Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

infected with the cryptowall

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

infected with the cryptowall

Unread postby heyoka05 » September 24th, 2014, 11:28 pm

Happened 2 nights ago and now I can't access any of my files ....both Avast and WinPatrol failed to see it
any help would be most appreciated


DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17280
Run by bigdog at 23:21:35 on 2014-09-24
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3894.1680 [GMT -4:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files\IDT\WDM\STacSV64.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files (x86)\Common Files\Motive\McciCMService.exe
C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\IDT\WDM\sttray64.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxps://us-mg6.mail.yahoo.com/neo/launc ... 9dma1mpn54
mWinlogon: Userinit = userinit.exe,
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
EB: F12 Developer Tools: {28BCCB9A-E66B-463C-82A4-09F320DE94D7} - C:\Program Files (x86)\Internet Explorer\F12Tools.dll
uRun: [KSS] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe" /autorun
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
mRun: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
mRun: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
mRun: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
mRun: [WinPatrol] C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe -expressboot
mRun: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
dRun: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/i ... ction2.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} - hxxp://content.systemrequirementslab.co ... 4.24.0.cab
DPF: {E0FEE963-BB53-4215-81AD-B28C77384644} - hxxps://pattcw.att.motive.com/wizlet/DS ... ller64.cab
TCP: NameServer = 10.0.0.1
TCP: Interfaces\{EF051494-A21D-45A4-B182-C41D1A6BB144} : DHCPNameServer = 10.0.0.1
TCP: Interfaces\{EF051494-A21D-45A4-B182-C41D1A6BB144}\44F65776C6163723 : DHCPNameServer = 192.168.0.1 216.165.129.158
TCP: Interfaces\{EF051494-A21D-45A4-B182-C41D1A6BB144}\662716E61313 : DHCPNameServer = 192.168.2.1
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe"
x64-BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
x64-BHO: HP Network Check Helper: {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll
x64-BHO: avast! Ad Blocker: {FFCB3198-32F3-4E8B-9539-4324694ED663} - C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker64.dll
x64-TB: avast! Online Security: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - LocalServer32 - <no file>
x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
x64-Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden
x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
x64-Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
x64-RunOnce: [NCPluginUpdater] "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update
x64-IE: {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Notify: igfxcui - igfxdev.dll
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\bigdog\AppData\Roaming\Mozilla\Firefox\Profiles\xf2x1qqs.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxps://login.yahoo.com/config/login?.s ... hoo.com%2F
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q=
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Common Files\Motive\npMotive.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Users\bigdog\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll
FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll
FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll
FF - plugin: C:\Windows\SysWOW64\npmproxy.dll
.
============= SERVICES / DRIVERS ===============
.
R0 aswRvrt;avast! Revert;C:\Windows\System32\drivers\aswRvrt.sys [2013-3-21 65776]
R0 aswVmm;avast! VM Monitor;C:\Windows\System32\drivers\aswVmm.sys [2013-3-21 224896]
R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswsnx.sys [2011-6-6 1041168]
R1 aswSP;aswSP;C:\Windows\System32\drivers\aswsp.sys [2011-6-6 427360]
R2 aswHwid;avast! HardwareID;C:\Windows\System32\drivers\aswHwid.sys [2014-5-6 29208]
R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2011-6-6 79184]
R2 aswStm;aswStm;C:\Windows\System32\drivers\aswstm.sys [2014-1-8 92008]
R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-7-30 50344]
R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2013-4-22 822504]
R2 EpsonCustomerParticipation;EpsonCustomerParticipation;C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe [2011-6-9 555392]
R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2012-9-27 86528]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service;C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-7-21 103992]
R2 HPClientSvc;HP Client Services;C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-8-5 291896]
R2 HPWMISVC;HPWMISVC;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2011-6-14 26680]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-5-13 13336]
R2 KSS;Kaspersky Security Scan Service;C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [2014-6-15 202080]
R2 LVPrcS64;Process Monitor;C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-10-7 191000]
R2 McciCMService64;McciCMService64;C:\Program Files\Common Files\Motive\McciCMService.exe [2011-7-11 517632]
R2 RoxioNow Service;RoxioNow Service;C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe [2010-9-11 399344]
R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-6-26 523944]
R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-5-13 2320920]
R3 btwampfl;Bluetooth AMP USB Filter;C:\Windows\System32\drivers\btwampfl.sys [2011-5-13 344616]
R3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2011-5-13 39464]
R3 clwvd;CyberLink WebCam Virtual Driver;C:\Windows\System32\drivers\clwvd.sys [2010-7-28 31088]
R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2009-9-17 56344]
R3 Impcd;Impcd;C:\Windows\System32\drivers\Impcd.sys [2010-12-8 158976]
R3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2010-12-8 317440]
R3 LVPr2M64;Logitech LVPr2M64 Driver;C:\Windows\System32\drivers\LVPr2M64.sys [2009-10-7 30232]
R3 Sftfs;Sftfs;C:\Windows\System32\drivers\Sftfslh.sys [2013-6-26 767144]
R3 Sftplay;Sftplay;C:\Windows\System32\drivers\Sftplaylh.sys [2013-6-26 273576]
R3 Sftredir;Sftredir;C:\Windows\System32\drivers\Sftredirlh.sys [2013-6-26 28840]
R3 Sftvol;Sftvol;C:\Windows\System32\drivers\Sftvollh.sys [2013-6-26 23208]
R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-6-26 207528]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-9-12 111616]
S3 lvpepf64;Volume Adapter;C:\Windows\System32\drivers\lv302a64.sys [2011-7-7 15896]
S3 LVRS64;Logitech RightSound Filter Driver;C:\Windows\System32\drivers\lvrs64.sys [2011-7-7 327576]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\netw5v64.sys [2009-6-10 5434368]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;C:\Windows\System32\drivers\RtsPStor.sys [2011-5-13 329832]
S3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2011-3-21 452200]
S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864]
S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312]
S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-6-10 59392]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2011-2-18 51712]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-6-7 1255736]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-6-10 389120]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2014-09-25 02:51:25 -------- d-----w- C:\ProgramData\Kaspersky Lab
2014-09-25 02:51:25 -------- d-----w- C:\Program Files (x86)\Kaspersky Lab
2014-09-20 04:45:35 11578928 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{289645B5-8372-4613-BE82-18B3C5F91668}\mpengine.dll
2014-09-12 06:02:59 977408 ----a-w- C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll
2014-09-11 11:59:18 728064 ----a-w- C:\Windows\System32\kerberos.dll
2014-09-11 11:59:17 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll
2014-09-11 11:59:17 550912 ----a-w- C:\Windows\SysWow64\kerberos.dll
2014-09-11 11:59:17 22016 ----a-w- C:\Windows\SysWow64\secur32.dll
2014-09-11 11:59:17 1460736 ----a-w- C:\Windows\System32\lsasrv.dll
2014-08-27 18:05:54 3163648 ----a-w- C:\Windows\System32\win32k.sys
2014-08-27 18:05:53 404480 ----a-w- C:\Windows\System32\gdi32.dll
2014-08-27 18:05:53 311808 ----a-w- C:\Windows\SysWow64\gdi32.dll
.
==================== Find3M ====================
.
2014-08-25 10:53:42 270496 ------w- C:\Windows\System32\MpSigStub.exe
2014-08-18 22:29:49 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
2014-08-18 22:29:35 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll
2014-08-18 22:19:53 5833728 ----a-w- C:\Windows\System32\jscript9.dll
2014-08-18 22:15:34 547328 ----a-w- C:\Windows\System32\vbscript.dll
2014-08-18 22:15:09 66048 ----a-w- C:\Windows\System32\iesetup.dll
2014-08-18 22:14:38 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll
2014-08-18 22:14:10 83968 ----a-w- C:\Windows\System32\MshtmlDac.dll
2014-08-18 22:08:55 4232704 ----a-w- C:\Windows\SysWow64\jscript9.dll
2014-08-18 22:03:47 139264 ----a-w- C:\Windows\System32\ieUnatt.exe
2014-08-18 22:03:37 111616 ----a-w- C:\Windows\System32\ieetwcollector.exe
2014-08-18 22:03:01 758272 ----a-w- C:\Windows\System32\jscript9diag.dll
2014-08-18 21:57:44 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2014-08-18 21:56:17 940032 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe
2014-08-18 21:46:26 454656 ----a-w- C:\Windows\SysWow64\vbscript.dll
2014-08-18 21:45:23 61952 ----a-w- C:\Windows\SysWow64\iesetup.dll
2014-08-18 21:45:12 72704 ----a-w- C:\Windows\System32\JavaScriptCollectionAgent.dll
2014-08-18 21:44:44 51200 ----a-w- C:\Windows\SysWow64\ieetwproxystub.dll
2014-08-18 21:44:09 61952 ----a-w- C:\Windows\SysWow64\MshtmlDac.dll
2014-08-18 21:36:07 112128 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2014-08-18 21:35:24 597504 ----a-w- C:\Windows\SysWow64\jscript9diag.dll
2014-08-18 21:23:17 2104832 ----a-w- C:\Windows\System32\inetcpl.cpl
2014-08-18 21:23:16 1249280 ----a-w- C:\Windows\System32\mshtmlmedia.dll
2014-08-18 21:22:48 60416 ----a-w- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
2014-08-18 21:15:13 2310656 ----a-w- C:\Windows\System32\wininet.dll
2014-08-18 21:08:54 2014208 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2014-08-18 21:07:44 1068032 ----a-w- C:\Windows\SysWow64\mshtmlmedia.dll
2014-08-18 20:46:48 1812992 ----a-w- C:\Windows\SysWow64\wininet.dll
2014-07-31 02:05:24 93568 ----a-w- C:\Windows\System32\drivers\aswRdr2.sys
2014-07-31 02:05:24 92008 ----a-w- C:\Windows\System32\drivers\aswstm.sys
2014-07-31 02:05:24 79184 ----a-w- C:\Windows\System32\drivers\aswMonFlt.sys
2014-07-31 02:05:24 65776 ----a-w- C:\Windows\System32\drivers\aswRvrt.sys
2014-07-31 02:05:24 29208 ----a-w- C:\Windows\System32\drivers\aswHwid.sys
2014-07-31 02:05:24 224896 ----a-w- C:\Windows\System32\drivers\aswVmm.sys
2014-07-31 02:05:24 1041168 ----a-w- C:\Windows\System32\drivers\aswsnx.sys
2014-07-31 02:05:23 43152 ----a-w- C:\Windows\avastSS.scr
2014-07-16 03:23:41 2048 ----a-w- C:\Windows\System32\tzres.dll
2014-07-16 02:46:02 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2014-07-14 02:02:45 1216000 ----a-w- C:\Windows\System32\rpcrt4.dll
2014-07-14 01:40:58 664064 ----a-w- C:\Windows\SysWow64\rpcrt4.dll
2014-06-30 22:24:50 8856 ----a-w- C:\Windows\System32\icardres.dll
2014-06-30 22:14:53 8856 ----a-w- C:\Windows\SysWow64\icardres.dll
.
============= FINISH: 23:22:26.88 ===============



.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 6/6/2011 1:38:57 AM
System Uptime: 9/24/2014 9:05:00 PM (2 hours ago)
.
Motherboard: Hewlett-Packard | | 166A
Processor: Intel(R) Pentium(R) CPU P6300 @ 2.27GHz | CPU | 2266/1066mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 450 GiB total, 365.646 GiB free.
D: is FIXED (NTFS) - 15 GiB total, 1.932 GiB free.
E: is CDROM ()
F: is FIXED (FAT32) - 0 GiB total, 0.083 GiB free.
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Bluetooth Device (Personal Area Network)
Device ID: BTH\MS_BTHPAN\7&2AB2D2D6&0&2
Manufacturer: Microsoft
Name: Bluetooth Device (Personal Area Network)
PNP Device ID: BTH\MS_BTHPAN\7&2AB2D2D6&0&2
Service: BthPan
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Realtek PCIe FE Family Controller
Device ID: PCI\VEN_10EC&DEV_8136&SUBSYS_166A103C&REV_05\4&1D668223&0&00E1
Manufacturer: Realtek
Name: Realtek PCIe FE Family Controller
PNP Device ID: PCI\VEN_10EC&DEV_8136&SUBSYS_166A103C&REV_05\4&1D668223&0&00E1
Service: RTL8167
.
==== System Restore Points ===================
.
RP383: 8/20/2014 1:28:41 AM - Windows Update
RP384: 8/23/2014 1:47:58 AM - Windows Update
RP385: 8/26/2014 11:53:52 PM - Windows Update
RP386: 8/28/2014 12:42:15 AM - Windows Update
RP387: 9/3/2014 12:21:00 AM - Windows Update
RP388: 9/10/2014 1:50:02 AM - Scheduled Checkpoint
RP389: 9/10/2014 2:08:40 AM - Windows Update
RP390: 9/12/2014 1:55:01 AM - Windows Update
RP391: 9/17/2014 1:16:53 AM - Windows Update
.
==== Installed Programs ======================
.
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Photoshop 6.0
Adobe Reader 9.5.5 MUI
Adobe Shockwave Player 11.5
Agatha Christie - Peril at End House
AP Tuner 3.08
Apple Application Support
Apple Mobile Device Support
Apple Software Update
avast! Ad Blocker
avast! Free Antivirus
Avery Design & Print
AVS Screen Capture version 2.0.1
AVS Update Manager 1.0
AVS Video Editor 6
AVS Video Recorder 2.4
AVS4YOU Software Navigator 1.4
Bejeweled 2 Deluxe
Blackhawk Striker 2
Blasterball 3
Blender
Bonjour
Bounce Symphony
Broadcom 2070 Bluetooth 3.0
Broadcom 802.11 Wireless LAN Adapter
Bryce 7.1
Build-a-lot 2
Cake Mania
Chuzzle Deluxe
Crazybump (remove only)
CyberLink DVD Suite
CyberLink YouCam
D3DX10
Diner Dash 2 Restaurant Rescue
Dora's World Adventure
Energy Star Digital Logo
Epson Connect
Epson Customer Participation
Epson Download Navigator
Epson Event Manager
EPSON NX430 Series Printer Uninstall
EPSON PhotoQuicker3.0
EPSON Scan
EpsonNet Print
Escape Rosecliff Island
ESU for Microsoft Windows 7
EZdrummer
EZXCocktail
Facebook Messenger 2.1.4814.0
Farm Frenzy
FATE
ffdshow v1.2.4422 [2012-04-09]
Film Factory
Final Drive Nitro
Final Media Player 2011
Freecorder 5
GTK2-Runtime
Heroes of Hellas 2 - Olympia
Hewlett-Packard ACLM.NET v1.2.1.1
HP Auto
HP Client Services
HP Customer Experience Enhancements
HP Documentation
HP Game Console
HP Games
HP MovieStore
HP On Screen Display
HP Power Manager
HP Product Detection
HP Quick Launch
HP Setup
HP Setup Manager
HP Software Framework
HP Support Assistant
HP Wireless Assistant
IDT Audio
Inkscape 0.48.5
Intel(R) Control Center
Intel(R) Management Engine Components
Intel(R) Processor Graphics
Intel(R) Rapid Storage Technology
iTunes
Java Auto Updater
Java(TM) 6 Update 14
Java(TM) 6 Update 22 (64-bit)
Java(TM) 6 Update 33
Jewel Quest Solitaire 2
Kaspersky Security Scan
KTabS Reader
LabelPrint
LightScribe System Software
Logitech Vid
Logitech Webcam Software
Logitech Webcam Software Driver Package
Mesh Runtime
Microsoft Application Error Reporting
Microsoft Office 2010
Microsoft Office Click-to-Run 2010
Microsoft Office Starter 2010 - English
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable - KB2467175
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Works
Microsoft WSE 3.0 Runtime
Microsoft_VC90_CRT_x86
Mozilla Firefox 21.0 (x86 en-US)
Mozilla Maintenance Service
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Mystery P.I. - The London Caper
OneTouch Version 3.0
Overtone Analyzer Premium Trial 3.2.2
Panopticum Engraver 1.0
PaperPort 7.0
Penguins!
Plants vs. Zombies
PlayReady PC Runtime x86
Poker Superstars III
Polar Bowler
Polar Golfer
Power2Go
QuickTime
Realtek Ethernet Controller Driver
Realtek PCIE Card Reader
REAPER
Recovery Manager
RiyazStudio
RoxioNow Player
Scala
Security Update for CAPICOM (KB931906)
Sony ACID Music Studio 6.0b
Spectrum Analyzer pro Lab
Starry Night Backyard 4
StroboSoft
SwarPlug Demo
Synaptics TouchPad Driver
System Requirements Lab for Intel
VC80CRTRedist - 8.0.50727.6195
Virtual Families
Virtual Villagers 4 - The Tree of Life
Wheel of Fortune 2
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Language Selector
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
WinPatrol
WinRAR 4.01 (64-bit)
Xiph.Org Open Codecs 0.85.17777
Yahoo! Detect
Zuma Deluxe
.
==== Event Viewer Messages From Past Week ========
.
9/22/2014 8:11:20 PM, Error: Disk [11] - The driver detected a controller error on \...\DR1.
9/17/2014 10:47:03 AM, Error: Schannel [36888] - The following fatal alert was generated: 40. The internal error state is 252.
.
==== End Of File ===========================
heyoka05
Regular Member
 
