Ecco i logs:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.orgVersione database: v2013.11.06.10
Windows 7 x86 NTFS
Internet Explorer 9.0.8112.16421
admin :: BENITO [amministratore]
07/11/2013 07:11:51
mbam-log-2013-11-07 (07-11-51).txt
Tipo di scansione: Scansione completa (C:\|)
Opzioni di scansione attive: Memoria | Esecuzione automatica | Registro | File di sistema | Euristica/Extra | Euristica/Shuriken | PUP | PUM
Opzioni di scansione disattivate: P2P
Elementi esaminati: 309110
Tempo impiegato: 1 ore, 6 minuti, 6 secondi
Processi rilevati in memoria: 0
(non sono stati rilevati elementi nocivi)
Moduli di memoria rilevati: 0
(non sono stati rilevati elementi nocivi)
Chiavi di registro rilevate: 4
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Spostato in quarantena ed eliminato con successo.
Valori di registro rilevati: 2
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Dati: 0J1R1T1D1Q1H1HtGzztHtL -> Spostato in quarantena ed eliminato con successo.
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs|bProtectTabs (PUP.Optional.BrowserProtect.A) -> Dati:
http://www1.delta-search.com/?affID=119294&tt=gc_150213_neue&babsrc=NT_ss&mntrId=A0F900030D000001 -> Spostato in quarantena ed eliminato con successo.
Voci rilevate nei dati di registro: 0
(non sono stati rilevati elementi nocivi)
Cartelle rilevate: 9
C:\Users\admin\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Roaming\OpenCandy\OpenCandy_06CF6B7D2F4943CC9B4AAA3373DE06DC (PUP.Optional.OpenCandy) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\mt_ffx\Delta (PUP.Optional.Delta.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\DriverPerformer (PUP.Optional.DriverPerformer.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\CT2851640 (PUP.Optional.Conduit.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\CT2851640\xpi (PUP.Optional.Conduit.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\ct3135048 (PUP.Optional.Conduit.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\CT3281348 (PUP.Optional.Conduit.A) -> Spostato in quarantena ed eliminato con successo.
File rilevati: 36
C:\Users\admin\AppData\Local\Temp\0qV1quFb.exe.part (PUP.Optional.InstallCore) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\toolbar20263687.exe (PUP.Optional.Babylon.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\IFp2fJzC.exe.part (PUP.Optional.Installex) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\igT4aiwh.exe.part (PUP.Optional.Installex) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\Shortcut_sweetimsetup.exe (PUP.Optional.SweetIM) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\+jbyKX+H.exe.part (PUP.Optional.Installex) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\DWC2lmL0.exe.part (PUP.Optional.Installex) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\rc_sc+WR.exe.part (PUP.Optional.Installex) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\huXBWLKl.exe.part (PUP.Optional.Installex) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\mgsqlite3.7z (PUP.Optional.SweetIM) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\mgsqlite3.dll (PUP.Optional.SweetIM) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\RjKtu_OE.exe.part (PUP.Optional.Installrex) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\UdR0nkUV.exe.part (PUP.Optional.Softonic) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\uninstall24796750.exe (PUP.Optional.GoForFiles.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\grSCBoFV.exe.part (PUP.Optional.Installex) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\Windows Loaderbydaz-geekfolder.zip (PUP.HackTool.H) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\d3SVmcG_.exe.part (PUP.Optional.Installex) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\066E3E44-BAB0-7891-935E-C7CEC5D5983C\MyBabylonTB.exe (PUP.Optional.BabylonToolBar.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\06BA9E26-BAB0-7891-A2A9-A90A73572903\MyBabylonTB.exe (PUP.Optional.BabylonToolBar.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\FDDD1EEF-BAB0-7891-BE0D-4855B2796108\Latest\BExternal.dll (PUP.Optional.Babylon.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\FDDD1EEF-BAB0-7891-BE0D-4855B2796108\Latest\CrxInstaller.dll (PUP.Optional.Babylon.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\FDDD1EEF-BAB0-7891-BE0D-4855B2796108\Latest\MyBabylonTB.exe (PUP.Optional.Delta) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\FDDD1EEF-BAB0-7891-BE0D-4855B2796108\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\is1438683437\dealply.exe (PUP.Optional.Dealply) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Roaming\OpenCandy\OpenCandy_06CF6B7D2F4943CC9B4AAA3373DE06DC\DLMgr_3_1.6.87.exe (PUP.Optional.OpenCandy) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\Desktop\DOWNLOADS\bs_Chainsaw.exe (PUP.Optional.Conduit.A) -> Spostato in quarantena ed eliminato con successo.
