2000-08-30 17:00 - 00080412 ____A C:\Windows\grep.exe

2013-07-08 10:00 - 2000-08-30 17:00 - 00068096 ____A C:\Windows\zip.exe

2013-07-08 09:58 - 2013-07-10 00:51 - 05086946 ____R (Swearware) C:\Users\Trinz\Desktop\ComboFix.exe

2013-07-08 09:58 - 2013-07-08 20:53 - 00000000 ____D C:\Qoobox

2013-07-08 09:58 - 2013-07-08 10:07 - 00000000 ____D C:\Windows\erdnt

2013-07-08 02:51 - 2013-07-08 02:51 - 00001194 ____A C:\Users\Public\Desktop\Anvi Smart Defender.lnk

2013-07-08 02:51 - 2013-07-08 02:51 - 00000000 ____D C:\Users\Trinz\AppData\Roaming\Anvisoft

2013-07-08 02:51 - 2013-07-08 02:51 - 00000000 ____D C:\ProgramData\Anvisoft

2013-07-08 02:51 - 2013-07-08 02:51 - 00000000 ____D C:\Program Files (x86)\Anvisoft

2013-07-08 02:51 - 2012-11-07 00:16 - 00023376 ____A (Anvisoft) C:\Windows\System32\Drivers\asdrs.sys

2013-07-08 02:51 - 2012-11-07 00:16 - 00018768 ____A (Anvisoft) C:\Windows\System32\Drivers\asdrm.sys

2013-07-08 02:51 - 2012-11-07 00:16 - 00017232 ____A C:\Windows\System32\Drivers\asdws.sys

2013-07-08 02:45 - 2013-07-08 02:45 - 00208216 ____A (Kaspersky Lab, GERT) C:\Windows\System32\Drivers\62937670.sys

2013-07-08 02:24 - 2013-07-08 04:19 - 00001945 ____A C:\Windows\epplauncher.mif

2013-07-08 02:22 - 2013-07-09 16:40 - 13475464 ____A (Microsoft Corporation) C:\Users\Trinz\Desktop\MSEInstall.exe

2013-07-08 02:22 - 2013-07-09 15:31 - 25747872 ____A C:\Users\Trinz\Desktop\asdsetup.exe

2013-07-08 01:01 - 2013-07-08 01:01 - 00001127 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-07-08 01:01 - 2013-07-08 01:01 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-07-08 01:01 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys

2013-07-08 01:00 - 2013-07-08 01:00 - 00000000 ____D C:\Users\Trinz\Desktop\rkill

2013-07-08 00:58 - 2013-07-08 01:01 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Trinz\Desktop\mbam2.exe

2013-07-08 00:53 - 2013-07-08 00:59 - 01814144 ____A (Bleeping Computer, LLC) C:\Users\Trinz\Downloads\rkill.com

2013-07-04 08:45 - 2013-07-08 06:09 - 00000000 ____D C:\TDSSKiller_Quarantine

2013-07-04 08:43 - 2013-07-09 15:29 - 02237968 ____A (Kaspersky Lab ZAO) C:\Users\Trinz\Desktop\tdsskiller.exe

2013-07-04 04:31 - 2013-07-04 04:31 - 00000000 ____A C:\Windows\SysWOW64\config.nt

2013-07-04 04:31 - 2013-05-09 01:58 - 00287840 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe

2013-07-04 03:53 - 2013-07-04 03:53 - 00000000 ____D C:\Program Files\AVAST Software

2013-07-04 03:26 - 2013-07-08 10:06 - 00000000 ____D C:\ProgramData\AVAST Software

2013-07-04 03:19 - 2013-07-04 03:19 - 00000000 ____D C:\Users\Trinz\AppData\Roaming\Malwarebytes

2013-07-04 03:19 - 2013-07-04 03:19 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-07-04 03:18 - 2013-07-04 03:18 - 00000002 ____A C:\AvastSetup.log

2013-07-02 09:11 - 2013-07-02 09:18 - 00000000 ____D C:\Users\Trinz\AppData\Roaming\uTorrent

2013-07-02 08:26 - 2013-07-02 09:34 - 00000000 ____D C:\Users\Trinz\Desktop\New folder

2013-07-01 06:02 - 2013-07-01 08:01 - 00000000 ____D C:\Users\Trinz\Desktop\New folder (2)

2013-06-24 06:42 - 2013-06-24 06:42 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-06-24 06:42 - 2013-06-24 06:42 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-06-24 06:42 - 2013-06-24 06:42 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-06-24 06:42 - 2013-06-24 06:42 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-06-24 06:42 - 2013-06-24 06:42 - 00000000 ____D C:\Program Files (x86)\Java