Posts: 72
Joined: July 11th, 2007, 11:48 am
Advertisement
Register to Remove

Re: infected with the cryptowall

Unread postby wannabeageek » September 27th, 2014, 10:31 pm

Hi heyoka05,

According to the guide at Bleeping Computer there is no known method to decipher encrypted files other than by paying the ransom.
http://www.bleepingcomputer.com/virus-removal/cryptowall-ransomware-information

This link is to the program that should list all your encrypted files.
http://www.bleepingcomputer.com/download/listcwall/

They will be unusable in their current format. Again, the only way to recover them would be from a backup or pay the ransom.
RSA encryption is most difficult to say the least.

I can help remove any remnant of the infection. Post back with what you would like to do.

wbg
wannabeageek
MRU Master
MRU Master
 
Posts: 1871
Joined: November 23rd, 2009, 10:21 pm
Location: California

Re: infected with the cryptowall

Unread postby heyoka05 » September 27th, 2014, 10:52 pm

Thanks for the reply
I finally had time this morning to do a bit of research and found these same links
Funny thing, and you may have more insight as to why this is, but ListCWall comes back
with 0 encrypted file .........although it's obvious that a large number of them are indeed
as I can no longer open them
I've also install CryptoPrevent which supposedly eliminates the access for this type of exploit


But yes , I would most appreciate help removing any remaining pieces
Thanks so much for your time and trouble
heyoka05
Regular Member
 
Posts: 72
Joined: July 11th, 2007, 11:48 am

Re: infected with the cryptowall

Unread postby wannabeageek » September 27th, 2014, 11:16 pm

Hello heyoka05, and Welcome to MalWare Removal forums!

My name is wannabeageek and I'll be helping you with any malware problems.

Before we begin, please read and follow these important guidelines, so things will proceed smoothly.
  1. The instructions being given are for YOUR computer and system only!
    Using these instructions on a different computer can cause damage to that computer and possibly render it inoperable!
  2. You must have Administrator rights, permissions for this computer.
  3. DO NOT run any other fix or removal tools unless instructed to do so!
  4. DO NOT install any other software (or hardware) during the cleaning process. This adds more items to be researched.
  5. Only post your problem at (1) one help site. Applying fixes from multiple help sites can cause problems.
  6. Print each set of instructions if possible - your Internet connection will not be available during some fix processes.
  7. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
  8. Only reply to this thread, do not start another one. Please, continue responding, until I give you the "All Clean!" :cheers:

    Absence of symptoms does not mean that everything is clear.

I am currently reviewing your logs and will return, as soon as possible, with additional instructions. In the meantime...

Note: If you haven't done so already, please read this topic ALL USERS OF THIS FORUM MUST READ THIS FIRST where the conditions for receiving help here are explained.

Please read all instructions carefully before executing and perform the steps, in the order given.
lf you have any questions or problems executing these instructions, <<STOP>> do not proceed, post back with the question or problem.

Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Because of this, I advise you to backup any personal files and folders before you start



Step 1.
AdwCleaner Download and Run

Click on this link to download : ADWCleaner
Click on the Download Now button and save it to your desktop.

NOTE: If using Internet Explorer and you get an alert that stops the program downloading click on Tools > Smartscreen Filter > Turn off Smartscreen Filter then click on OK in the box that opens. Then click on the link again.

Close your browser and double click on this icon on your desktop:

Image

You will then see the screen below. Click on the Scan button (as indicated), accept any prompts that appear and allow it to run.
It may take several minutes to complete. When it is done click on the Clean button, accept any prompts that appear and allow the system to reboot.
You will then be presented with the report. Copy & Paste it into your next post.

Image

Please post the content of the C:\AdwCleaner[S?].txt logfile in your next reply.



Step 2.
Junkware Removal Tool
  • Please download and run the following program: JRT.exe
  • Right-click JRT.exe and select " Run as administrator " to run it.
  • When the program is finished running, post the log JRT.txt in your next reply.





Step 3.
FRST - Farbar Recovery Scanner Tool for Vista-W7 Image

Please download FRST64.exe ... by Farbar. Save it to your desktop.

  1. Right click on FRST64.exe select "Run As Administrator" to run it. If prompted by UAC, please allow it. When the tool opens click Yes to disclaimer.
  2. Press Scan button. ... A log will be created FRST.txt in the same directory the tool is run.
  3. Please copy/paste FRST.txt it to your reply.
    The first time the tool is run, it makes also another log... Addition.txt.
  4. Please copy/paste Addition.txt in your reply.




What I need back from you:
Post each separately.
  1. Contents of C:\AdwCleaner[S?].txt
  2. Contents of JRT.txt
  3. Contents of FRST.txt
  4. Contents of Addition.txt
  5. Any problem executing the instructions?
Thanks,
wbg
wannabeageek
MRU Master
MRU Master
 
Posts: 1871
Joined: November 23rd, 2009, 10:21 pm
Location: California

Re: infected with the cryptowall

Unread postby heyoka05 » September 29th, 2014, 9:40 pm

# AdwCleaner v3.310 - Report created 29/09/2014 at 21:05:33
# Updated 12/09/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : bigdog - BIGDOG-HP
# Running from : C:\Users\bigdog\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalMediaPlayer
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\FinalMediaPlayer
Folder Deleted : C:\Users\bigdog\AppData\Local\Conduit
Folder Deleted : C:\Users\bigdog\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\bigdog\AppData\Roaming\FinalMediaPlayer
Folder Deleted : C:\Users\Guest\AppData\LocalLow\Conduit
File Deleted : C:\Users\bigdog\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\FinalMediaPlayer.lnk
File Deleted : C:\Users\bigdog\AppData\Roaming\Mozilla\Firefox\Profiles\xf2x1qqs.default\user.js

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\RegistryHelper.DLL
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1060933
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{544C2426-48FD-4C40-AE3B-31257FF334D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1917AB4C-E2E9-42AE-A51E-B5750F160BFB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A4341726-E922-47BB-86A6-23F4F4F67342}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A1CCCE0D-AE21-42A2-BE58-8E6109410995}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFCB3198-32F3-4E8B-9539-4324694ED663}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B887CA3B-D82B-4A01-AD29-E97444D01CE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FFCB3198-32F3-4E8B-9539-4324694ED663}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FFCB3198-32F3-4E8B-9539-4324694ED663}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFB904C4-C255-4540-B97E-A75A34F1FFB0}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{1917AB4C-E2E9-42AE-A51E-B5750F160BFB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{A4341726-E922-47BB-86A6-23F4F4F67342}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{FFCB3198-32F3-4E8B-9539-4324694ED663}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B887CA3B-D82B-4A01-AD29-E97444D01CE6}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED663}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Deleted : HKCU\Software\Ask&Record
Key Deleted : HKCU\Software\Bitberry
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\FileTypeAssistant
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\Freeze.com
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FinalMediaPlayer_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{021C6667-63D3-4416-B537-865E77F4DF4F}
Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17280


-\\ Mozilla Firefox v21.0 (en-US)

[ File : C:\Users\bigdog\AppData\Roaming\Mozilla\Firefox\Profiles\xf2x1qqs.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [6219 octets] - [29/09/2014 21:03:07]
AdwCleaner[S0].txt - [5656 octets] - [29/09/2014 21:05:33]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5716 octets] ##########
heyoka05
Regular Member
 