C:\Program Files\File Scout\filescout.exe (PUP.Optional.FileScout.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Roaming\OpenCandy\OpenCandy_06CF6B7D2F4943CC9B4AAA3373DE06DC\p1v1_PPIRegistryReviver_w.exe (PUP.Optional.OpenCandy) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\CT2851640\CT2851640.txt (PUP.Optional.Conduit.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\CT2851640\CT2851640.xpi (PUP.Optional.Conduit.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\CT2851640\initData.json (PUP.Optional.Conduit.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\CT2851640\manifest.json (PUP.Optional.Conduit.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\CT2851640\version.txt (PUP.Optional.Conduit.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\CT2851640\xpi\install.rdf (PUP.Optional.Conduit.A) -> Spostato in quarantena ed eliminato con successo.
C:\Users\admin\AppData\Local\Temp\CT3281348\ddt.csf (PUP.Optional.Conduit.A) -> Spostato in quarantena ed eliminato con successo.
(fine)
# AdwCleaner v3.011 - Report created 07/11/2013 at 09:49:45
# Updated 03/11/2013 by Xplode
# Operating System : Windows 7 Ultimate (32 bits)
# Username : admin - BENITO
# Running from : C:\Users\admin\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
Service Deleted : vToolbarUpdater17.0.12
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\AVG Nation toolbar
Folder Deleted : C:\ProgramData\AVG Security Toolbar
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\FreeRIP
Folder Deleted : C:\Program Files\AutocompletePro
Folder Deleted : C:\Program Files\AVG Nation toolbar
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\file scout
Folder Deleted : C:\Program Files\Common Files\AVG Secure Search
Folder Deleted : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Folder Deleted : C:\Users\admin\AppData\Local\AskToolbar
Folder Deleted : C:\Users\admin\AppData\Local\AVG Nation toolbar
Folder Deleted : C:\Users\admin\AppData\Local\Conduit
Folder Deleted : C:\Users\admin\AppData\Local\eSupport.com
Folder Deleted : C:\Users\admin\AppData\Local\Ilivid Player
Folder Deleted : C:\Users\admin\AppData\Local\OpenCandy
Folder Deleted : C:\Users\admin\AppData\Local\Temp\BabylonToolbar
Folder Deleted : C:\Users\admin\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\admin\AppData\LocalLow\AVG Nation toolbar
Folder Deleted : C:\Users\admin\AppData\LocalLow\AVG Security Toolbar
Folder Deleted : C:\Users\admin\AppData\LocalLow\BabylonToolbar
Folder Deleted : C:\Users\admin\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\admin\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\admin\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar
Folder Deleted : C:\Users\admin\AppData\Roaming\dvdvideosoftiehelpers
Folder Deleted : C:\Users\admin\AppData\Roaming\goforfiles
Folder Deleted : C:\Users\admin\AppData\Roaming\StatusWinks
File Deleted : C:\Users\admin\AppData\Local\Temp\Uninstall.exe
File Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\veijfkw9.default-1346277094612\invalidprefs.js
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\veijfkw9.default-1346277094612\searchplugins\Babylon.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\Babylon.xml
File Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\veijfkw9.default-1346277094612\searchplugins\delta.xml
File Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\veijfkw9.default-1346277094612\searchplugins\zonealarm.xml
File Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\veijfkw9.default-1346277094612\user.js
File Deleted : C:\Windows\System32\Tasks\GoforFilesUpdate
File Deleted : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
***** [ Shortcuts ] *****
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [statuswinks@StatusWinks]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [statuswinks@StatusWinks]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\defdhglnppeioeflggkmglipcecffkhk
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\hgojaaaiddhmiiakpejiklijbalpckih
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F608BC06-3533-454D-BDAF-F5DADE2FC695}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F608BC06-3533-454D-BDAF-F5DADE2FC695}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{752D880F-B1A8-4341-93E5-2D5FBA7B5EC1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{752D880F-B1A8-4341-93E5-2D5FBA7B5EC1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\AutocompletePro.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_avs-dvd-player_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_avs-dvd-player_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_freepdf_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_freepdf_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_light-image-resizer_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_light-image-resizer_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_mediacoder_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_mediacoder_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_mp3-rocket_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_mp3-rocket_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_mp3directcut_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_mp3directcut_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_photo-editor_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_photo-editor_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_super-mario-bros-x_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_super-mario-bros-x_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_utorrent_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_utorrent_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{944FEDFD-C4FD-441D-8275-9C651A9FFBDE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Ask.com