2013-06-18 11:05 - 2013-06-08 07:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-06-18 11:05 - 2013-06-08 07:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-06-18 11:05 - 2013-06-08 07:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-06-18 11:05 - 2013-06-08 07:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-06-18 11:05 - 2013-06-08 07:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2013-06-18 11:05 - 2013-06-08 05:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2013-06-18 11:05 - 2013-06-08 04:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-06-18 11:05 - 2013-06-08 04:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-06-18 11:05 - 2013-06-08 04:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-06-18 11:05 - 2013-06-08 04:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-06-18 11:05 - 2013-06-08 04:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-06-18 11:05 - 2013-06-08 04:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-06-13 10:18 - 2013-05-16 18:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-06-13 10:18 - 2013-05-16 18:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-06-13 10:18 - 2013-05-16 18:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-06-13 10:18 - 2013-05-16 18:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-06-13 10:18 - 2013-05-16 18:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-06-13 10:18 - 2013-05-16 18:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-06-13 10:18 - 2013-05-16 18:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-06-13 10:18 - 2013-05-16 18:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-06-13 10:18 - 2013-05-16 17:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll

2013-06-13 10:18 - 2013-05-16 17:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe

2013-06-13 10:18 - 2013-05-16 17:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2013-06-13 10:18 - 2013-05-16 17:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll

2013-06-13 10:18 - 2013-05-16 17:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2013-06-13 10:18 - 2013-05-16 17:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll

2013-06-13 10:18 - 2013-05-16 17:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll

2013-06-13 10:18 - 2013-05-16 17:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2013-06-13 10:18 - 2013-05-16 17:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll

2013-06-13 10:18 - 2013-05-14 05:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe

2013-06-13 10:18 - 2013-05-14 01:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-06-12 10:49 - 2013-05-07 23:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys

2013-06-12 10:44 - 2013-05-12 22:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll

2013-06-12 10:44 - 2013-05-12 22:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll

2013-06-12 10:44 - 2013-05-12 22:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll

2013-06-12 10:44 - 2013-05-12 22:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll

2013-06-12 10:44 - 2013-05-12 21:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-06-12 10:44 - 2013-05-12 21:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-06-12 10:44 - 2013-05-12 21:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-06-12 10:44 - 2013-05-12 20:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe

2013-06-12 10:44 - 2013-05-12 20:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe

2013-06-12 10:44 - 2013-05-12 20:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

2013-06-12 10:44 - 2013-05-09 22:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll

2013-06-12 10:44 - 2013-05-09 20:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll

2013-06-12 10:44 - 2013-04-25 22:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll

2013-06-12 10:44 - 2013-04-25 21:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2013-06-12 10:44 - 2013-04-17 00:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2013-06-12 10:44 - 2013-04-16 23:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll

2013-06-12 10:43 - 2013-04-25 16:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2013-06-12 10:43 - 2013-03-31 15:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll

2013-06-12 00:15 - 2013-06-21 09:40 - 00002366 ____A C:\Users\Trinz\Desktop\Google Chrome.lnk

2013-06-12 00:10 - 2013-07-09 10:15 - 00000908 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1054994720-606621868-1270912227-1000UA.job

2013-06-12 00:10 - 2013-07-03 00:15 - 00000856 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1054994720-606621868-1270912227-1000Core.job

2013-06-11 05:31 - 2013-07-09 20:47 - 00000892 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-06-11 05:31 - 2013-07-09 10:36 - 00000896 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-06-11 05:31 - 2013-06-11 05:31 - 00000000 ____D C:\Program Files (x86)\Google

 

==================== One Month Modified Files and Folders =======

 

2013-07-11 12:03 - 2013-07-09 21:04 - 01776221 ____A (Farbar) C:\Users\Trinz\Desktop\FRST64.exe

2013-07-10 18:57 - 2013-07-09 03:58 - 00650027 ____A C:\Users\Trinz\Desktop\AdwCleaner.exe

2013-07-10 18:56 - 2013-07-09 03:58 - 00552389 ____A (Oleg N. Scherbakov) C:\Users\Trinz\Desktop\JRT.exe

2013-07-10 18:44 - 2013-07-09 03:51 - 02347384 ____A (ESET) C:\Users\Trinz\Desktop\esetsmartinstaller_enu.exe

2013-07-10 00:51 - 2013-07-08 09:58 - 05086946 ____R (Swearware) C:\Users\Trinz\Desktop\ComboFix.exe

2013-07-09 21:05 - 2013-07-09 21:05 - 00000000 ____D C:\FRST

2013-07-09 21:03 - 2012-02-16 04:03 - 00000000 ___RD C:\Users\Trinz\Desktop\Howie

2013-07-09 21:00 - 2012-07-02 07:43 - 00000000 ____D C:\Program Files (x86)\Steam

2013-07-09 20:54 - 2009-07-13 21:45 - 00021472 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-07-09 20:54 - 2009-07-13 21:45 - 00021472 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-07-09 20:52 - 2009-07-13 22:13 - 00793234 ____A C:\Windows\System32\PerfStringBackup.INI