Posts: 72
Joined: July 11th, 2007, 11:48 am

Re: infected with the cryptowall

Unread postby heyoka05 » September 29th, 2014, 9:43 pm

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.2.3 (09.27.2014:1)
OS: Windows 7 Home Premium x64
Ran by bigdog on Mon 09/29/2014 at 21:10:57.73
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0004713C-C7F2-4F3F-9A85-C66B3705A57D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{006A9F46-43E4-40E4-A418-D72026B1974C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{00A2D655-9C59-4122-82B6-3D2674405E2E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{00B4E511-499E-4E88-BCC4-6B00AD606E4D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{00B97DE4-4A9D-4906-B587-25F904249186}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{00E73CF1-1E0A-4CAD-A561-223452127999}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{016E07F3-A399-4AE3-9A5F-EDFC5CD0CA84}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{01817B72-D623-49DA-9386-2C8FE45123CD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{018F6916-2526-4C57-BED5-785EE0709F53}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{01E20ED4-2960-4429-81CB-4656E148950B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0308958E-7DF8-4BE8-ADD6-D510764224DF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{030DE073-98CD-4F85-86E0-45130FF863E1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{032474BF-DFC0-44CE-B50D-435573A14A88}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{035AC8B1-FAF1-4EFC-B7C1-6B6044CB35D1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{035FFFD8-3132-48B9-AF0F-75B9627F5EF0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{03880EEA-5720-4D1E-B811-12836FD87C38}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{038E0965-B110-47D8-AF22-D3E40322439E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{03B1FA4E-C9BC-4916-AACB-F9F37733BD40}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{042163C7-6A59-44A8-998E-352DAD507C3E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{042DA16B-17F4-44FE-8DDC-7C2616B615C8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{04360A99-0633-40C5-8487-CA45DA184AFD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{04450388-7AED-46A4-8264-290902E4747B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{04F709F3-9B8C-4E68-B810-C7117DE962A5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{053493CC-98BB-4269-8B37-E15B03C8EE7C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{053D5A35-01CE-41FF-980A-E731673D0A0C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{05491436-313A-4521-A573-1F5361C0F275}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{05DB7DDF-A6C4-4352-9236-170897A034C9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{05F1F1A2-A7E4-4563-B226-57C32393B1CE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{06207DB4-1BFD-4CED-BD44-A9C6306BCA34}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0681D562-7026-43A6-BB92-61800C102BF9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{06929AD4-06D0-48D7-9FFF-5070F486BFE0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{06D18D0F-CC37-4094-A4B8-58F7D0630BED}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{06D73440-F4B7-4672-8497-0648E4087D6B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{07048E00-301D-4375-8A5A-1BCF119420C6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{07147C38-7595-44A6-BB34-349936A6AAA4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0743C652-FC79-46C8-BD00-8F5AE3CA5A15}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0766E45C-6090-4AA3-857E-48C6005CB5F5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0773F602-8590-45C9-83F6-EFBE797691BE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{081CE13E-EEB8-4C9C-9267-E733264CAE30}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{088D14B4-260F-43EB-A390-A949D147D9AD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{08B7406E-B937-4273-9AF1-DDBB0C46EC17}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{08E7B3F4-0D9A-4C83-9B1C-4E3CCDA25DB3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{09447DA0-3BFC-4997-8422-CC9720BC7F61}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0956BEC9-2248-4CD1-8BB6-3532F6E7A120}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0998B809-C69D-4CDD-9BDE-707E8A47F184}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0999CDED-748D-4562-8F79-17C31019DAD0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{09A496FE-37F1-4EB0-908F-2B0C693E21D3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0A10C5A3-B43C-4240-A41B-CF88A77F9ABF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0A1CA452-9870-49EF-98DF-134E2767F637}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0B408006-51A5-47BB-A716-CF9BC5984158}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0B4E9829-626D-454C-95DA-11713D27C1AB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0B624497-DA67-4C50-880A-63D121ABF69F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0B83AAA0-56C2-44F8-BCB2-EEA1D5A519DD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0CDAE809-F582-40BF-B6C4-70D488A20490}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0D325D2F-3EA0-4AA8-AE71-456D446FE04E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0D66C486-A2DA-4750-A11C-591C70CCB939}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0E3DB14B-12CB-4DB6-9AAD-8CEBEB5DD6DA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0E61D6FE-EFB1-4777-ADBD-B6621E4821E5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0E9E4484-3F7B-4B8A-B291-0F4034F60247}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0EE1D84E-E7E0-42EE-9DE9-1603B4CF655E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0F2F52CE-5C7A-4C18-94A0-E55B16ED8C35}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0F7730EE-2BF3-4173-87F8-8D620FBD7CE3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0F7B16BF-8CAA-403B-ACBE-8EFCE2CAD6AB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0F85CC97-6B96-482D-89ED-70191FC4BF59}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{0FC18072-A14A-4012-B9A8-360360C67318}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{10290132-2862-44BE-A26D-36E93F1C05ED}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1094E49F-F4AF-416A-A9BD-67298287E88F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{10BE4F0B-7D47-4C60-8A25-241FB6F2AA4C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{111ACA5C-C18E-4034-86FD-982711AAC380}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1130C325-E477-4DF4-9554-67D3E7881210}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{114D1B8C-1145-423B-BA4D-14E511CA99F9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{11C63959-86D9-4102-B16F-D026824540EB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{11DEFAAA-1859-4F3E-AF2B-34C0D4916C8B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{121F4A00-E955-483C-ACB2-B11C7D1AFA0F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{12889C53-09D8-4CA3-924F-94E65089886A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{12B2FF49-9815-4DA2-9857-5916D05B48B2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{12FE8F65-529E-404E-90FB-C0FE642A33CE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{135127F7-92DD-46D0-ABD4-B1A35B9E0F05}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{135A5F9B-AF65-4F78-9300-58433310573C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{13743FED-CA63-499D-9C23-DAA0F66241EC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1390D06D-86C5-4874-856F-A01A43E13331}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{13912538-32C1-4A0A-BABC-0F7FD55A6C58}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{13943C03-1073-415D-808B-34BED2F24049}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{14358CDF-4C7D-4085-B973-A0D5013CCE06}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{148219DB-9650-4C3D-8452-E2FA562D7D41}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{14940CB2-A24E-433D-948E-90820ADA3915}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{149728D4-AA79-487E-9E22-DDEDD6B215F8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{149B48DD-EA0D-4A0A-851F-76587C6D65D4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{14E20957-0192-42E4-8EDB-445272DBDED0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{15276265-8CCE-4F7B-A6C6-F38C79910259}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{153A9164-2A88-4C5F-9D4A-1605A6B8BFAF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{154540FF-90F9-482B-B943-B2B7D37F9091}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1582F59A-7BEB-4D4A-8E70-3B201E486962}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1599CB81-F57D-49FC-ADFA-93F80BB1EF72}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{15C52053-8777-47CB-A9D0-9577DDF0D3D7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{15FBB184-F420-43C4-A6A8-C74FB5D56C87}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{160D611E-2DEC-4191-89FB-4AB72D6B1AE1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1614A8A7-679A-4699-A067-C03A2B28C7B3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{161F31F8-32BC-4588-AD12-14B32E5D2039}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{166BBA4C-176D-4308-A40D-7088DCF6663D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{167F074E-3BA8-495E-9DAC-BCF83089411F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{168750E9-46D1-42E0-BD21-AED2A49DCDC2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{16B6DA95-6381-409E-B78F-477E4A370146}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{16EAA496-FC02-4C9C-865A-956D2BE024E5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{17088A4D-3279-4D6B-9A50-E845EDB9B040}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{180A2588-9BC4-462B-B9D4-2F811A3AC4CA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1847F9B8-CB57-4203-94E3-66505CC7BCAA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{187A8EBA-D65B-49C7-B39C-C50C43709F07}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{18B45DB7-094B-4076-9E86-B52BFF092CE4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{18DDE10C-6CD0-4820-8DB5-037DB2E30CF3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{18E6147D-4E83-44AB-B12B-598B5C8E4FD0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{192F7ED9-59DA-44BE-B171-044B6BC43EAC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{198FD057-0C0F-4165-AA82-ACD0CBD153E4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1A107103-D96A-4184-AF75-ED13FA8D352A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1A3B87A8-39BF-4E93-BB9B-ACADC666400F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1A40B3DC-8B0E-4D15-A0CF-84AA091F9253}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1A80786A-C710-436B-A77B-DDB1CF80D9F5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1AB00FF5-3755-4D7A-838D-690364D66D90}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1B7C49E4-2980-4CF1-BDB0-9BE9A6138AB6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1BD157C5-2A47-4D9A-A341-07CCEB044F45}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1C11DA3B-3D61-4ED6-ADB0-946E0A4D9259}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1C1E9E21-E69D-4494-8782-35341EFAC6C6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1CD09232-2D64-4AF9-8356-72B15B9C78AA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1CED13C4-0EB7-4AE2-8EAD-4F1606B329A2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1D6F351E-CCFF-4840-A7FA-BDBC7596AF7A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1DFF3EA8-488C-4F80-922A-82C2342AA736}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1E211ABE-00CE-44F3-9A70-8B8335AB5E50}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1E3E6433-AE6A-406B-9035-AD759BC8B7B6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1E50FBAD-9971-43A3-A347-A956D9C7278C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1E55021C-285C-4140-9306-2C2F82E7A40A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1F1076F8-A034-4006-A53C-D3E711192E40}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1F2FAE42-0FDF-4D2F-B2E0-1B78CEFD7A8B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1F5CC9B6-6EBB-452A-A964-91229302D082}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1F7B6B8C-BFF7-4F1C-9C14-28AC74A5AFB9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1FA97CE9-2058-4B0C-8ED2-D0F17BEB70A6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{1FD7F4AD-BA1D-4A0C-B917-FF7FEB66FCB0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2057B6F4-1A2C-46D4-B1A2-CF8A6A639C44}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2086B268-2857-4DBC-965B-089789C8606E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{209FA2D1-85F4-4943-A78F-4E057264415D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{20F0D40B-9D10-411A-874E-0CAC59153A0F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{21161E13-9D90-48D4-B965-8914913FC130}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{211AFB43-DF7B-49FD-AB67-A04FCF726749}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{213B9108-F26C-4D8D-94C7-CD8B71E02803}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{21A8B391-8771-4476-80E5-CCB75EE6CDDF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{21E60978-C48E-47B9-AA86-0ADE02844B98}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{21FD939B-5EF7-4788-B607-65C7B48D2454}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{222A6D04-49E5-4088-A1B0-2CF9A6D53A25}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2286DA52-14F7-4E16-BD58-C8DB30EB9BFE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{22CB4C34-250C-4C52-9E2C-A7F539F698BC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{22DB26FE-B61F-48BF-A3CA-297F28E3593A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{22E30DCB-1C8D-464B-B94B-24BD4F6D513C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{235B704B-3736-413A-84E1-2A09E7873039}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{237D3852-BEA8-4C3A-8563-75031617380A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{23C3A474-08BC-471C-8423-142803373B6D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{247116A3-ED05-417D-8294-2DCAB5EEEC5E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{24A46DCA-25CC-4139-AB44-B7584D0630BC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{24EC822B-B3D5-4635-8B5F-C4690DEDCA1C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{25068DFB-982B-42E6-B6A7-8273AF979CAB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2573FE6E-9ED8-45AE-A7EC-8C6077CED5BE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{25840CFC-B2CE-4B03-BB12-67C5B69383EE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{25EC59F7-835C-4306-8021-3C8D2000F168}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2674D5A5-CDAB-4973-B4F9-6B8FC2DB122A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{26E24527-83B1-4045-8594-78773BF0FC9B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{271409C1-D2CD-4ACC-B6A8-E19B979D626A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{275EDA60-A779-43FC-8585-8C8DB4737703}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{279C677A-2E2F-41BC-A655-3C7A8BD52EB5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{27ACD850-9E88-4EEC-8E4F-E7D87877CFE8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2835FCE4-40D8-40F4-ABC5-CFF1E8CE9E2A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{28C6C517-4643-4D0B-B32C-DBD375CBC7CF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2900D63E-30EC-4B9B-B533-A9C14D8835B6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{291E1943-B778-40CB-B5D9-73D2ED9C3E30}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{29292B08-2E9C-48D2-9FD0-54BBAB459373}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2930F2AF-50A4-485A-AE42-D457B65F3564}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{29C43805-2E7D-42AB-88F1-5EEA9FC3E012}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2A46F0BB-ADCC-43B2-BA06-6A54EFB0EE78}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2A527CA9-7A6D-4A09-93B6-5845B7F71453}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2A536AE6-006A-4E3B-BE62-A2292F0F51BD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2A92A81A-5201-4C94-9281-791823127AE2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2AE34B53-C8B3-4752-ABC4-09C3DA5DEC1E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2AF11232-F9FF-441E-8417-0FD46145599A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2B5B8FBD-32A7-4D4F-A329-0250D3F09F0D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2BD1691D-5792-4B78-9DA7-EBE25C10A061}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2BD44FC1-6FED-4215-AEF6-E3916FBCA8C0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2C14AA1B-EFFC-4BCB-9D26-E93B41CE4CEF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2C1CB109-4BED-4CEA-80F8-6A8D822A2A67}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2CB04E78-8690-4BAB-A3B3-D1BA8AB7C50A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2CCE0EEC-1C50-4023-96FF-D4EBAC8406CC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2CEB7F32-AB93-43B7-8E69-45B5644D2DF1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2CEBC8E2-6670-46C1-A117-134ACDDE9EA1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2D69AFF9-C010-40A6-9255-5D928675DDDF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2D8DAF1C-3A50-49D8-97E6-8083D1DFFB1D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2D920965-FED1-445E-AD83-046644577730}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2E2C74DE-75BD-4583-92FD-36FA9F69EC64}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2E96CF7D-FEBA-461A-9896-A917A9023C44}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2E9C08C0-0450-49FC-85F8-3BFE0D1114B1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2ED4D4DB-299B-4785-B6CA-FC293BB959E1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2EF67CFF-502E-4567-979C-142C3B088F10}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2F0E59FE-1290-46E6-9962-7413E4F3C76A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2F119F7A-17F8-455B-8ECE-7BB9B1E1AF5D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2F2A20E5-7E12-4AFD-802F-44693EA75E75}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2F64B94D-7469-4F66-8860-CFA637ACA19F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2F8381B2-96D7-4EAC-8373-46B6409BDA10}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{2FD6674B-2731-4B3B-A5B3-B5906457A3B6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{302B0E6F-8972-4174-969A-60FDD5F61503}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{306BAF98-B4A7-4221-8C73-1FF7C3211808}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3074CD4B-577B-41CA-A2BE-59051594085C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{30BADD2D-4FE6-402C-83E8-D2B54491F1F9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3186657A-1C9F-4751-B7AD-251802409957}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{31DD33AC-93F6-4151-90F7-886EDACF4E87}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{32691C9F-01A8-4F49-A549-942BE385465E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{329619B4-DEFD-4A78-A7DF-FB5D3AED5AFA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{32BB15A5-2002-4D7A-8BAB-0B3DFF7E9C09}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{32D4FA52-1F73-400E-A8CA-266C74E54698}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{338DD834-4B17-4C3E-BED0-7792089359D5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{340F16FB-94BA-42E8-87B1-364695A100B6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{341AFBB1-4B36-4C43-9793-F8EF926E83AA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{34AA4A23-0E17-4BCF-9EC6-D9ED72CBDB2E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{34F9E462-F2E4-47B6-B31A-94A5BD222586}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3533CB8B-FA4F-4B97-9A2B-AD6E12BB18D8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{357E51C4-7419-4338-9A4B-48D71BE91A89}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{35D14026-6341-41A2-9B77-2E2A9BE5B4B9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3611C7C7-02E5-41D4-8FC6-F9E0A05E4383}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{361F20AD-701E-4704-A9CB-0ED22C323DCB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3635DAE2-BF92-4B22-8147-44B432D63A3E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{36961268-66DC-4250-B9B5-C70E481B288F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{36A4F3D4-F95F-422A-AD67-94F827014D85}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{36AE158B-5EFC-452B-991C-6F2FBA42946D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3707A47B-BA94-4EFF-B8C2-A57FAE6CF2E8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{372379CD-9DCC-4428-8F3F-3E472D21F52B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{37B9017D-3530-43AA-BCF4-F025DC802C2C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3815F800-895E-491C-8729-E1EEBB752DE1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{389ECC89-D296-4D6A-9E45-844A08ABE092}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{38AC43F0-7A70-4E9F-9B69-76F0071059F6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3917C64A-0A2C-45B5-A834-A40CC914CB8F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3931F702-899D-4DD4-83BE-0C00FF253322}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{394E8846-0FB1-490D-804A-FAD1BAEE268A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{399C1703-215A-41E6-8DB7-3AEA6904DDC9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{39AEE831-1EE0-4E62-90B3-31098AA0B648}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{39F8DF77-1E47-422F-8B91-F169D57C49C8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3A07D5C1-B295-4D00-8962-B81AA4A143B4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3A1D8280-17D7-4AA7-8D28-57A90A5FB190}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3A356FBD-62A9-460E-A957-C12930816370}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3A64AAB9-06F8-4A7C-A0FC-FBAC8454A42A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3A79A1A4-441C-4AD3-85CB-E598C07B85DB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3AAE0888-FC14-4069-BDBB-9ED534A58978}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3B7E4C65-975F-472F-A726-7E1850B98B53}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3C0EFCDF-D6E3-4C2F-AB76-1FBB35828386}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3C5C53F5-89ED-4931-8591-B230C6A25817}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3D498A0A-30DA-49F2-9CB2-837D6AAD50E5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3D68F3B1-E3FD-4C2F-8D3C-50FD4C937B83}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3D82775A-882D-42EF-9D75-4F4271FB62CC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3E4AAC3D-DC96-4043-A99C-F1AF1CD6E36D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3EB14783-B80D-46EF-A2BE-3086AD78D2F3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3EB1F749-82F9-4359-A037-968601B7A458}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3F579E14-2441-4F78-AAA6-DBA75515D4A4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{3FCE4CF1-D59B-40F0-AC5F-82F685414294}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4039F2AF-F94E-4F7C-A008-56EE55492DE2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{407CEFB7-7DAF-4A57-841A-B0BFC72BA36F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{40A46D85-382F-4BAD-B9A4-FA82F680AA20}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{412E28F5-BF62-449E-B311-971DFA34715B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4130CB94-E74F-4F3C-84B8-E12ADDA65F25}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4198D53F-4378-4C45-ACD7-0F9EFEDA9596}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{41FC1A99-8148-4859-8F86-05DE70A08879}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{41FC929C-0E98-4F28-A67C-E7402D87DAAB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4267C0B4-3D8D-4C1C-8BD1-67492FB1EA32}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{434ECC1E-2310-43BD-B1C7-362D9B2027D3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{43D38C63-00FF-40E0-A7D2-5E0A56D44EF7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4437F893-D502-4F07-BCA4-49351470B014}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{44834D6D-97D1-4253-816A-1B334AFD6776}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{44970A4C-A5C9-4E41-AD34-A6DF04F6F18F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{44A549D9-7B2B-455D-BC42-C38058F19871}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{44B3805A-BC94-471E-AF84-496338AA3316}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{44E2487E-761F-4331-B44A-56D70AE47923}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{455588D9-6CCC-42B0-B49E-51438A97043A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{45840B12-0DB9-423D-9020-B530C9308447}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{45DE8676-5129-4E2C-99F4-37765751A042}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{460CB90B-97F8-4503-80C3-577F57015224}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{464BD2AE-762A-42FF-B6BC-7B9E8E20ECDC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4661E97A-FA96-4D40-8FD6-1CC9A348C861}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{46F23B01-85F4-4894-9131-CD1EC05C739B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4703A44C-4559-4BF5-9337-12DC714217B5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4772F24F-24C4-44E1-99EB-EB92EDAF5BE5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4873AAF1-408B-4A05-B156-639F29F2DA36}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{48955545-4BE6-488F-98A4-01596B7D4E30}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{49359968-273D-45C2-BEB7-1C96B8EF1641}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{496637C5-3906-42CE-8E35-DDBE55C508B9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4A0EEF6D-BE31-44A9-B57B-6F7036F68A73}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