Key Deleted : HKCU\Software\AutocompletePro
Key Deleted : HKCU\Software\AutocompleteProBHO
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\filescout
Key Deleted : HKCU\Software\powerpack
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\AppDataLow\AskToolbarInfo
Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\smartbar
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\Software\AVG Security Toolbar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AutocompletePro3_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF
***** [ Browsers ] *****
-\\ Internet Explorer v9.0.8112.16506
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v25.0 (it)
[ File : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\veijfkw9.default-1346277094612\prefs.js ]
Line Deleted : user_pref("avg.userPreferences.URLBarFocus.whiteList", "bing\\.com|google\\.\\w+|yahoo\\.\\w+|gmail\\.\\w+|hotmail\\.\\w+|live\\.\\w+|isearch\\.avg\\.com|mysearch\\.avg\\.com");
Line Deleted : user_pref("extensions.delta.admin", false);
Line Deleted : user_pref("extensions.delta.aflt", "babsst");
Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Line Deleted : user_pref("extensions.delta.autoRvrt", "false");
Line Deleted : user_pref("extensions.delta.dfltLng", "en");
Line Deleted : user_pref("extensions.delta.excTlbr", false);
Line Deleted : user_pref("extensions.delta.ffxUnstlRst", true);
Line Deleted : user_pref("extensions.delta.id", "a0f9926500000000000000030d000001");
Line Deleted : user_pref("extensions.delta.instlDay", "15839");
Line Deleted : user_pref("extensions.delta.instlRef", "sst");
Line Deleted : user_pref("extensions.delta.newTab", false);
Line Deleted : user_pref("extensions.delta.prdct", "delta");
Line Deleted : user_pref("extensions.delta.prtnrId", "delta");
Line Deleted : user_pref("extensions.delta.rvrt", "false");
Line Deleted : user_pref("extensions.delta.smplGrp", "none");
Line Deleted : user_pref("extensions.delta.tlbrId", "base");
Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
Line Deleted : user_pref("extensions.delta.vrsn", "1.8.16.16");
Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.16.1622:17:00");
Line Deleted : user_pref("extensions.delta.vrsni", "1.8.16.16");
*************************
AdwCleaner[R0].txt - [18818 octets] - [07/11/2013 09:48:40]
AdwCleaner[S0].txt - [19238 octets] - [07/11/2013 09:49:45]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [19299 octets] ##########
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Ultimate x86
Ran by admin on 07/11/2013 at 9:55:01,98
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3198472292-88047709-2148913906-1000\Software\sweetim
Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}"
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Users\admin\appdata\local\cre"
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{012CFDC0-F98D-4F03-9241-AC8433E89CBD}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{027F027C-D4F9-41CA-983D-013AFA9F3073}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{0283B5E0-0838-4332-9C89-CC72765FDCCB}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{03D2F2F5-59FC-48FC-8993-6DDB95803123}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{05104BD6-F57C-4384-9893-90FB9820D07D}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{053B82B7-5575-41B7-AB3E-A196E9C3E5D1}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{060650A2-DB3F-49D9-A73D-46FA4B100E8B}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{07F9CAD3-9638-402E-9220-FC2E9517C793}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{094D3544-7331-4DEE-A10F-A18AF61415EB}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{0A9D7CEB-4F0A-4A8B-B7B9-E4E2FAD0480F}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{0C8C9112-627D-42FE-BF5A-9F6F3BB6B575}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{0D5DCC72-D381-4898-BBFC-BC2063192DAD}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{0D930E93-7BD2-47F6-9FC3-708ED533378C}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{0DC41ED9-94D8-471D-8CAB-9EDEC333CE2B}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{0E831BF6-4F1D-4D69-8D5F-C96A14DC80FB}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{0E879137-4F39-4EDB-9DB0-9AA2B8BA1FF9}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{0FD36341-5602-4FCF-9CBB-C53BF3788DC0}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{1021