2013-07-09 20:48 - 2012-02-16 04:35 - 00000000 ____D C:\Users\Trinz\AppData\Roaming\Skype

2013-07-09 20:48 - 2009-07-13 21:51 - 00112892 ____A C:\Windows\setupact.log

2013-07-09 20:47 - 2013-06-11 05:31 - 00000892 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-07-09 20:47 - 2012-12-21 16:07 - 00000000 ____D C:\Users\Trinz\AppData\Roaming\Box Sync

2013-07-09 20:47 - 2012-02-15 14:03 - 00000000 ____D C:\ProgramData\Bigfoot Networks

2013-07-09 20:47 - 2012-02-15 13:37 - 00000000 ____D C:\ProgramData\NVIDIA

2013-07-09 20:47 - 2009-07-13 22:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-07-09 16:40 - 2013-07-08 02:22 - 13475464 ____A (Microsoft Corporation) C:\Users\Trinz\Desktop\MSEInstall.exe

2013-07-09 15:31 - 2013-07-08 02:22 - 25747872 ____A C:\Users\Trinz\Desktop\asdsetup.exe

2013-07-09 15:29 - 2013-07-04 08:43 - 02237968 ____A (Kaspersky Lab ZAO) C:\Users\Trinz\Desktop\tdsskiller.exe

2013-07-09 11:01 - 2012-02-15 00:44 - 01456813 ____A C:\Windows\WindowsUpdate.log

2013-07-09 10:58 - 2013-07-09 10:58 - 00000149 ____A C:\Users\Trinz\Desktop\ESETScan.txt

2013-07-09 10:36 - 2013-06-11 05:31 - 00000896 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-07-09 10:15 - 2013-06-12 00:10 - 00000908 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1054994720-606621868-1270912227-1000UA.job

2013-07-09 04:04 - 2013-07-09 04:04 - 00001729 ____A C:\AdwCleaner[s1].txt

2013-07-09 04:04 - 2013-07-09 04:04 - 00000172 ____A C:\Windows\DeleteOnReboot.bat

2013-07-09 03:59 - 2013-07-09 03:59 - 00000000 ____D C:\Windows\ERUNT

2013-07-09 03:51 - 2013-07-09 03:51 - 00000000 ____D C:\Program Files (x86)\ESET

2013-07-09 03:43 - 2010-11-20 20:47 - 00047644 ____A C:\Windows\PFRO.log

2013-07-08 21:09 - 2012-10-18 13:44 - 00000000 ____D C:\Users\Trinz\AppData\Roaming\vlc

2013-07-08 20:53 - 2013-07-08 20:53 - 00020713 ____A C:\ComboFix.txt

2013-07-08 20:53 - 2013-07-08 09:58 - 00000000 ____D C:\Qoobox

2013-07-08 20:51 - 2009-07-13 19:34 - 00000215 ____A C:\Windows\system.ini

2013-07-08 10:09 - 2013-07-08 10:09 - 00021127 ____A C:\Users\Trinz\Desktop\combofix.txt

2013-07-08 10:07 - 2013-07-08 09:58 - 00000000 ____D C:\Windows\erdnt

2013-07-08 10:06 - 2013-07-04 03:26 - 00000000 ____D C:\ProgramData\AVAST Software

2013-07-08 10:06 - 2009-07-13 19:34 - 72089600 ____A C:\Windows\System32\config\SOFTWARE.bak

2013-07-08 10:06 - 2009-07-13 19:34 - 40632320 ____A C:\Windows\System32\config\SYSTEM.bak

2013-07-08 10:06 - 2009-07-13 19:34 - 01048576 ____A C:\Windows\System32\config\DEFAULT.bak

2013-07-08 10:06 - 2009-07-13 19:34 - 00262144 ____A C:\Windows\System32\config\SECURITY.bak

2013-07-08 10:06 - 2009-07-13 19:34 - 00262144 ____A C:\Windows\System32\config\SAM.bak

2013-07-08 06:09 - 2013-07-04 08:45 - 00000000 ____D C:\TDSSKiller_Quarantine

2013-07-08 04:19 - 2013-07-08 02:24 - 00001945 ____A C:\Windows\epplauncher.mif

2013-07-08 02:51 - 2013-07-08 02:51 - 00001194 ____A C:\Users\Public\Desktop\Anvi Smart Defender.lnk

2013-07-08 02:51 - 2013-07-08 02:51 - 00000000 ____D C:\Users\Trinz\AppData\Roaming\Anvisoft

2013-07-08 02:51 - 2013-07-08 02:51 - 00000000 ____D C:\ProgramData\Anvisoft

2013-07-08 02:51 - 2013-07-08 02:51 - 00000000 ____D C:\Program Files (x86)\Anvisoft