4A424B3F-9276-4511-BBED-E193F26D5BDE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4AC7D784-5675-434D-A5D0-D1730363D751}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4AE2F069-9517-4654-B362-7B7D7AF1C340}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4B241FAF-5DB4-4B69-9958-244CC659BBC5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4B34C41A-17E4-48EF-80F7-BC8B67AEC73D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4BC441BA-19E6-425F-88BC-5E50F7EE230C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4C415890-D798-44FE-B237-249A355CE0B5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4C5FC1AC-B2EF-4322-83A8-C4F1DE2EBD8B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4D06D6B0-9FD2-4CE2-858C-7F42C7AB7A1F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4D5D5269-0D1E-4160-BDBB-5A756B6C96AD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4D71C591-D8FC-48AA-AA01-DBD398822E8F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4E01E2EB-739D-4704-BE1B-80FC87894076}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4E12656B-FD60-44A3-BB17-47DEA573AA94}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4E185AEA-0D01-4D6A-9FAF-A1ABDC744F70}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4F02AACF-C434-4468-A9CC-8F3CA29BD274}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4F3EE4A1-21E4-473F-9F7B-44285FD631B0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{4F49D91A-D032-47CC-B30D-7527DC8F6E74}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{501D4EF0-FD2C-4EA6-9D97-4585A22DF7EC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{50460F82-49B7-4083-8414-D85FE954E81A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{50C0A8AC-5799-4A39-BBC2-53A893D77948}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{50FF9951-DF56-4B6A-89C2-DA0DB6003535}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{511EE828-F089-460C-857C-2516392825CC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5129E2DA-B4C0-4B1E-A86D-0D141F76111C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{514E55DC-28C1-4E61-8E1B-0E78412D1ECB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5173C0A3-F169-41FC-B564-72EA85A90EDA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{51AED687-5232-495C-A918-AF83B1448F9E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5250D17B-24CB-4667-837F-F1A0D251824B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{52D8AEB2-D9F8-4BD2-92A9-7DF189CC216B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{52ED995A-1604-4F6A-818F-FA511E163BBA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5380ACA8-6DF9-425C-B8FB-F23620C1720E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{538943DF-D731-4928-84C4-F4B3B9915663}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{54026E36-1107-4A55-B6F3-2B17004C9882}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5421E6BD-971C-42DC-8AB9-334952717ED6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{54294A47-C9F3-44E3-9030-AE1A354AF2F4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{54F4EBF7-320E-4891-A3B4-6EAE06669D76}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{557C63DC-4DB6-4FD1-81C6-9408D2F9C244}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{557FDB0B-4308-43D1-8922-C8046A423DF7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{558E1C57-66DD-42AF-9F23-704249146F20}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{559D9748-36D8-47B8-9C86-0497369273CB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{55E8FC23-7B55-4E63-8614-FCCF0AC85CD3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{562A07C5-9877-4AD6-B048-417DFA150928}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{567CD7CB-A3F5-4AC2-A9A0-24E827FDB056}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{56D0DCE8-9F41-41EA-964D-49E4018B6B3E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{57BEB87A-BA32-4463-B12A-E3C69DB321DE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{57F47C13-B0DE-443B-AE71-B649BFC74D03}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{58178FBE-27DE-4073-BE7C-978BBAC70125}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{581D6732-0A4B-472C-BD12-364867AF69F4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{58BA954B-4582-4473-B097-80559AADF392}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{58DBC360-4547-45A0-8355-7F2E43E49E80}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{58ED1E65-C5BC-4354-B58B-D43F9FD2DE38}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5939E7B7-D8E4-4D23-905A-49B38A65F88E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5A1F5582-CA3C-43A6-A07B-AE7AF8044398}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5A76C00E-4657-42B6-AF89-0F1772BDA903}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5ADC4842-3083-4ED2-8BCA-3CE6C158FD86}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5ADF6A79-826C-4EB8-A7C2-735655C3D335}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5B215959-A912-4A71-8E49-9ABE2A3D87D2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5B247CDB-2A5F-4F66-B782-B2E05F097FAC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5B529619-8376-4DB8-A08A-3B89DD95CA77}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5BF528AE-E4F6-498F-A8AD-CAA17D89F9B9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5C2A4BA9-C3FF-4C01-A0C2-A8ED2CAE25A9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5C304BAC-DDF8-4E6B-9D2C-35B7C2B7891B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5C67F052-ABDD-4E19-9F2F-BD9C6C6B91B5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5CADB17F-3F2A-4E25-B1ED-10DF1E93AF65}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5CE7A5DA-B52C-4AF7-ACD1-E3336D980440}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5D07DE64-0817-4C31-B43E-B8A8D344CF90}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5DCEF626-1A69-4477-8CE9-10528E48D92E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5DE349F4-02B2-4D87-8CF0-A9F4C04BA8FA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5E465C48-28ED-46E9-9C0D-05F3EFFA518C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5E4FA72F-A4B6-4E12-B47B-9E6A67C22B61}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5E7E2A6F-36A6-4E37-97F7-4DEB4DDBC8A3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5ECD7076-8A8A-4FA9-AFA3-D947BD236F0A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5EF241E6-4B39-47BB-9454-F45789B744A4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5EF59684-84C9-4877-A277-4BF5075E3C6F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5EF992DC-2EA9-4264-A336-1FA40FCCB981}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5F08C76E-493C-4F2D-A2EC-B727B65756FB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5F2C4567-3EA9-4E3C-97C6-551C50BA7E9E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{5F76B7FA-B0D2-4890-B128-1E83FA0F6216}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{60E5F324-C6DD-423C-9827-0B3CB9294D51}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6106DAD9-4490-4DC5-A75C-7498ED314E6E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6133566B-A161-48DD-A8E3-288EE69E265F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{614C9DC0-D725-4CC8-AF0D-1C6F7DA64FCA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{618ACAD8-0564-4425-A0F7-9D30A7EB15B5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{61A1B373-916C-4ECB-B48F-B3ECE67B5C4A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6267C043-18AA-45E7-92FE-B645DB0A338A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{62AC2AFF-AA57-4E7B-BECA-33CDD251155B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{62DB6C5E-AD44-4D95-BD8E-6C83D2F338B6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{64737670-1236-49C5-B65D-9BFC4F0F28C4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{64B353B4-535F-4040-8CF3-DB3F082454CB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{65202D42-D351-451A-A1D8-FB55D6EEF6CE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{65824E34-87C5-4F5C-B072-0ED8FD585A79}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{65B308CC-7C61-4FF3-8989-FD51E627F6AB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{65CA0138-5A39-4FBE-8C4A-A175309728F0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{65D0565B-44E4-40AD-80EF-4FBA26DD3EEC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{65F4689A-4F32-468F-9E17-2245DCC3B073}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6645CD56-4B1A-41CD-BBCD-5047F009B884}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{666CAAD3-5F9D-47BA-888C-8CEFE9CFEDCA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{66C6DE6D-DC57-4138-B712-4E2B46DA41A0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{673C53D7-611D-4BC3-BA95-8971CE252DA4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{67606018-78FC-4096-A34F-4206EF5C9E0E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6774023D-829D-4F98-B1CA-32C631252234}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{67AB95DD-7929-41D1-A1A0-0D8D9F4BA4DC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{67B65B3D-8B1A-4356-8B9E-A1BBBA5513C8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{680690B9-C0C9-4699-AF41-40E6862F2774}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{68295157-4438-4A30-955A-5B2D4C2D9280}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{68590171-85AE-446F-BF7B-4E2BB4E89C63}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{68966B17-323F-40CB-B779-19DCDDC2C883}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{68BE5D17-7F02-406B-9A2D-8989DFB22D50}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6923C15D-CC50-4562-8ED0-962FFFFFFFE2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6932C12D-B785-4E84-8200-40F89A0A58FF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{695F1765-6470-4120-B13D-97342A6263B9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{69CEA1C4-086A-4090-92EA-06F48F28E907}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6A7585EB-CC8B-4D61-99BB-661556CBF4F2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6AA92585-0AD9-4703-A1FB-5ADF0473521F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6B18E954-C8C4-4FAA-9447-C22CE2F23B3D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6B33E3D5-4082-490C-9287-8B4B7371870D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6B91985D-C296-435C-8F7E-B7178E15EF94}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6C974745-6466-4ED6-A0D4-76AB74B6636D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6D34336D-9A3A-4B66-9FC3-DF7412AC6AA0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6D68BF49-B48F-4E2E-9CC8-BE67BC0C1ED6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6E20D621-2CAC-4456-ACC5-5B63C8CC9CA0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6E269813-34C3-4E4F-9D33-7101660D7386}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6EDA9633-1D09-46D2-90B8-BE8ED8B7C397}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6FB60A2A-FEC8-4918-978C-824F807E2301}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{6FCB56A0-2D1B-4D9B-B4FE-FB2C43C4A265}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{700C9A8F-9981-4740-A184-DF62A259D6A4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{702CA267-D1BC-49CC-9CEA-211B599AE195}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7056DE2A-E435-4983-87BA-6BF6D8F8040C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7061A3FA-E152-4110-80A1-195FB6EAB6F5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7095CB58-E584-421D-BA0F-A9983A52EF50}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{70E64309-9076-4CA0-B21A-7D420DFDFF05}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{70F2F599-DC9E-40CA-AE02-FB5631F2B2BF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{70F5B94A-00C0-4FEF-AB73-7DF7916E5ACA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{70F7C027-83E3-4A98-B58F-BA259A409D50}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{70F87068-D458-47A9-BF6A-534AEB787225}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{70FC1F45-9111-47BF-9C00-4F26BDE4AAAE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{71708E17-F660-45AB-B82C-C0F65A7CE738}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7178101F-673C-438C-A524-B649F1FBC3CE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{72568630-8182-4C11-8FAC-0B730C1221D6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{727036F5-648A-4D1F-B449-6F1C94D9152D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{727C7182-EE7D-42A3-AFD8-F2ACFF5887DE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{72C702C0-C727-4209-B052-11FBB59F1FC3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{72F3202E-6568-4B19-B23D-9FCA56A7FF68}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{73157CFE-4F34-4225-8C88-ABDCCBFA5CF3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{73277B84-C93E-4813-9E51-931B5802C7D3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{73492972-4588-4766-9234-96856D300FA1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{739E8F3A-E5D7-430E-96B0-6EEC68B6F222}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{73D62CD9-685E-49C1-86D4-597249DD910C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{73E364C7-EC00-43A4-A959-5C3CF22DAF34}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{740A034E-B7B6-4C41-8131-0E796ECD0F1B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7432BBE2-5896-4870-A527-41B02D99ABAD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{74BC513C-71FD-4157-AC5F-E9D7BF6BCA4A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{74E0D5D5-8145-459F-BA5F-645B69CE1E89}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{74E3482D-551E-4B63-9514-BE2CCC415061}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7548D0EF-C376-444F-A715-C647482D0EBC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{757D3562-C510-43BA-8446-B4AF23709D5F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{75A49C5D-D182-4A70-BB3A-DB5D3C06D81B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7680280A-8964-496A-90CC-5CAFD69F6A1E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7692BD21-971C-4F8E-9E5F-E78EE3863C53}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7714F3F6-8B67-4ACB-A9F1-E96722A9FE4C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{771C1983-CA7C-4EB5-9043-204B522A345A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{773FBFAE-59DC-4A68-B4C6-0DE09E9CC5F5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{77488713-A618-47FE-AD36-415635D345EE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{77CC5B8B-2F47-46CC-8873-AE381AB445C0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{78222617-1CCB-4922-9FDE-7597A931DEC4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{78430C26-C515-496A-84CB-F6C387A56C36}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7856FB6A-5C5B-4D42-AC3D-494314F94191}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7987C521-6619-44F5-ADDC-611F64862F15}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{798F777C-A2A7-4B56-BCA2-C5EE48AAD6F7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7996CE9F-3618-4EB0-A133-4A741D576794}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{799F4EB7-A1E4-4C49-A460-578343391259}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{79DA9951-C37A-43D4-9063-4A0E39AC5EFB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{79DEDA8A-E136-4423-B8AC-07BDF40598B2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7A6DEFB6-DF14-401F-B73C-E975B9C32490}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7A70C69F-FCD5-445D-8A6C-2A7DC373A109}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7AB160BB-DD24-4102-BF5E-6D072541F9CA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7AD3F9B7-72DD-49F1-9DFE-D7A603CF8037}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7B4BC68B-7D01-4B58-837E-E59FB8960A7D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7BB1D271-DEAE-47A7-8F23-347A66C9B0B5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7BBF760F-4B7A-41EB-9BFA-60C55A0E0CA9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7C02CF1C-5C21-43FD-AB6A-1E84E217F9B4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7C1121FC-0C37-41F2-A83E-E107C10B3938}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7C31BFF7-D2B4-4FED-A3CF-06465E0252BB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7C7BB8C8-6B0F-4AA7-97C4-514F0BC6C704}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7CE3EBF2-64E5-40E0-85CE-D849C81E031B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7CEBDB19-E90B-426E-8D72-6EF20A391B55}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7CF3CC27-B2DC-4CA6-897A-904B574C2F26}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7D219D27-2C50-4B2C-A652-86E313DD8806}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7EB06820-720C-4F92-94F3-7B93BA7B44D3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7EBF0842-25E8-49E6-8F78-7546594D0E6E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7F05A9E7-3BC0-4025-8A9A-2A9652969E61}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7F99176E-2214-4C85-9CE5-330047E98E70}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7F9B7388-3561-4623-A32F-20CF2B1D174C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{7FAC3B5A-6AB4-450A-AE0B-B279133B51C3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{801AB805-0CD2-4E5E-A7A2-37DFFE2118C4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8046E717-79BA-44CE-B1B2-BFD04458A6EC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{815BDC83-D096-4F94-B50B-58B125567C4B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{818CC939-083A-49D9-B58D-590F6A77ED44}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{81A8F0C9-EB6D-4407-A356-E9BF1662F95A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{81C57D7B-92FA-4E9C-AAAA-DCC27B1202DA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{82174946-D46C-4BCC-8E3E-3FEA9C754E1B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8249641D-4DA0-4B86-86DA-D7E6ADE9E8AE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{824AB506-AE36-4727-876D-603DF188BFC5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{82A568DB-BA97-4D4D-9A29-F2878DFC870C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{82AAF697-F557-44A1-BB37-5FE1A74023D8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{82BDCB72-F676-4E05-B918-6DF088B552D5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{83887656-7B42-44FB-8192-2FD80AAFBAE9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{83BD9612-D118-4C0F-962D-FE4DDE0FE1C4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{84424FA4-2F40-4053-9EA6-88AE4656CC24}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{84997C7E-1FDB-455A-ABF1-69BD23C38644}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{84CF621B-6A20-45E8-8AB5-E2E3DBD0B96B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{85E1B1E7-E783-45E5-A4C3-50E1D109B121}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8641D154-2C1D-4B70-A68B-9FFF8097F9DE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8661C8D8-02EA-44FC-BBCE-432937F30C6F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{866972CC-662E-43E2-82D5-766DC73C8DE0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{866C97CB-7B2F-4C32-8AE7-C6CBED7C3052}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{868BAADA-8E9D-4D09-9DA3-81894D6CECC1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{86ACBA81-F049-4B03-A46B-5AB11F946F4B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{86E8CC50-230B-4B6A-8A8B-17AA5F78E94A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{876392AB-9408-4ECD-A86A-CBE4789C1E8D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8783A63B-BF38-41A9-854C-792EA09D4986}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{87E764D8-156F-4EC7-9588-2A7F2BEDAB42}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8803D73F-858D-457D-B63E-DDEBA5F014DF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{88680384-E1E7-4861-9B4A-02EA54B5AB2A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{88C02300-2B1F-4A60-8481-520D188B0C39}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{88D3385A-C93B-4384-8EE8-92767489EFB1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{894B05D6-EB8A-4640-989E-A42E91E23495}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{896C2B3B-2A79-49B5-8587-B453BA6FFAD4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{89BB331A-46F8-40DD-8C12-2FF6F653CC8B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8A24BA2E-8E40-45B9-AB43-37DF5C2B661B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8A30BEAF-85DD-4063-90CD-B546FC5D21CA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8AD55D38-D6B2-4862-B819-51D0FC718EC1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8AF9EEFA-5DEC-474C-BA4F-92AB63FC950B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8B2C355A-DAEA-4D97-9C15-1DA3BC5933B4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8B3CDF39-254A-4F9F-BEA2-45B803AAB747}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8B485687-AD35-41E3-B34E-1F60AF377E68}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8B4EA2F2-0083-4133-972D-8DE39B24C795}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8B621879-A322-4FE9-9F13-98129C1A0824}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8BBAF908-429E-4687-A937-42475438E018}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8BBDB803-A5E2-4A29-9433-C31BB7F5831C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8BEA35BB-BE7D-4F57-8C20-CFE94BB7E858}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8BFCE277-EC31-47E9-891A-FDE1F5B9B578}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8C1F7ACA-F911-46F4-A778-36C37149A917}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8C931CEC-5665-4F5B-ADA2-8F3B437E7E61}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8D25C104-4056-413E-A566-BA3D9379CCDA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8D2F3B01-5FB6-4AAE-9884-30F65DFAC5D9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8D7FE40F-943A-4C7B-8FBB-DFB13992F93D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8DD8C6BC-626C-4E1E-8F98-1DE7C51DDE7B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8E4BAD65-3CE9-4363-BDD1-4205E12339CE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8E94E678-1FC1-444A-98A5-174C043DF7C0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8F302407-7FEF-43A1-864B-CBE82DA54CFE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{8FDAF65F-0BD0-4F8F-B36B-D8EAE22EB87D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{90346A7F-E066-48E1-BCA6-E6F5B56DD28B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9038FD2F-816B-4EF3-9CDD-F76293516733}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{906B250A-5A08-4A18-959E-10530335430C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{90A207C0-477A-4B7E-BDCC-31752B0451D5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{90D93974-BC94-4AF1-97E8-A4C813136456}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{910FF26E-BF97-4815-9137-0BE0A534CFF5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{911EF9A2-B247-4513-BA5E-12A857EC7944}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{91F7184D-12EF-4115-A14F-E4AAC61A89A3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{91FA7436-C0AF-40C6-9024-F9513DE491B2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{92013085-C792-4CB6-A1C2-9F73743386A1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{92096026-F1E0-47D5-9E6D-EF99045C4E9B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{92F9AC21-C64C-4671-A32B-2D7489A7EDC8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{934B8522-89FB-44C5-9BE2-D38C2C6E3E78}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{93AE7CA2-298A-4D72-ABD3-B337248D5803}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{93BD2936-F8FA-4821-B81C-2BDF1E7470E0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{94276A22-DE55-45D2-B70A-84DBE4A54A90}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{942F7BA8-9004-44A1-8B7A-42A9BE23B4FC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{949B5756-E3A2-48B6-A26F-C2D5CABD1725}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{94A07689-35B3-4556-B1AD-3905EDCC4A60}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{94AEC911-BBE6-4E90-8D7A-F94C907F2351}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{94CAA147-70CF-43CA-946F-DE64E9AC6EE8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{94D67656-FFBD-4343-9D84-CEE986ED84F1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{95141A14-DAD5-439D-8348-89662BC41607}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{958705F0-F13F-4A61-8161-F443F9839E6E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9602274E-DB90-4C1D-9BCF-7B37F7E304B6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9630A155-A88B-4CD7-8DF9-B8F920AEDAE6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{96C3A647-3759-41C8-A6A5-AC5A1C32A19C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{972652DD-4276-4434-A479-44EC7213C712}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{972FE595-A468-4731-9851-64ECFA9208C1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{976354E2-B791-4A4B-AABC-E53AC6325A62}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{97B258D6-88A5-4BF6-A0BE-0E84967FD0CD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{97BF149A-7D5D-4A5A-BFE4-89E44142CA1D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{97C9E9FF-489A-4DFD-823C-0AEC6ABFCFC0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{97E11389-D0EA-40A6-8A20-E19C0B945386}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{98014F87-B064-41D7-956E-F9EECBCCB4FD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{99622E4F-32AC-4EEA-93E5-EFD66012DB3B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{99BEDAC4-5198-427E-B8E6-372F0F9B08D2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9A628FB7-F95D-49E8-BE27-AF5CEAB20C73}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9A91F67B-B6C2-4076-8FE5-AE7271A9E1EA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9AA0E762-C8AD-4095-A388-8F756035FEE4}
heyoka05
Regular Member
 