417F-61E9-46AF-861C-B8045AA5B162}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{10C224B2-D468-454E-A68F-3262F8B32794}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{110D8FC8-59E0-46FA-A026-A5315F153293}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{11E3F36A-A818-4BD4-8F6C-659694005E79}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{12DBE869-81F2-4064-BBD9-7A2E2C8CF439}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{13CBAFCA-1F88-4B37-84F1-9355EAAE528C}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{18708575-A405-4A8F-B917-7109A88AB1EC}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{1C29E2B9-DA22-46BF-908E-E6449BED0203}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{1CE92BB2-DC6D-4E67-841F-B2D2F5E8EA65}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{1F99D4F6-C2A4-414F-B08F-F070631D27EB}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{222ACB67-094E-4CF5-8545-79908B6F6030}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{23FE874D-396E-4690-A23E-72DB7899A702}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{24660C1D-0F8C-42D5-8650-02F351861275}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{24ABA6EE-B478-47B0-BDB5-8A41BDD11AA1}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{26667A14-1A8E-45EC-AC5A-358843263B7E}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{27174439-D54B-4C31-9E9F-FC1A7CECE819}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{28F30E44-CF64-4E32-819A-772CDEAB404E}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{29033FF1-7E50-43C8-8DE3-0862D26346A7}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{29941EA6-C94A-4812-BADE-AF94506999A1}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{2A447263-AA2C-4CB9-BCF1-BFA96E4D33F1}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{2E0E112A-4A89-4645-B4BD-CE2DA1CA22B7}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{2E9FB802-749E-4AE7-83DD-B22101ECC9B6}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{30CF39DF-2691-4E5B-9731-4E58AA0ACA0F}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{329C9B1E-7626-4EBD-AF24-6683C88F017C}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{32B99072-DD12-4484-9014-91BD077CCDA2}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{34977569-A93F-486C-BCF0-1886313A664E}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{35E9EDB2-DEE6-4420-A934-FE595D8E37E1}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{35F24D6A-F68F-4BC0-AC3C-D548EE0632B5}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{38A4FB5D-8DC9-4A7F-9D9E-5AC5ECB5283A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{3931BCB8-850E-4125-B1AF-556A4087FBF6}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{3A6CCB1D-67A9-4C93-BB99-792CD606FE62}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{3A9B064B-2502-4429-AE3C-85486DC65589}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{3B25AEC3-8C5C-4306-84C0-B52CA8635624}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{3CF0611D-B7C2-4807-9F8C-9099B972E453}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{3D3BEB50-D92C-4689-A113-B6869AD7E965}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{3D805B91-0AF4-4D0C-8924-42D0887915E7}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{3D828946-3837-47E7-82ED-4020BD2269B4}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{3DBE75B6-62ED-41EE-9B24-2EE020E50216}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{3E04E0C6-BB5B-42E2-A601-C113B16E2820}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{3E3C5367-82B8-4538-901E-13B1E93E5DF4}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{3F683B85-ECCA-4425-9966-BCDCE6670460}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{41EEDD10-2241-4B51-ABBF-9C02572623F9}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{46684BD1-7ADC-44BF-828B-9CFCB1C5AD66}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{46DCBF0C-870E-42C5-97F5-9712195945F8}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{4779543C-8AFF-42B3-8A86-0C0284B3A47B}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{47A038A6-FB5E-479C-93B5-1258225ADC01}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{4A3437BB-ED9C-44E5-96E5-05B92B4E8856}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{4C27F5BE-3D8B-404C-A306-BA364E28020D}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{4CB05656-B95D-440A-B250-73C79D69587A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{4D8E2BB2-79AA-4B64-B60A-727455608688}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{4DC4CBA2-2AAB-4950-B97C-12003FA4268A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{4EBE74FF-338F-4069-B54C-9BFB1C7DFC07}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{4F0DE428-14FE-42D0-ADDF-92258D7EEAA9}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{50C5C344-46AC-4A54-848B-CC1162F0A919}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{5250C79A-66C6-4BAF-A802-FBFAF8110610}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{53115145-CBC4-44B4-BC85-3D8B723F85C1}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{55BEA7BA-36C9-40F2-BB18-14859