2013-07-08 02:45 - 2013-07-08 02:45 - 00208216 ____A (Kaspersky Lab, GERT) C:\Windows\System32\Drivers\62937670.sys

2013-07-08 02:24 - 2009-07-13 22:08 - 00032576 ____A C:\Windows\Tasks\SCHEDLGU.TXT

2013-07-08 02:22 - 2012-02-23 01:00 - 00000000 ____D C:\Program Files (x86)\McAfee

2013-07-08 02:22 - 2012-02-23 00:41 - 00000000 ____D C:\ProgramData\McAfee

2013-07-08 01:01 - 2013-07-08 01:01 - 00001127 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-07-08 01:01 - 2013-07-08 01:01 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-07-08 01:01 - 2013-07-08 00:58 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Trinz\Desktop\mbam2.exe

2013-07-08 01:00 - 2013-07-08 01:00 - 00000000 ____D C:\Users\Trinz\Desktop\rkill

2013-07-08 00:59 - 2013-07-08 00:53 - 01814144 ____A (Bleeping Computer, LLC) C:\Users\Trinz\Downloads\rkill.com

2013-07-04 04:31 - 2013-07-04 04:31 - 00000000 ____A C:\Windows\SysWOW64\config.nt

2013-07-04 04:19 - 2012-02-15 13:38 - 00000000 ____D C:\Windows\SysWOW64\NV

2013-07-04 04:19 - 2012-02-15 13:38 - 00000000 ____D C:\Windows\System32\NV

2013-07-04 03:53 - 2013-07-04 03:53 - 00000000 ____D C:\Program Files\AVAST Software

2013-07-04 03:19 - 2013-07-04 03:19 - 00000000 ____D C:\Users\Trinz\AppData\Roaming\Malwarebytes

2013-07-04 03:19 - 2013-07-04 03:19 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-07-04 03:18 - 2013-07-04 03:18 - 00000002 ____A C:\AvastSetup.log

2013-07-03 06:46 - 2012-11-27 12:19 - 00000000 ____D C:\Users\Trinz\AppData\Roaming\BitTorrent

2013-07-03 00:15 - 2013-06-12 00:10 - 00000856 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1054994720-606621868-1270912227-1000Core.job

2013-07-02 09:34 - 2013-07-02 08:26 - 00000000 ____D C:\Users\Trinz\Desktop\New folder

2013-07-02 09:18 - 2013-07-02 09:11 - 00000000 ____D C:\Users\Trinz\AppData\Roaming\uTorrent

2013-07-02 09:14 - 2012-11-27 11:56 - 00000000 ____D C:\Users\Trinz\AppData\Roaming\Nico Mak Computing

2013-07-02 08:31 - 2012-09-04 14:32 - 00002036 ____A C:\Users\Trinz\Desktop\New Text Document.txt

2013-07-01 08:01 - 2013-07-01 06:02 - 00000000 ____D C:\Users\Trinz\Desktop\New folder (2)

2013-06-30 21:37 - 2013-05-26 21:00 - 00001833 ____A C:\Users\Trinz\Desktop\New Text Document (2).txt

2013-06-25 21:47 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\System32\NDF

2013-06-24 06:42 - 2013-06-24 06:42 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-06-24 06:42 - 2013-06-24 06:42 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-06-24 06:42 - 2013-06-24 06:42 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-06-24 06:42 - 2013-06-24 06:42 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-06-24 06:42 - 2013-06-24 06:42 - 00000000 ____D C:\Program Files (x86)\Java

2013-06-24 06:42 - 2012-08-07 14:58 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll

2013-06-24 06:42 - 2012-02-16 03:43 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll

2013-06-21 09:40 - 2013-06-12 00:15 - 00002366 ____A C:\Users\Trinz\Desktop\Google Chrome.lnk

2013-06-18 09:08 - 2012-02-16 04:35 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-06-18 09:08 - 2012-02-16 04:32 - 00000000 ____D C:\ProgramData\Skype

2013-06-16 09:28 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\rescache

2013-06-14 09:03 - 2012-02-15 14:44 - 00779146 ____A C:\Windows\SysWOW64\PerfStringBackup.INI

2013-06-12 11:17 - 2012-09-18 18:31 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-06-12 11:14 - 2012-02-15 15:16 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe

2013-06-12 00:10 - 2012-02-15 15:36 - 00000000 ____D C:\Users\Trinz\AppData\Local\Google

2013-06-11 05:31 - 2013-06-11 05:31 - 00000000 ____D C:\Program Files (x86)\Google

2013-06-11 05:23 - 2012-03-03 19:24 - 00000000 ____D C:\Users\Trinz\AppData\Local\Adobe

 

==================== Bamital & volsnap Check =================

 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

 

 

LastRegBack: 2013-06-23 05:07

 

==================== End Of Log ============================