Posts: 72
Joined: July 11th, 2007, 11:48 am

Re: infected with the cryptowall

Unread postby heyoka05 » September 29th, 2014, 9:44 pm

Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9AB25F53-BF8A-4458-8B03-CA504E8737A1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9BEC53C0-0337-4123-BF59-B1E1C4D7F5AC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9C0F7050-53FD-4CF1-AA85-A2A3F2EB861F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9C1B6714-F389-428D-8F75-6F1B23734E43}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9CD97E2F-AA1B-4E41-96E3-44159FD75498}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9D57CA7F-1B08-4EC4-B6F6-BA7F43CECEEA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9D9759F0-6DC8-409C-BFDF-FAABD75BFB76}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9DCA372B-7E4B-4DB2-8157-423F95D76FFD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9DCDECB5-7C53-4F18-9708-530763B0A46C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9E3C7BD8-2EE4-44B5-B186-C14C53FD93D5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9E5B78E9-CF80-4628-AB79-63D35B0FE7D1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9F236702-98C9-4908-9F6F-5426C9980D8E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9F8479A6-E00A-41CD-9834-1A18D874994E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9FB7396A-95C4-4D4E-9736-3CBE32B4A9FB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{9FCFF99D-9151-44C9-B7B7-914419E00F2E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A025D631-5341-4D59-A8FD-BAD2E6D1BA75}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A160CA5B-4BD7-48AA-BB5B-D3DCB207E1D2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A1C7279A-F5AD-4BAF-A56D-7A57CAB1F209}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A1DDA95C-FA7F-4423-8B17-34F9B58F62CC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A1E895AA-8695-45A4-B71A-2F9F20146EF7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A1EC8B27-C8CA-4C51-91A2-CAE112B8A9FC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A1F5B097-0139-4468-9EB7-B10FC6BE3AA5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A325B4E9-5984-441E-BB07-36A3998D7CB9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A3276D7D-FF70-48F2-B4E3-CCF4E9A39129}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A34871CF-772D-49B6-98FB-4D90EEA10D27}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A3833B7F-5268-4FC2-B45C-7685E846DE29}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A3AB7359-04CB-4E47-96F3-42944CF49321}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A3B2D2DB-C330-445D-9508-4DAB9BAE3D8B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A3D64A15-C376-4EAC-A1A6-1FED07896401}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A3DE1BD8-CF77-49BC-B85D-AD043B02CB99}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A3F988DD-3A83-48BC-872E-184EC3FAEBD5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A4510693-CC53-4539-BA54-46726A1AF7C0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A4FEB312-3835-4D95-B2A5-13EE5110308C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A50BB9CE-52BF-4887-9D7E-000400BC0444}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A54D2C89-0854-4DEA-BAD2-A3EFA84890F1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A56A50BD-9A6D-42C7-8ED6-D92AFAD5F5F1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A5949994-D240-4550-9FF7-C9DAD960434B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A6370521-A493-441B-A497-F6A77A683F25}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A6462FA6-C7D8-4340-A7E1-5E3435AF40AF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A6CD1C52-C709-411C-B5EF-B6C8F52BCD0F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A6DA25FA-C135-4CE9-8893-BDDC014CDB0D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A6F476A4-62FC-4ED4-A253-F6832E71CDA7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A736EF68-5868-4C8A-A20B-96D82C92EFFA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A77AE0A6-AB89-4E84-9E66-B31916011417}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A7CC7F57-B20A-413F-9E72-E117CE47FFD8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A7DB0170-2FF0-4DD1-BF72-9BFA2C541678}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A80562FE-6584-40A0-8829-AD900852D2B6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A80D3BB4-567C-448B-A924-1DBC1499E24E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A881EA4A-4AB1-4B9F-9DBD-BFFD2668BB30}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A8966F81-7288-4FEF-83AB-9FD3F2ED27E3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A8C1F226-4F48-4F0C-A3CA-16B9C0A4DA83}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{A8CE1F3E-132C-42A6-8D1B-E02E437AE19D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AA3AA877-EF49-471E-B72E-9BA172C40A8A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AA3D1BA1-ACED-4EF0-A0D1-C0F6CBDC3373}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AAA1B6AD-9F91-46C4-B1D8-BF204766C94E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AAC45149-ED4C-4EB9-B1A4-1F4828C06DCE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AACF0295-83AC-4F73-958D-BC65518A2BD3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AB91C4C6-D24C-4AF3-B934-0120E0C9B3EF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{ABC36A16-1A40-4F33-9A8B-ED279A5F3C72}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AC1869CF-29C7-4C9D-9516-CF1E63FDE14D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AC24372E-E99D-40ED-BEC9-F6BFBADD26A7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AC967D8E-94FC-4AE7-A606-DE1AB502BC20}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{ACB0EF89-648C-4A90-9370-14B192505524}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{ACE59B5E-5F51-4563-9959-45E3888E770F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{ACFB6419-EB5F-4E81-8F3E-B2443194965B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AD4C7ABD-733F-4EFD-B093-1D054C03C1E5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{ADC42A62-E956-4C80-A14D-108FFBC165B7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AE036944-9F59-4C22-BC19-1D4F5ABCD1B8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AE12A3B5-64B6-4EA5-93B3-82B1707B7E9F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AE1CEC2D-EDA1-4554-B761-2C2A5B449F76}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AED8C7C5-06E9-4E73-8E45-55533E0E4FBF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AFD307AE-7113-4D38-AED7-481D3FA55A94}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AFDBF82D-F284-48C6-B2E4-455BD4E77A0F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{AFF911A8-7391-4BDA-8038-BE33C96A101C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B080A302-8EA1-4D07-AE53-623BC7B85C50}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B0BD3639-7FAC-46D2-98D7-F005DD1458D8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B0E27098-9EDF-43ED-B9F0-C0D99242BAD1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B1C3F723-7570-499E-9D12-2E7BBDB61B56}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B261BA90-82EF-43F0-89D4-7BB0423E6002}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B27C2623-68DB-4150-AD86-7B1669527A43}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B294F84A-3996-496C-92F8-972CF1CA9D56}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B296AD2B-9B82-4E91-A95C-6F46ACE289DB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B2A1C1CE-4185-4162-81A8-EEA364CE8270}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B311CB9F-71C8-4D56-8439-7B8CC9F1A25E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B37B9789-426F-468E-9F0B-E81158123750}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B38EC9C9-5604-414C-B998-0F37572E30F7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B3D56BD2-DE63-411F-AB03-19F72DA0C034}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B446325B-D2CB-4E40-B355-161A8A490C57}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B4474909-C8FB-43D9-A28E-4D8B1EDE5715}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B466B42D-E100-4E14-AFB5-94B46872E9C3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B4B8ABAD-CE45-4AF2-8296-905509A48E40}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B4E03C82-0DC1-40D3-93EC-0A19ED02A830}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B594443E-4789-487E-90E5-296ED504AC06}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B5F83757-77DF-401F-807A-819AC3F49E17}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B6BA5226-E4C5-4F1E-B44E-055E6EFB428B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B7711D86-C8B9-4616-BC52-2653E6A14DF5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B78CFAD0-CFF1-4B53-A14F-47979A0367D1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B7A41D4A-E452-4A92-939D-B8754A495F56}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B81547EE-67A1-4359-8ACE-A281927A5A85}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B869A14A-F4C4-4DC0-9319-38634FE210AE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B8B1C911-58A7-43FE-A507-75BBAD5FA6A0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B900463A-195A-4720-90CA-7B212B55725B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B91D90B5-994B-45D9-BB24-7FD193FF5D73}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B99D82C3-6E32-4A15-89C5-98AED4154CCD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{B9F9EBE4-6A6F-4172-A124-360DB0EB454F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BA28303B-B005-43E8-86EE-3FE41490939C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BA3CC313-4966-49EF-8E0A-D0968DA2A890}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BA82EE06-66F9-408A-A8EB-65A790A5B4CE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BAEDDDC8-0BFA-4732-B6C7-2D633155443D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BB03626C-3B25-47DE-B038-E8C7BCBED2F7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BB383FF6-03EF-4C20-B460-036A376C5D62}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BB45F17D-E971-44A2-A261-DB0F986EF150}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BBAC2FA9-A8D4-4491-B8AC-F9835C517381}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BBB96F96-1CFC-4433-932C-360081B15A0F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BC1FBCEB-87BF-4789-B43F-75E14878B497}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BC649E1B-CDDC-46C4-AB12-D71D94480E3D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BC936B82-A73A-4B4E-A713-D1AB242F420F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BCDDBEC1-BC79-4F18-8C19-7A1C9499AE30}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BD20AD53-F755-49C0-8E33-18F08A338193}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BD4B4DB9-7804-4AAB-8B9C-C4E5F69BBFDF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BDD38CB4-3DFF-43B7-BADA-D321D648E3D7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BE21198F-9C69-4D8C-B3C7-0ECC68409382}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BE25A2F9-C5B6-4C2F-B361-FD823E17A39C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BE3169D3-EBCD-4AE8-8201-741C455723AE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BE5DD0BB-1906-402E-A57F-D33C73CD1B3D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BE9A464C-C5D7-403F-9900-814CD5288F7C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BF0D85A8-80AE-4209-B3CE-88C772DABE7F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BF15C13D-D183-42EA-A1B1-70D16D7A03E9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BF6086D0-54EA-4B82-902C-C19221D44365}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BF8F0253-FAC1-4AAC-BBE5-FBB29FB4AB48}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BFAF24E1-987F-4546-AE02-8C6744541744}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{BFD23E3C-C0C2-4136-AEC8-BCA867AB3E5F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C00CA3FA-1D12-48F9-99F8-2BBAD6833C8B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C098B8D7-BAD5-4A68-B624-70DC501C795E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C09DCF2D-487C-4B4A-B60D-98BBCB8DDA9F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C0DD6446-615D-444A-A6C4-EB0754AE3C83}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C1252BE5-4E17-4DE0-9B96-9FE64AAD2149}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C15E2DF8-5F39-48EE-8E22-E6922B7915D0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C1843730-3492-4254-A859-6459D5E2408A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C18AA153-0830-4E6A-AB07-D8B826652E82}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C1AAACC0-9180-493A-B380-3E38F452BD8F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C1B3AB88-F589-4644-AF75-51E9E6458BC9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C1B625DE-8BE3-41A2-8997-FC240D6E3741}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C1D9B3AD-3F39-4B6C-82AA-0BDE53028E84}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C1DD0C5C-4663-40D5-A306-2543F4EA8ECC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C1E4F306-AD39-43D2-84AC-B48AF307C7A2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C241D900-9B35-4326-B32E-E09DBEC62AC9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C29BBF6C-1786-4F8C-8FC5-DB7C70ECE327}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C2ABFF58-E949-4087-87A2-02F1FC1DDCCA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C2B5EFA0-E28E-46D6-AEE3-80C1F751CE33}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C307E7E3-A77B-405D-8F56-B8080C70CFDA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C31E612A-7DDE-4140-91CF-EE887135D21B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C3452E73-55A1-4322-BE99-A047982463D9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C3502803-5ECE-4CE4-A63B-2E8C7D2AD18C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C3A42715-3021-41A7-AB7A-4321759030B1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C3E495CA-C52B-4165-AD75-E03418866E25}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C429F6CF-D6D6-4A57-81B8-703236B0A27B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C444398E-103C-4D0A-ACE0-84E21C5C30EE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C4689952-8202-4C29-ABCA-784C8E1690F6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C4C35594-6FB6-49BD-9B3E-EDC5806B5EE2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C514B9A9-26BC-4406-BCEB-F3D6FB5FD9D4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C6041086-78DE-45DC-8780-0927CADAC331}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C6376214-F0BC-4E5F-8F71-405ECE5247F3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C64F6ED0-47CD-41B0-B61A-23E0BAD02248}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C6AB485C-63A4-4031-887F-67EB0F9BB9E2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C6D15650-222E-4EBA-967F-9752D3F4FBCE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C6E57FA2-2A66-4268-934B-2447F793E89B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C6E5C7E0-F419-4ECF-A771-4B0C241E5838}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C70F2877-FE55-4348-8ED9-E126053A6820}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C7A733C0-6813-454F-9187-DD515567ED0A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C7C438D2-6263-492E-8A2A-A5CF1519204F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C7C68636-4F02-4FB5-84DD-D29900ED08AA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C82D2DBC-3863-475E-9721-F1804FD1DBB3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C83433A1-ABD8-43C4-945C-2EA8B83CA33D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C83D6462-F21F-429E-B6DB-FE2CE69983C6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C90BDB05-5AE1-4A46-9742-E6E42A36E8A1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C916D8F6-8A8E-4675-A729-2A9DC7065156}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{C98A9B97-60E1-46E6-A96A-8989FF0BE2D8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CA3F05F0-0C6D-46C1-B990-9CA36904492A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CA88718E-FBA1-4587-8C68-E64FDC5B2C0D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CB7D4A0C-CF4A-484C-A003-327D06A175A0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CBFC1F3C-A72F-48BB-887B-D166826C3223}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CC16E6E3-E717-489F-A322-743883A92A6