FD3201A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{57750FDD-1886-453C-B7FF-B391372D2F3D}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{5866C34F-B221-4AC0-A7B7-3980C63359F5}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{588FFBF6-A95F-4C9E-AD44-8503EFC1DBFE}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{59B370A2-3C22-42F7-88EB-74E29A88554C}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{5D2C110F-9A35-4CD8-BA24-553BE85C292A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{5D3ADD77-D0FE-4D37-B8CD-21B27C78223B}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{5D554D4A-C691-478B-A83F-79280E48AE53}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{5F12C21C-C841-46A0-A0B6-2D8E0A4A6EDF}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{5F8B3615-E7FD-4B84-A442-89928677FBF9}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{60994428-5263-4E41-937C-39A0068A002B}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{60FF3262-3723-45DE-A221-4196E88C8CF8}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{61116E8F-7561-4345-9E13-86B9095B0E73}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{61768E93-6233-4060-B74D-1A6DF606FA6E}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{61ADE3FB-0ECB-471F-9E55-81EE3A28163F}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{63A3A1FF-43AA-43FA-9BAA-BC6E6DF70D5A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{64A591DD-1057-4563-BB4C-3E5828F38591}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{6553CFB5-ACAA-41BA-A71E-E2FCCF2EC041}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{66416F0B-A113-42AA-93F2-6D60D29429C7}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{69F1B714-1BEC-4D0B-991F-562D6B5E43E8}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{6A347483-216D-427C-A827-236C4308A7A6}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{6A3889B7-F860-4326-8B7E-9BFADF504CD7}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{6A4281FF-765D-4333-8BE0-176AEA011A63}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{6B00ECEA-8F29-4D3C-BC1F-16E1641D52B1}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{6DA72B6E-2BE3-48A3-846A-21EAE2EBDF88}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{6DE5F266-D3A6-4C17-85ED-AC70E6323687}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{6E8F9B55-4A35-43FB-B916-A9114EB8F259}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{6F2A922D-1531-46E8-888A-3A75B929E836}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{70ADB57E-9D15-4FC6-9CAD-C718C333FA50}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{737BAEFC-C38D-4DB3-A79A-5A6B4A454FF7}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{73F8FAF5-61A7-4CD0-BC07-5FE476419B8A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{74BDDDB7-483B-4E9A-8F47-DDFA3D6AEB9B}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{7548ED69-F1E6-4BC0-B3F9-31FDC7BDC00B}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{75D91FFD-4C70-492D-95F5-9B9EF9C08A88}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{761A7236-25C0-4EC4-86F5-5938C8A7AB75}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{76B1EAAD-C842-4C37-9BB6-6961AB39775D}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{76C0A226-1446-4C68-AB8F-E96BB0489FDD}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{77E3DF6A-8D64-4307-86FC-32CA7037E35C}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{7804A262-4BD5-4113-8C3D-3F798D7B2BC7}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{788F67FD-2B26-462D-ACC0-B234496F834F}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{796578C2-75E2-48B6-9E45-35694EB6D25A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{79FA2946-9118-4B9B-9378-74901DEF8A3F}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{7A45CF08-1DAF-4E03-BE95-9E9D898EEEA6}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{7B248C63-C63F-42D3-AB91-EC7F54AA3FB8}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{7BA648C0-0EC7-4A61-9D90-BB11CF86C840}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{7C816D24-1EF7-4157-A87C-C5398494CD86}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{7D829A67-86FC-4303-8702-428C37508773}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{7E12DF14-FCDC-40D8-83FF-4B520757649C}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{7E6632AB-CFB2-44DB-AF83-ECD7467E2AC5}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{8092F069-0F1C-4326-85A7-13F4525DD653}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{820287E7-86FB-4660-9910-3033FE9E8576}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{8251AC81-0602-4D2D-AA32-15A5CB7C4A96}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{83C716D8-5B8E-4F38-B628-B01CDBB5D66C}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{84AC41B7-4CA4-45CB-A8E2-C322109029D5}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{854A1EFB-93E8-4650-A211-E53E9DF9B2B6}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{85E6244C-4DEC-4979-8361-4A43F065D729}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{86E4E08B-87C3-4B9B-A296-E5FB173CF4EB}