B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CC1FBF55-F215-408E-BB85-F2BA97811AD0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CC5C2091-8C91-4FEE-8E60-7C4158CCBDA7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CC8E542D-9B3A-4DAC-A4AE-E22CBAF9F73B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CC94D117-B8BA-427D-8BBA-D4C97AD94AC3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CCA49377-45C1-4C9D-B023-03FEAAF7880E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CCC1E36D-6215-4D9F-9EE0-004422E9C53D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CCED3141-9B0F-4327-B600-22B0D5C259A1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CD0C0AF0-43D6-45CB-B364-D2B27F8A92A0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CD6A24C3-3DA3-4B3B-80D5-15970F01526E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CD724ABD-D372-48DE-BC46-5FBB31FC733F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CE125E05-A4AF-404C-95AB-1A02E2424C5E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CE5B345B-536B-4628-8FC8-26C57F3C8FBD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CE8187FA-A962-4535-927A-6DF2FBB56ABD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CE9D82E7-E08D-40EC-8DAF-649313FC1FCD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CEEFF9BB-3DF9-4837-B71E-DE8B57DD0C1E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CEF2E90D-48B5-4E6F-A843-9F07B5AA8A3A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CEFDC95B-5F12-4E76-9333-653E3A916E47}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CF17F219-2A26-467F-A466-75D15C68CB0E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CF534537-C9E8-43EA-B795-ABD84B3B1066}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{CFB4C5BF-F4A2-413E-995D-6EFC5B51A2CD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D0080939-AC61-4B46-96A3-4B1708C17329}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D018D951-492C-4CE1-9D0E-5AEB17B55618}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D019E0BA-C8A2-4EF1-A0C9-10BA84D61B65}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D05BD641-871B-4596-A4CC-54E8766B3E27}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D0F3DE8A-9674-4FB4-A822-027F138C4D43}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D0F94E2F-4F26-4CDA-892A-661692694417}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D139E4AB-070C-4C14-B12A-DD14DE99C481}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D157F744-1F90-4845-B54D-3002B95A4DC3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D19F41D5-2A1B-44B3-B0DC-1E172B22EE0B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D1ADC654-940F-4D57-826B-B5D2200E61DD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D1E519CA-FA21-4652-B3E4-A8E654AB3249}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D231D09D-6981-4BC6-9972-4D96AF194EB5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D2383665-5272-4D41-B3BF-517A5A02E3A3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D23F1B14-6F0A-4787-987B-D8EB17E68346}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D2B67F58-59FE-4A13-A38A-2CE13C753724}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D2D237F6-38A9-4B97-A8E7-41155760D2F5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D32AEE4D-9AB7-4B7F-91CB-CABEFC5EBF27}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D356ECC3-84E6-4046-B59D-384B1D3A16C6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D3F881FF-2640-4E84-B222-702F39D34120}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D4276C96-B5EB-47BE-93CE-90A24D29FAEE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D4BD2B2A-7AD5-40F9-AE08-C3ED89B68B85}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D510170B-9972-4786-9AF3-D2770B70681B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D56A9A35-478E-4B93-85D3-47051CC4C8F0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D56B4831-EBE0-4524-BA69-5EB316087926}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D5C3CB2A-7D65-43C0-9FD5-5479878983B3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D5D0AD19-3E8B-476D-8144-DBB475DDCB29}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D5F9D2DB-A0A0-40E7-9DC4-6444BCADF7E1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D6351BA3-345D-40C3-A28E-C2827A04B586}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D638FBFB-D8F1-48C5-A638-F4B7124F5F0F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D6738430-F133-4000-82C4-648F27C3A451}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D68DDA73-38CD-4380-8B8F-D49578DA3CA4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D773660A-BA9B-4FB0-96D1-242BF3AEA165}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D7D1FFF3-BEA9-4EA8-82E3-020F1C6C4F8B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D8574F84-5935-4D91-973C-D778C6A7E5C7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D86B0059-18B5-4FFB-B3BB-7C13ECE143E7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D94A1AF8-AD41-46E4-A6F6-318C4EB02E98}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D954397C-4CF0-4DD8-8492-E07ED0D24420}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D96BFC05-CA18-441B-AE12-F700AA6CACE5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{D9F61C50-60BB-4B9F-9F42-33811409AB4B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DA7329DF-DB18-48D4-986E-097872E4B5BF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DA82547B-CE0A-4668-BC08-6CB871B8CBB9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DAA7365A-5878-4477-B883-1DF5850080CC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DACC637D-9C6D-4C46-9409-816514CD7413}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DAEBC29D-4D81-4A63-BA78-AA56CBA70DC8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DB7FF82F-1F0B-44A7-A85F-887443EF32C4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DB8F29EB-60B3-4839-A5B5-3CE5085427F7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DBBDADB6-DFED-45FE-A6AA-EE5137E2A1BD}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DC07C773-3B2D-4BB8-9C33-8F5831A1123A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DC2252EF-8750-44AC-9714-43AA57314ED1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DC344164-D04E-47FD-9832-4338F2C45EAA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DCDA4224-C66C-4954-91B8-2E0B9BA9AC67}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DDADC827-3615-457E-980B-9F7A3EB9D569}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DE4A6EAD-A990-49F0-8536-89005AC1469A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DEACA38C-ABF9-4256-B464-C2BC59F0AAE0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DEB1A95B-9187-46E6-BD08-4793AE581541}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DEBE7210-29CC-4F6B-BF74-BFCB115D0D7B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DEC1638C-CE2C-488E-AD98-DBCA104F7CE9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DF13B04F-65EB-4ACA-B94D-949CCF0978AE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DF1C7DCF-2A3C-485A-9BA4-4EFF25463E29}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DF31C98A-1B9B-4673-AAA0-E05E69A60C9B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DF3EB092-AA4F-4430-8DA7-0A2ACDF409E1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{DF501FEF-558A-4E29-85C2-BD349658A25F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E055C239-9058-4EDB-A2C2-C4F82945C61F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E08ED030-026A-453D-B46D-2F710FACE085}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E0CE8886-51FF-48A1-9C1C-D5DDB6094E96}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E15EA02E-49D0-4B40-8DDD-8C26E16877A0}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E16F35C9-84AF-4F02-8772-A7E3A026DEBA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E299747E-3F61-4574-8683-A0F2AAF4434B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E2BED99A-D91D-4405-8DFD-1A4C7C6A1910}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E2D91910-30F6-49B0-9D67-B1CED4DF88F3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E2E0C577-1C95-4004-B0AD-E3E2E2E7A89A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E2F98AFB-E2AC-40A1-B654-CC2FABF9F767}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E39C4DB4-B9D5-4F1E-9A68-193C2176AA0B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E3CCC30F-9424-4660-A497-67615C55D985}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E4061CDC-9E83-40BD-A59F-48A12A560FF3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E4345167-EDD0-4BE1-BED5-D256DF6C5DFA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E487F190-58BB-4A0B-8B97-44B4AB57A3EF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E4BD9631-2668-4FD5-BBF9-D6490415FAE1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E52A4C7B-2ED2-41F7-88D8-BC9F79B194C1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E5362F48-2365-41B3-8A7C-C8C1E7834A2A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E5C6982A-7D6F-4849-A503-6E80163111E8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E5C98B84-E502-4D33-ABC2-0677365E3571}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E5E6CE26-0F07-4840-B2E3-57A5BC8A64EC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E61396F6-3E7C-48DD-95DC-968956745FAF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E617E785-C8B9-48A0-8E5A-5E642966CAEC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E62BDCA8-0194-4342-810C-86615F093646}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E63FEC6D-8298-4E65-8B40-5BE4544216C4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E69DBB33-E7F0-4D26-BF8B-997E3C5A296B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E6D389B4-D67F-4EB7-B2A4-73273640DF50}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E6FAAD69-CC8E-4701-87C9-845110506C89}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E703E1B1-2230-4753-961E-1EF4BC355CF6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E7751999-0547-42C5-8743-B7DAA3B49D41}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E77E9813-FFAF-4CA6-A708-59F3AD134215}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E7BCDE61-932F-4766-BC24-B87F618EED0B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E7D563B5-F2D9-4B29-995A-28CF75A05586}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E7F85434-8D5E-4272-AB1F-CFC07BC73126}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E85F04D1-0EDE-4A3C-A4C8-512967636844}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E8C59AC1-435F-42F7-A63F-715821ABAA48}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E90B68AB-C5DE-4ED2-9F5F-83EBC6379056}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E9901DD0-557F-44F8-B3DE-600E64C31438}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{E9F8D413-712A-41D1-B132-E3DF581B90F3}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EAABC1D5-1B61-41E9-9FD4-4E366962861C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EAC27DAF-5576-4399-B80C-B156EDB11028}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EB7B5611-1A4D-42A8-800A-51043CDCDD77}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EB94C950-36CF-462F-B14B-B136809CAB1B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EBADCD42-0B84-4BC4-B816-5A0DCA96F647}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EBC62AD3-1647-4ADA-ACE2-5045568DF60F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EBFEF74D-2315-4A0C-94FF-E2FC00566E11}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EC4A0289-221C-4D56-A9E2-452E4F743BF8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EC8F0D5F-0EB5-4C16-82E1-6FE0F84898A4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{ECD5244A-074E-4F99-A11C-3C2DA34C7F1D}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{ED0C7FE0-934B-4DAE-BAC5-8CF09E953705}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{ED404991-2ADD-42CC-A22C-DA899FD0F854}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EDE50A32-98CE-4C07-B2F5-E0C1B134B245}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EE67911C-B94A-4D5B-B77B-BCB8AC9688EF}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EE7F92AB-F128-456C-84D7-C62A8DC8C52E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EED12EA0-EB6F-4EF0-8605-732149593D7E}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EF010FF1-4628-4180-8FE6-797D7E8888F8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EFC316A0-1CBE-45A5-8764-F12DA40BDA26}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{EFC9866D-7D4B-4FAE-A099-FF6D0851CF7C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F009355A-95F4-4BD0-9705-1E9B638F080F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F064D5C5-70A7-47FC-90EE-CECC10275C29}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F1852850-CC54-4CBF-B60C-FCB55F220C5A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F1EB9476-C3A7-4ECA-9E84-6258DA2FBC8C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F22D643C-8B2E-46AD-895B-926D94F288FC}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F36D682B-0BD4-4C61-8EDE-CD19DC997711}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F36EA25D-1580-42C5-9110-1139AE4DC28C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F4529ABC-EA45-493A-A890-5B45D7EF5756}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F4558780-F59D-440E-B434-C7A10E87949F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F4C47742-A397-4653-A4D3-D280277670D1}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F4D7034C-A0CD-49DF-84BC-CA81A280B1A8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F5549329-A3FC-4ACE-8998-6A8C1015C2C5}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F564119C-802B-48CD-A549-9A47A1DA35D6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F5843470-447F-4427-B6F9-0CAA3B39E26F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F5E9A473-B4DB-4079-B188-D5DED86D3E04}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F5F02E0D-1F58-4E7E-B93C-5FD4CE98C837}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F637473F-E95F-449F-B01F-2158475A969F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F63EDD88-5A70-4D8C-9BF7-B370E164953B}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F68BB4EA-2D2E-4F98-B0CF-EC0797DB53FE}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F71E0DC3-09D6-437C-80CC-6BE66D16970C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F74A766B-AE56-406F-AF7D-6D24FB4221E7}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F78041F5-4387-4435-9ECC-5877657B3AB9}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F78FAA21-2F65-4078-A788-F95DBE573DBA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F7F09CD1-56F4-4D94-9DDA-54FB5ABF8414}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F8054600-275F-4E09-8273-F5E3F2C88AEB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F80CF0D8-3064-4698-94F3-6391623B079A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F86BB9FF-2344-4B50-8702-151B7DEFEC68}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F8799B5C-E2F6-4A7C-9474-A5EBAF989DBA}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F8E91727-ED81-4204-9436-B6CC955788F6}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F902861A-7DB5-43AE-A847-9A0246EC912F}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F9068776-D382-455F-A697-AF2241171486}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F91B78CA-15B6-454D-A1EA-3BB1DAF12927}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F923BDBB-BA1D-4605-8759-FB5A0FDE9583}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{F92BE11F-BE60-42D0-BE77-E1DA88CD2A59}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FA3FB683-5619-40B2-8FC1-B5551032DA92}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FA4761B5-658A-4EC9-9711-C1112AED836A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FA8E470D-4E8F-48C9-BEB7-32DFEF3591A8}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FAE16626-B88F-44D4-9803-0AC8A6D4AC35}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FB6F3BD6-E381-4F1B-8942-A65C79890D0C}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FC2B261F-C64F-4428-AC55-60E4683BCF09}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FC575583-BDFC-40E7-A985-E352F42B3042}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FC69EE67-DF5E-46BE-8069-7624FA047104}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FC8DE779-0C22-4D78-812A-A80CE7B0FC54}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FC928754-DD48-482F-BCAA-9969D6BA8D67}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FCF8462F-EAAA-4878-ACC6-2124048649F4}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FD05794E-A72E-4512-B109-BC0384957AE2}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FD976C11-5976-4E16-AB65-F4D332F9F266}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FD9A750E-C9AC-4A1A-8025-C62BBAA679DB}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FE0091F7-1F37-4052-BA4C-08CD273B5422}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FE1675D7-0A56-4B74-8796-0803ADCFA523}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FE1D3969-ADA1-4444-898D-D8C3D9745174}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FEA852A6-651B-4806-A22A-8148802CDD25}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FEDB51BB-20EC-4391-A804-2038E7ADC02A}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FF85C906-2BB5-4F78-AB60-826605096529}
Successfully deleted: [Empty Folder] C:\Users\bigdog\appdata\local\{FFD12A08-803B-4A02-939F-FC676729A744}



~~~ FireFox

Emptied folder: C:\Users\bigdog\AppData\Roaming\mozilla\firefox\profiles\xf2x1qqs.default\minidumps [9 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
heyoka05
Regular Member
 
Posts: 72
Joined: July 11th, 2007, 11:48 am

Re: infected with the cryptowall

Unread postby heyoka05 » September 29th, 2014, 9:45 pm

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-09-2014
Ran by bigdog (administrator) on BIGDOG-HP on 29-09-2014 21:18:25
Running from C:\Users\bigdog\Desktop
Loaded Profile: bigdog (Available profiles: bigdog & lindi & Guest)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(Alcatel-Lucent) C:\Program Files (x86)\Common Files\Motive\McciCMService.exe
(Alcatel-Lucent) C:\Program Files\Common Files\Motive\McciCMService.exe
(Roxio) C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2799912 2011-10-25] (Synaptics Incorporated)
HKLM\...\Run: [HPWirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2010-07-21] (Hewlett-Packard Company)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-10-25] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-12] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [111640 2010-07-23] ()
HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [336440 2011-06-13] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [587320 2011-06-14] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [WinPatrol] => C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [328800 2012-02-24] (BillP Studios)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software)
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %programfiles(x86)%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\Appdata\Roaming\Microsoft\Windows\IEUpdate\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.pif <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.com <====== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Binscr <====== ATTENTION
HKLM Group Policy restriction on software: %programfiles%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Binexe <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.com <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: lsassvrtdbks.exe <====== ATTENTION
HKLM Group Policy restriction on software: vssadmin.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.com <====== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.com <====== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bincom <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *‮* <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.pif <====== ATTENTION
HKLM Group Policy restriction on software: scsvserv.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: lsassw86s.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.com <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: cipher.exe <====== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Binpif <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.com <====== ATTENTION
HKLM Group Policy restriction on software: syskey.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\arceee2.tmp\sstinstaller.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\arc713a.tmp\sstinstaller.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\arc713a.tmp\sstinstaller.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\arc713a.tmp\sstinstaller.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\arc713a.tmp\sstinstaller.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\arceee2.tmp\sstinstaller.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\arceee2.tmp\sstinstaller.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\arceee2.tmp\sstinstaller.exe <====== ATTENTION
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3725795197-1872689522-2498876610-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3725795197-1872689522-2498876610-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-18\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2011-03-04] (Hewlett-Packard Company)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
GroupPolicyUsers\S-1-5-21-3725795197-1872689522-2498876610-1271\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://us-mg6.mail.yahoo.com/neo/launc ... 9dma1mpn54
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572 ... com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572 ... com/?_nkw={searchTerms}
SearchScopes: HKCU - DefaultScope {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = http://search.yahoo.com/search?p={searchTerms}&fr=chr-atty
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
SearchScopes: HKCU - {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = http://search.yahoo.com/search?p={searchTerms}&fr=chr-atty
SearchScopes: HKCU - {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/i ... ction2.cab
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.co ... 4.24.0.cab
DPF: HKLM-x32 {E0FEE963-BB53-4215-81AD-B28C77384644} https://pattcw.att.motive.com/wizlet/DS ... ller64.cab
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1

FireFox:
========
FF ProfilePath: C:\Users\bigdog\AppData\Roaming\Mozilla\Firefox\Profiles\xf2x1qqs.default
FF NewTab: hxxp://www.google.com/firefox
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Yahoo
FF Homepage: https://login.yahoo.com/config/login?.s ... hoo.com%2F
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_169.dll ()
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_33 -> C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Motive.com/NpMotive,version=1.0 -> C:\Program Files (x86)\Common Files\Motive\npMotive.dll (Alcatel-Lucent)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin -> C:\Users\bigdog\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-06-06]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-30]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-30] (AVAST Software)
R2 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed]
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2011-03-04] (Hewlett-Packard Company) [File not signed]
R2 McciCMService; C:\Program Files (x86)\Common Files\Motive\McciCMService.exe [319488 2010-04-30] (Alcatel-Lucent) [File not signed]
R2 McciCMService64; C:\Program Files\Common Files\Motive\McciCMService.exe [517632 2010-04-30] (Alcatel-Lucent) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-30] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-30] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-30] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-30] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-30] ()
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 MREMP50; C:\Program Files (x86)\Common Files\Motive\MREMP50.sys [21248 2010-04-30] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 MRESP50; C:\Program Files (x86)\Common Files\Motive\MRESP50.sys [20096 2010-04-30] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [X]
S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [X]
S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [X]
S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-29 21:18 - 2014-09-29 21:18 - 00030079 _____ () C:\Users\bigdog\Desktop\FRST.txt
2014-09-29 21:18 - 2014-09-29 21:18 - 00000000 ____D () C:\FRST
2014-09-29 21:17 - 2014-09-29 21:17 - 02108928 _____ (Farbar) C:\Users\bigdog\Desktop\FRST64.exe
2014-09-29 21:15 - 2014-09-29 21:15 - 00103060 _____ () C:\Users\bigdog\Desktop\JRT.txt
2014-09-29 21:10 - 2014-09-29 21:10 - 00000000 ____D () C:\Windows\ERUNT
2014-09-29 21:09 - 2014-09-29 21:09 - 01699276 _____ (Thisisu) C:\Users\bigdog\Desktop\JRT.exe
2014-09-29 21:07 - 2014-09-29 21:07 - 00005832 _____ () C:\Users\bigdog\Desktop\AdwCleaner[S0].txt
2014-09-29 21:02 - 2014-09-29 21:05 - 00000000 ____D () C:\AdwCleaner
2014-09-29 21:01 - 2014-09-29 21:01 - 01373475 _____ () C:\Users\bigdog\Desktop\AdwCleaner.exe
2014-09-28 20:24 - 2014-09-28 20:24 - 00009728 _____ () C:\Users\lindi\Desktop\Boye 2.wps
2014-09-28 20:15 - 2014-09-28 20:15 - 00009728 _____ () C:\Users\lindi\Desktop\Boye 1.wps
2014-09-28 20:00 - 2014-09-28 20:29 - 00000160 _____ () C:\Users\lindi\AppData\Roaming\wklnhst.dat
2014-09-28 20:00 - 2014-09-28 20:00 - 00000000 ____D () C:\Users\lindi\AppData\Roaming\Template
2014-09-27 17:41 - 2014-09-27 17:41 - 00053248 _____ () C:\Windows\SysWOW64\zlib.dll
2014-09-27 17:41 - 2014-09-27 17:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foolish IT
2014-09-27 17:41 - 2014-09-27 17:41 - 00000000 ____D () C:\ProgramData\Foolish IT
2014-09-27 17:41 - 2014-09-27 17:41 - 00000000 ____D () C:\Program Files (x86)\Foolish IT
2014-09-26 23:04 - 2014-08-19 14:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-26 23:04 - 2014-08-19 13:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-26 23:04 - 2014-08-18 19:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-26 23:04 - 2014-08-18 18:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-26 23:04 - 2014-08-18 18:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-26 23:04 - 2014-08-18 18:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-26 23:04 - 2014-08-18 18:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-26 23:04 - 2014-08-18 18:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-26 23:04 - 2014-08-18 18:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-26 23:04 - 2014-08-18 18:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-26 23:04 - 2014-08-18 18:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-26 23:04 - 2014-08-18 18:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-26 23:04 - 2014-08-18 18:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-26 23:04 - 2014-08-18 18:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-26 23:04 - 2014-08-18 18:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-26 23:04 - 2014-08-18 18:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-26 23:04 - 2014-08-18 18:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-26 23:04 - 2014-08-18 18:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-26 23:04 - 2014-08-18 18:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-26 23:04 - 2014-08-18 17:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-26 23:04 - 2014-08-18 17:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-26 23:04 - 2014-08-18 17:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-26 23:04 - 2014-08-18 17:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-26 23:04 - 2014-08-18 17:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-26 23:04 - 2014-08-18 17:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-26 23:04 - 2014-08-18 17:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-26 23:04 - 2014-08-18 17:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-26 23:04 - 2014-08-18 17:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-26 23:04 - 2014-08-18 17:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-26 23:04 - 2014-08-18 17:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-26 23:04 - 2014-08-18 17:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-26 23:04 - 2014-08-18 17:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-26 23:04 - 2014-08-18 17:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-26 23:04 - 2014-08-18 17:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-26 23:04 - 2014-08-18 17:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-26 23:04 - 2014-08-18 17:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-26 23:04 - 2014-08-18 17:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-26 23:04 - 2014-08-18 17:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-26 23:04 - 2014-08-18 17:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-26 23:04 - 2014-08-18 17:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-26 23:04 - 2014-08-18 17:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-26 23:04 - 2014-08-18 17:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-26 23:04 - 2014-08-18 17:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-26 23:04 - 2014-08-18 17:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-26 23:04 - 2014-08-18 17:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-26 23:04 - 2014-08-18 17:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-26 23:04 - 2014-08-18 17:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-26 23:04 - 2014-08-18 17:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-26 23:04 - 2014-08-18 17:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-26 23:04 - 2014-08-18 17:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-26 23:04 - 2014-08-18 17:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-26 23:04 - 2014-08-18 16:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-26 23:04 - 2014-08-18 16:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-26 23:04 - 2014-08-18 16:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-26 23:04 - 2014-08-18 16:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-26 23:04 - 2014-08-18 16:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-26 21:27 - 2014-07-06 22:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-26 21:27 - 2014-07-06 22:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-26 21:27 - 2014-07-06 21:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-26 21:27 - 2014-07-06 21:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-26 21:27 - 2014-07-06 21:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-24 22:51 - 2014-09-24 22:51 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-09-24 22:51 - 2014-09-24 22:51 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-09-24 21:16 - 2014-09-24 21:16 - 00000000 ____D () C:\Users\lindi\AppData\Local\Apple
2014-09-23 22:47 - 2014-09-23 22:47 - 00008216 _____ () C:\Users\Public\Documents\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:47 - 2014-09-23 22:47 - 00008216 _____ () C:\Users\Public\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:47 - 2014-09-23 22:47 - 00008216 _____ () C:\Users\lindi\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:47 - 2014-09-23 22:47 - 00008216 _____ () C:\Users\lindi\AppData\Roaming\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:47 - 2014-09-23 22:47 - 00008216 _____ () C:\Users\lindi\AppData\Local\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:47 - 2014-09-23 22:47 - 00008216 _____ () C:\Users\lindi\AppData\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:47 - 2014-09-23 22:47 - 00008216 _____ () C:\Users\Guest\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:47 - 2014-09-23 22:47 - 00008216 _____ () C:\Users\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:47 - 2014-09-23 22:47 - 00008216 _____ () C:\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:47 - 2014-09-23 22:47 - 00004152 _____ () C:\Users\Public\Documents\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:47 - 2014-09-23 22:47 - 00004152 _____ () C:\Users\Public\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:47 - 2014-09-23 22:47 - 00004152 _____ () C:\Users\lindi\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:47 - 2014-09-23 22:47 - 00004152 _____ () C:\Users\lindi\AppData\Roaming\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:47 - 2014-09-23 22:47 - 00004152 _____ () C:\Users\lindi\AppData\Local\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:47 - 2014-09-23 22:47 - 00004152 _____ () C:\Users\lindi\AppData\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:47 - 2014-09-23 22:47 - 00004152 _____ () C:\Users\Guest\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:47 - 2014-09-23 22:47 - 00004152 _____ () C:\Users\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:47 - 2014-09-23 22:47 - 00004152 _____ () C:\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:47 - 2014-09-23 22:47 - 00000276 _____ () C:\Users\Public\Documents\DECRYPT_INSTRUCTION.URL