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{87C24F59-FFC3-4E03-BBB9-8660C02277F5}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{890E05DE-C4F8-44F8-9824-4D52F1FCD494}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{8961D720-975C-44C7-8824-EC5BEC40B868}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{89903ED7-0BC4-4F66-A5A1-12C8ABF6CB03}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{8A57EAD8-9588-4B7A-B4BD-4421157DA9BF}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{8A9FC49B-EE7F-4C85-9503-D7A4C5146BB1}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{8AF01BF4-8D3A-4220-833E-7338FEA260C4}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{8B9D90E8-7595-44F2-B954-CF0191E2B921}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{8C0D23A7-FF69-45FF-A3F9-F44E6E8CEF10}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{8D319E46-5F22-44EF-A7D8-CF023A9CD8BA}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{8EBC1F1E-595F-45C0-BB78-77B82A6C8392}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{904E06EA-C04B-4794-A3E6-279F003BF4BD}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{90D0006B-2CA2-4D4B-A095-816B50021F45}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{910A73B7-7687-46FB-9162-395349EC4C63}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{911C5322-B522-4704-B242-7AED2D7FD46E}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{917BC590-E5B2-48AE-BEE8-826C081553A7}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{925AE145-50D8-4B8B-95FE-A7D131EBDE9E}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{9261E094-417D-4C9C-8E8E-B4006FB2DD85}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{95347D92-4989-45EA-BD1C-A1A1898315F0}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{956B1CE9-9ACE-4C53-B850-47CA7E891B5E}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{96D76260-26F8-4D0C-9971-783053D632EA}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{96DAB6A5-A644-417D-A8C9-8A40F690DA39}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{99E0643D-6474-4DAC-A791-B3E7C77B8002}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{9DA88FD0-F6B1-4704-8578-EEAC6FD39694}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{9DEAD189-1B73-47F4-B5D9-82CBC4F0CEE0}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{9ECDAD5C-B4CC-47BE-9230-F9C2FD81984C}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{9F520FA6-71D1-4338-8546-BDF16FED4833}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{9F549ACE-2183-43FF-BAE2-AC0FB0E705D9}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{A3DFAF63-88AE-4D74-89A0-54BE264DAA71}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{A99BE667-2608-41E6-88FF-955CAC0978B5}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{AA081D08-FBA9-4DF5-A9C0-B8AA40FAA738}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{AB12EFC5-DDDC-452D-8BC7-6DE1204F82B5}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{ABDCA224-D1DD-4A39-9853-E41463B744F6}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{B10C8303-69DF-44DB-8697-3F239CCD3432}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{B152E452-A447-4903-B689-5FD156C590C9}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{B165E911-4C5E-4AB0-B183-DADC6844687B}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{B26E2FA8-2241-4126-960A-E911D356E3D6}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{B2EF97E7-336A-477D-B4DE-B83307B5EBAD}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{B51BC590-C7CC-4675-9F6E-5FF9B89EEEB6}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{B531D8F0-1DA0-4C0B-B36B-8D5641C1DF8A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{B5E51E43-22C1-4000-9720-6DD6EB33134A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{B610B6C8-7A2E-430E-9BD5-BAFAA2C127D7}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{B8CD4D71-B1A9-4833-A16E-7BE291FFFF1C}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{BF5B83E6-DDC5-47DB-9E9A-B41230F300AB}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{C20485A1-4523-475B-9362-066EAA7E4EF0}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{C2431951-A0D5-4873-ACAF-9624E9472B8A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{C3103B98-4E26-4B74-825A-19024398154D}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{C63B298B-D92B-4899-979D-F6A7363D0D3B}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{C8560F98-1571-4A37-AC2B-31D0EAF7546B}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{C890C76F-C1EF-44F0-ACBF-FB654E7D2DA4}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{C8BAC74C-49E2-48B5-B07D-1D137CFA2D11}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{C9020867-C8D3-4C06-A682-1E88ACE0422E}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{C97CD950-A1AC-4AD3-B0E3-1D85472AA5BD}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{CAA88DDC-BB7B-41D3-845E-A98AB3BD75FE}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{CC6FF4B9-074E-4348-94DF-B79D9039990E}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{CD0E66AF-3922-4798-8031-23F75653C8C7}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{CDC9A317-42C4-48D1-8D13-E5A28BE74D87}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{CF151225-5016-4F82-A418-240032352E2A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{D066DB1B-AC3A-46CE-A190-8B843D58FC05}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{D08897A2-DB18-44BA-AD1B-F75C08CAC789}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{D09768AE-845F-426C-A4A5-754B2EAA02B5}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{D2F4E0AE-7BA2-467A-90A5-918E3AC8681B}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{D3041832-E3F5-485E-9BD8-37251E4F90BA}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{D49986F9-D375-43B5-B3F1-CED34469F39A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{D4C1CA5E-7859-407B-959E-3D66D57557E6}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{D63C2BF2-E002-41D5-80E8-92161987C621}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{D82F47CC-2A51-4573-BC8D-EE15A018C04C}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{D833C00F-CFBD-4B91-88D5-55FAD1BDFA46}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{D91D2E97-D4ED-408F-8622-C7B5146E6394}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{DB375309-4357-464B-BE89-D8483220F897}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{DBB1547C-0F5A-480B-8F2B-B4C9B2CC8ED9}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{DC094378-23BB-4DF6-81E1-94590D26F5F2}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{DE876221-47C1-4AC5-A0D7-DFF61A772815}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{DF647C8D-AE9F-4754-932D-CE304BBC55FD}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{E09230C5-38A9-4707-A602-33328B9A8CCC}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{E38440ED-B42D-44EE-AB01-D4C92DF937A5}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{E3B8317B-D486-4E19-9039-CDEF84ED1A77}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{E5655EDA-85D6-4D3F-9230-4E0FB823BB81}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{E69CBC1B-A865-4E6F-A091-EE3903952B2A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{E714AAA0-E4C0-43E7-8AC5-D9B14778754C}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{E7162799-AC4E-4682-9398-C2FF7A6E4D98}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{EA1F9007-F58F-4779-BFFF-7C48CEA90615}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{EC69730C-7142-4913-A92A-37426B002276}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{ED1B1E9E-76E7-461F-912F-11CE16F77E59}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{ED866856-0745-4C05-B663-6ED2A4C9A4B0}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{EDE80DF8-C97F-4003-B398-FF9AA065448E}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{EEC9A0AE-F529-4E61-A55C-FFE696C245C6}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{F039215D-0901-46C4-BCD4-7936C29BD73C}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{F12E1CB6-529C-4371-935A-7A2C179A9C85}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{F13C15A4-F356-4600-AEC0-E15FD5EC210E}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{F1B3299A-3CFC-4D15-8A36-27D24CDAFBFE}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{F501524C-E997-4135-B7DC-14AC561A980C}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{F6028B66-8CD6-418E-BC86-9F21CD1953D3}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{F611BFF6-37FF-45D0-A1D7-D577A9560D64}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{F61A7BDE-3AD0-4C9C-BD23-45DE661DB4C3}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{F6406B57-4B32-4459-AD56-5606D2217D68}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{F7BB1486-02DB-4566-9933-9ED7A19864B4}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{F8431010-238C-4D03-AB1A-3348AB6B0833}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{F9026785-1946-47A3-9EBE-342753F4453A}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{F983FB20-7735-475D-A3C1-C71D50F9A10D}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{F9CCB6C3-C052-4C70-8AD1-12447EA8594E}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{FAD9325E-F3A5-4167-97B8-E776FE356FF5}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{FB23B786-3B08-426B-A824-A62284280A26}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{FB8FB0C4-668C-456A-9F24-80B9310FE679}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{FC09E041-0D68-40DF-B0CF-65662DB2B15C}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{FC652C15-8CED-408B-8091-A47F8EA5916D}
Successfully deleted: [Empty Folder] C:\Users\admin\appdata\local\{FEC0C399-64C6-4531-A659-BE7E960F4D17}
~~~ FireFox
Successfully deleted: [File] C:\user.js
Emptied folder: C:\Users\admin\AppData\Roaming\mozilla\firefox\profiles\veijfkw9.default-1346277094612\minidumps [323 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07/11/2013 at 10:01:55,95
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:22:41, on 07/11/2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16506)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe
C:\Program Files\AVG\AVG2014\avgui.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\explorer.exe
C:\Windows\system32\notepad.exe
C:\Users\admin\Desktop\HiJackThis.exe
C:\Windows\system32\SearchFilterHost.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.musiclines.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {4ae0c3d6-f713-4eed-bc65-25dc3ffdaac1} - (no file)
O2 - BHO: Zonealarm Helper Object - {2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C} - C:\Program Files\Check Point Software Technologies LTD\zonealarm\1.8.21.15\bh\zonealarm.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files\Check Point Software Technologies LTD\zonealarm\1.8.21.15\zonealarmTlbr.dll
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [CmPCIaudio] RunDll32 CMICNFG3.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO DI RETE')
O8 - Extra context menu item: &Scarica con FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: &Scarica tutto con FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Append the content of the link to existing PDF file - res://C:\Program Files\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
O8 - Extra context menu item: Append the content of the selected links to existing PDF file - res://C:\Program Files\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
O8 - Extra context menu item: Append to existing PDF file - res://C:\Program Files\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
O8 - Extra context menu item: Create PDF file - res://C:\Program Files\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
O8 - Extra context menu item: Create PDF file from the content of the link - res://C:\Program Files\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
O8 - Extra context menu item: Create PDF files from the selected links - res://C:\Program Files\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube Download - C:\Program Files\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
O8 - Extra context menu item: I&nvia a OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Open with Nuance PDF Converter 6.0 - res://C:\Program Files\Nuance\PDF Professional 6\cnvres_eng.dll /100
O8 - Extra context menu item: SmarThru4 Acquisisci selezione - C:\Program Files\SmarThru 4\WebCapture.dll2.htm
O8 - Extra context menu item: SmarThru4 Capture Selection - C:\Program Files\SmarThru 4\WebCapture.dll2.htm
O8 - Extra context menu item: SmarThru4 Salva come HTML - C:\Program Files\SmarThru 4\WebCapture.dll1.htm
O8 - Extra context menu item: SmarThru4 Salva testo selezionato - C:\Program Files\SmarThru 4\WebCapture.dll.htm
O8 - Extra context menu item: SmarThru4 Save as HTML - C:\Program Files\SmarThru 4\WebCapture.dll1.htm
O8 - Extra context menu item: SmarThru4 Save Selected Text - C:\Program Files\SmarThru 4\WebCapture.dll.htm
O8 - Extra context menu item: SmarThru4 Web Capture - C:\Program Files\SmarThru 4\WebCapture.dll
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Note collegate di OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Note collegate di OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Barra di ricerca di Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: SmarThru4 Web Capture - {5941A0E4-56C1-4a49-9B18-05762CAC5F9B} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O9 - Extra 'Tools' menuitem: SmarThru4 Web Capture - {5941A0E4-56C1-4a49-9B18-05762CAC5F9B} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O9 - Extra button: SmarThru4 Acquisisci selezione - {A07BFEF7-DD11-4937-B23B-E70C11D2EDF4} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O9 - Extra 'Tools' menuitem: SmarThru4 Acquisisci selezione - {A07BFEF7-DD11-4937-B23B-E70C11D2EDF4} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O9 - Extra button: SmarThru4 Salva come HTML - {E753A93F-2367-4978-BFA0-83048C1E61CB} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O9 - Extra 'Tools' menuitem: SmarThru4 Salva come HTML - {E753A93F-2367-4978-BFA0-83048C1E61CB} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O9 - Extra button: SmarThru4 Salva testo selezionato - {F1F53366-3E11-47ab-BF84-580C94F9C9AD} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O9 - Extra 'Tools' menuitem: SmarThru4 Salva testo selezionato - {F1F53366-3E11-47ab-BF84-580C94F9C9AD} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cabO18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgwdsvc.exe
O23 - Service: Servizio di Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NeMeSys Service (Nemesys) - Fondazione Ugo Bordoni - C:\Program Files\Nemesys\dist\Nemesys.exe
O23 - Service: Macrium Reflect Image Mounting Service (ReflectService) - Unknown owner - C:\Program Files\Macrium\Reflect\ReflectService.exe
O23 - Service: Samsung UPD Service - Samsung Electronics CO., LTD. - C:\Windows\System32\SUPDSvc.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SmartLinkService (SLService) - - C:\Windows\SYSTEM32\slserv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: ZoneAlarm Privacy Service (ZAPrivacyService) - Check Point Software Technologies, Ltd. - C:\Program Files\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
--
End of file - 12704 bytes
Questo è il tutto