2014-09-23 22:47 - 2014-09-23 22:47 - 00000276 _____ () C:\Users\Public\DECRYPT_INSTRUCTION.URL
2014-09-23 22:47 - 2014-09-23 22:47 - 00000276 _____ () C:\Users\lindi\DECRYPT_INSTRUCTION.URL
2014-09-23 22:47 - 2014-09-23 22:47 - 00000276 _____ () C:\Users\lindi\AppData\Roaming\DECRYPT_INSTRUCTION.URL
2014-09-23 22:47 - 2014-09-23 22:47 - 00000276 _____ () C:\Users\lindi\AppData\Local\DECRYPT_INSTRUCTION.URL
2014-09-23 22:47 - 2014-09-23 22:47 - 00000276 _____ () C:\Users\lindi\AppData\DECRYPT_INSTRUCTION.URL
2014-09-23 22:47 - 2014-09-23 22:47 - 00000276 _____ () C:\Users\Guest\DECRYPT_INSTRUCTION.URL
2014-09-23 22:47 - 2014-09-23 22:47 - 00000276 _____ () C:\Users\DECRYPT_INSTRUCTION.URL
2014-09-23 22:47 - 2014-09-23 22:47 - 00000276 _____ () C:\DECRYPT_INSTRUCTION.URL
2014-09-23 22:46 - 2014-09-23 22:46 - 00008216 _____ () C:\Users\Guest\AppData\Roaming\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:46 - 2014-09-23 22:46 - 00008216 _____ () C:\Users\Guest\AppData\Local\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:46 - 2014-09-23 22:46 - 00008216 _____ () C:\Users\Guest\AppData\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:46 - 2014-09-23 22:46 - 00008216 _____ () C:\Users\bigdog\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:46 - 2014-09-23 22:46 - 00004152 _____ () C:\Users\Guest\AppData\Roaming\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:46 - 2014-09-23 22:46 - 00004152 _____ () C:\Users\Guest\AppData\Local\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:46 - 2014-09-23 22:46 - 00004152 _____ () C:\Users\Guest\AppData\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:46 - 2014-09-23 22:46 - 00004152 _____ () C:\Users\bigdog\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:46 - 2014-09-23 22:46 - 00000276 _____ () C:\Users\Guest\AppData\Roaming\DECRYPT_INSTRUCTION.URL
2014-09-23 22:46 - 2014-09-23 22:46 - 00000276 _____ () C:\Users\Guest\AppData\Local\DECRYPT_INSTRUCTION.URL
2014-09-23 22:46 - 2014-09-23 22:46 - 00000276 _____ () C:\Users\Guest\AppData\DECRYPT_INSTRUCTION.URL
2014-09-23 22:46 - 2014-09-23 22:46 - 00000276 _____ () C:\Users\bigdog\DECRYPT_INSTRUCTION.URL
2014-09-23 22:39 - 2014-09-23 22:39 - 00008216 _____ () C:\Users\bigdog\Downloads\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:39 - 2014-09-23 22:39 - 00008216 _____ () C:\Users\bigdog\Documents\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:39 - 2014-09-23 22:39 - 00004152 _____ () C:\Users\bigdog\Downloads\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:39 - 2014-09-23 22:39 - 00004152 _____ () C:\Users\bigdog\Documents\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:39 - 2014-09-23 22:39 - 00000276 _____ () C:\Users\bigdog\Downloads\DECRYPT_INSTRUCTION.URL
2014-09-23 22:39 - 2014-09-23 22:39 - 00000276 _____ () C:\Users\bigdog\Documents\DECRYPT_INSTRUCTION.URL
2014-09-23 22:09 - 2014-09-23 22:09 - 00008216 _____ () C:\Users\bigdog\AppData\Roaming\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:09 - 2014-09-23 22:09 - 00008216 _____ () C:\Users\bigdog\AppData\Local\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:09 - 2014-09-23 22:09 - 00008216 _____ () C:\Users\bigdog\AppData\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:09 - 2014-09-23 22:09 - 00004152 _____ () C:\Users\bigdog\AppData\Roaming\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:09 - 2014-09-23 22:09 - 00004152 _____ () C:\Users\bigdog\AppData\Local\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:09 - 2014-09-23 22:09 - 00004152 _____ () C:\Users\bigdog\AppData\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:09 - 2014-09-23 22:09 - 00000276 _____ () C:\Users\bigdog\AppData\Roaming\DECRYPT_INSTRUCTION.URL
2014-09-23 22:09 - 2014-09-23 22:09 - 00000276 _____ () C:\Users\bigdog\AppData\Local\DECRYPT_INSTRUCTION.URL
2014-09-23 22:09 - 2014-09-23 22:09 - 00000276 _____ () C:\Users\bigdog\AppData\DECRYPT_INSTRUCTION.URL
2014-09-23 22:04 - 2014-09-23 22:04 - 00008216 _____ () C:\ProgramData\DECRYPT_INSTRUCTION.HTML
2014-09-23 22:04 - 2014-09-23 22:04 - 00004152 _____ () C:\ProgramData\DECRYPT_INSTRUCTION.TXT
2014-09-23 22:04 - 2014-09-23 22:04 - 00000276 _____ () C:\ProgramData\DECRYPT_INSTRUCTION.URL
2014-08-30 15:20 - 2014-09-23 22:38 - 00000280 _____ () C:\Users\bigdog\Documents\Farmer's Market Bulletin.txt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-29 21:14 - 2009-07-14 00:45 - 00026192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-29 21:14 - 2009-07-14 00:45 - 00026192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-29 21:12 - 2011-05-13 05:00 - 01806671 _____ () C:\Windows\WindowsUpdate.log
2014-09-29 21:06 - 2011-05-13 05:05 - 00802566 _____ () C:\Windows\PFRO.log
2014-09-29 21:06 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-29 21:06 - 2009-07-14 00:51 - 00116049 _____ () C:\Windows\setupact.log
2014-09-29 21:01 - 2009-07-14 01:13 - 01333592 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-29 17:16 - 2014-08-26 07:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-28 20:29 - 2009-07-14 01:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-09-27 17:41 - 2014-04-11 15:04 - 00000632 __RSH () C:\Users\bigdog\ntuser.pol
2014-09-27 17:41 - 2011-06-06 01:39 - 00000000 ____D () C:\Users\bigdog
2014-09-27 17:02 - 2012-07-11 01:49 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-09-27 14:02 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\rescache
2014-09-27 13:29 - 2014-07-22 22:35 - 00003192 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForbigdog
2014-09-27 13:29 - 2014-07-22 22:35 - 00000336 _____ () C:\Windows\Tasks\HPCeeScheduleForbigdog.job
2014-09-26 23:03 - 2013-07-11 00:26 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-26 22:57 - 2011-06-06 09:37 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-26 16:29 - 2014-04-11 15:06 - 00000000 ____D () C:\Users\lindi
2014-09-26 16:29 - 2013-06-06 18:59 - 00000000 ____D () C:\Users\bigdog\AppData\Roaming\Malwarebytes
2014-09-26 16:29 - 2013-06-06 18:59 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-26 16:29 - 2011-09-05 10:23 - 00000000 ____D () C:\Users\Guest
2014-09-26 16:29 - 2011-01-09 05:52 - 00000000 ____D () C:\ProgramData\RoxioNow
2014-09-26 16:29 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-09-26 16:29 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\AppCompat
2014-09-26 16:29 - 2009-07-13 23:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-09-26 16:28 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\registration
2014-09-26 16:25 - 2014-02-14 17:14 - 00000000 ____D () C:\Users\bigdog\Documents\wind_chime_1.01_syntrillium
2014-09-26 16:25 - 2013-09-16 21:20 - 00000000 ____D () C:\Users\bigdog\AppData\Local\Facebook
2014-09-26 16:25 - 2012-09-14 12:20 - 00000000 ____D () C:\Users\bigdog\AppData\Roaming\Mozilla
2014-09-26 16:25 - 2012-06-24 12:29 - 00000000 ____D () C:\Users\bigdog\Documents\Acid loops
2014-09-26 16:25 - 2012-03-06 15:05 - 00000000 ____D () C:\Users\bigdog\AppData\Roaming\Skype
2014-09-26 16:25 - 2012-01-10 02:42 - 00000000 ____D () C:\Users\Public\Documents\LuxRender
2014-09-26 16:25 - 2011-12-24 19:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Microsoft Games
2014-09-26 16:25 - 2011-07-07 16:48 - 00000000 ____D () C:\ProgramData\LogiShrd
2014-09-26 16:25 - 2011-06-06 19:24 - 00000000 ____D () C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2014-09-26 16:25 - 2011-06-06 09:50 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-09-26 16:25 - 2011-06-06 01:44 - 00000000 ____D () C:\Users\bigdog\AppData\Roaming\Adobe
2014-09-26 16:25 - 2011-06-06 00:32 - 00000000 ____D () C:\Users\bigdog\AppData\Local\Microsoft Games
2014-09-26 16:25 - 2011-06-06 00:22 - 00000000 ____D () C:\Users\bigdog\AppData\Local\CyberLink
2014-09-26 16:25 - 2011-06-06 00:16 - 00000000 ____D () C:\ProgramData\Synaptics
2014-09-26 16:25 - 2011-01-09 06:00 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-09-26 16:25 - 2011-01-09 05:52 - 00000000 ____D () C:\ProgramData\Macrovision
2014-09-26 16:25 - 2011-01-09 05:43 - 00000000 ____D () C:\ProgramData\WildTangent
2014-09-26 16:25 - 2009-09-06 20:40 - 00000000 ___HD () C:\SYSTEM.SAV
2014-09-26 16:25 - 2009-09-06 20:40 - 00000000 ____D () C:\SwSetup
2014-09-26 16:24 - 2010-11-22 19:35 - 00000000 ___HD () C:\HP
2014-09-23 22:47 - 2014-04-11 15:07 - 00000000 ____D () C:\Users\lindi\AppData\Roaming\Adobe
2014-09-23 22:47 - 2014-04-11 13:28 - 00000000 ____D () C:\Users\Guest\Desktop\New folder
2014-09-23 22:46 - 2014-04-11 13:28 - 00000000 ____D () C:\Users\Guest\Desktop\DCIM
2014-09-23 22:39 - 2012-08-06 10:17 - 00000000 ____D () C:\Users\bigdog\Documents\Loan
2014-09-23 22:39 - 2012-06-17 22:34 - 00000000 ____D () C:\Users\bigdog\Documents\Sony ACID Music Studio 6.0 Projects
2014-09-23 22:39 - 2011-07-24 21:06 - 00000000 ____D () C:\Users\bigdog\Documents\Invoices
2014-09-23 22:39 - 2011-06-10 16:28 - 00000536 _____ () C:\Users\bigdog\Documents\rrrrrrrrrrrr.txt
2014-09-23 22:38 - 2014-02-11 17:30 - 00000000 ____D () C:\Users\bigdog\Documents\DIY_Wind_Chime_Support_Plate_Calculator
2014-09-23 22:38 - 2013-05-05 10:55 - 00000280 _____ () C:\Users\bigdog\Documents\bryce7.txt
2014-09-23 22:38 - 2012-10-27 09:43 - 00000000 ____D () C:\Users\bigdog\Documents\bansuri
2014-09-23 22:38 - 2012-01-21 10:09 - 00000000 ____D () C:\Users\bigdog\Documents\Freecorder
2014-09-23 22:38 - 2011-07-13 12:34 - 00000000 ____D () C:\Users\bigdog\Documents\Estimates
2014-09-23 22:17 - 2013-06-03 22:37 - 00005144 _____ () C:\Users\bigdog\Documents\1.txt
2014-09-23 22:09 - 2014-08-08 19:41 - 00000000 ____D () C:\Users\bigdog\AppData\Roaming\DesktopDPO-d00b9882479ed9b4899926f5c7e44f49
2014-09-23 22:09 - 2013-12-22 20:17 - 00000000 ____D () C:\Users\bigdog\AppData\Roaming\Sygyt Software
2014-09-23 22:09 - 2012-11-25 11:05 - 00000000 ____D () C:\Users\bigdog\AppData\Roaming\Cycling '74
2014-09-23 22:09 - 2012-06-17 22:34 - 00000000 ____D () C:\Users\bigdog\AppData\Roaming\Sony
2014-09-23 22:09 - 2011-11-16 22:31 - 00000000 ____D () C:\Users\bigdog\AppData\Roaming\Blender Foundation
2014-09-23 22:09 - 2011-06-16 09:43 - 00000000 ____D () C:\Users\bigdog\AppData\Roaming\SecondLife
2014-09-23 22:09 - 2011-06-14 22:59 - 00000000 ____D () C:\Users\bigdog\AppData\Roaming\Real
2014-09-23 22:09 - 2011-06-10 08:26 - 00000000 ____D () C:\Users\bigdog\AppData\Roaming\Blio
2014-09-23 22:08 - 2014-01-08 21:04 - 00000000 ____D () C:\Users\bigdog\AppData\Local\CrazyBump
2014-09-23 22:08 - 2011-06-16 09:43 - 00000000 ____D () C:\Users\bigdog\AppData\Local\SecondLife
2014-09-23 22:08 - 2011-06-06 19:24 - 00000000 ____D () C:\Users\bigdog\AppData\Local\Apple Computer
2014-09-23 22:03 - 2013-05-04 17:28 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-09-23 22:03 - 2011-07-11 18:39 - 00000000 ____D () C:\ProgramData\Motive
2014-09-23 22:03 - 2011-01-09 05:53 - 00000000 ____D () C:\ProgramData\Sonic
2014-09-19 09:11 - 2011-06-10 18:57 - 00000000 ____D () C:\Users\bigdog\AppData\Local\CrashDumps
2014-09-19 09:11 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-09-15 09:06 - 2011-06-05 21:54 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-09 14:20 - 2011-10-27 06:58 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-09-09 14:20 - 2011-06-09 17:57 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-09-08 08:46 - 2009-07-14 01:08 - 00032580 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-06 21:46 - 2011-06-13 12:10 - 00003220 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForBIGDOG-HP$
2014-09-06 21:46 - 2011-06-13 12:10 - 00000344 _____ () C:\Windows\Tasks\HPCeeScheduleForBIGDOG-HP$.job
2014-09-03 00:20 - 2011-06-10 18:57 - 00000000 ____D () C:\Users\bigdog\AppData\Roaming\SoftGrid Client
2014-09-02 17:52 - 2011-06-06 01:42 - 00075184 _____ () C:\Users\bigdog\AppData\Local\GDIPFONTCACHEV1.DAT

Some content of TEMP:
====================
C:\Users\bigdog\AppData\Local\Temp\Quarantine.exe
C:\Users\bigdog\AppData\Local\Temp\SymCCIS.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-27 13:55

==================== End Of Log ============================
heyoka05
Regular Member
 
Posts: 72
Joined: July 11th, 2007, 11:48 am

Re: infected with the cryptowall

Unread postby heyoka05 » September 29th, 2014, 9:46 pm

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-09-2014
Ran by bigdog at 2014-09-29 21:19:15
Running from C:\Users\bigdog\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.7.700.169 - Adobe Systems Incorporated)
Adobe Photoshop 6.0 (HKLM-x32\...\Adobe Photoshop 6.0) (Version: 6.0 - Adobe Systems, Inc.)
Adobe Reader 9.5.5 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\{3B834B54-EC4B-48E2-BFC6-03FF5DA06F62}) (Version: 11.5.8.612 - Adobe Systems, Inc)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden
AP Tuner 3.08 (HKLM-x32\...\AP Tuner 3.08) (Version: - )
Apple Application Support (HKLM-x32\...\{A83279FD-CA4B-4206-9535-90974DE76654}) (Version: 2.1.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{8F473675-D702-45F9-8EBC-342B40C17BF5}) (Version: 3.4.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2021 - AVAST Software)
Avery Design & Print (HKLM-x32\...\Avery Design & Print 1.0.0) (Version: 1.0.0 - Avery Products Corporation)
AVS Screen Capture version 2.0.1 (HKLM-x32\...\AVS Screen Capture_is1) (Version: - Online Media Technologies Ltd.)
AVS Update Manager 1.0 (HKLM-x32\...\AVS Update Manager_is1) (Version: - Online Media Technologies Ltd.)
AVS Video Editor 6 (HKLM-x32\...\AVS Video Editor_is1) (Version: - Online Media Technologies Ltd.)
AVS Video Recorder 2.4 (HKLM-x32\...\AVS Video Recorder_is1) (Version: - Online Media Technologies Ltd.)
AVS4YOU Software Navigator 1.4 (HKLM-x32\...\AVS4YOU Software Navigator_is1) (Version: - Online Media Technologies Ltd.)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Blender (HKLM\...\Blender) (Version: 2.63-release - Blender Foundation)
Bonjour (HKLM\...\{0E543634-7E25-4B8F-8D5B-97880E5E5088}) (Version: 2.0.5.0 - Apple Inc.)
Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden
Broadcom 2070 Bluetooth 3.0 (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.6300 - Broadcom Corporation)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.100.82.86 - Broadcom Corporation)
Bryce 7.1 (HKLM-x32\...\Bryce 7.1 7.1.0.109) (Version: 7.1.0.109 - DAZ 3D)
Bryce 7.1 (HKLM-x32\...\Bryce 7.1 7.1.0.74) (Version: 7.1.0.74 - DAZ 3D)
Build-a-lot 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Crazybump (remove only) (HKLM-x32\...\Crazybump) (Version: - )
CryptoPrevent (HKLM-x32\...\{5C5B24E7-4694-4049-A222-CCE7D3FAC63F}_is1) (Version: - Foolish IT LLC)
CyberLink DVD Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.3525 - CyberLink Corp.)
CyberLink DVD Suite (x32 Version: 7.0.3525 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.1.4305 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.1.4305 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
Dora's World Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
Epson Connect (HKLM-x32\...\{64BA551C-9AF6-495C-93F3-D1270E0045FC}) (Version: - )
Epson Customer Participation (HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)
Epson Download Navigator (HKLM-x32\...\{10F63395-157F-4B93-AB4D-702A2FF11942}) (Version: 1.0.1 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}) (Version: 2.50.0000 - SEIKO EPSON CORPORATION)
EPSON NX430 Series Printer Uninstall (HKLM\...\EPSON NX430 Series) (Version: - SEIKO EPSON Corporation)
EPSON PhotoQuicker3.0 (HKLM-x32\...\{1F363A3E-92D8-4C24-B84F-487DA22BEE3E}) (Version: - )
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)
Escape Rosecliff Island (x32 Version: 2.2.0.95 - WildTangent) Hidden
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
EZdrummer (HKLM-x32\...\{43E8D9E7-AFC9-4BA3-8106-B95E02B87AB7}) (Version: 1.0.3 - Toontrack)
EZXCocktail (HKLM-x32\...\{147567F0-8575-4BE0-B5B3-62706C67FA5A}) (Version: 1.0 - Toontrack)
Facebook Messenger 2.1.4814.0 (HKLM-x32\...\{7204BDEE-1A48-4D95-A964-44A9250B439E}) (Version: 2.1.4814.0 - Facebook)
Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - )
Film Factory (HKLM-x32\...\Film Factory) (Version: - )
Final Drive Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Freecorder 5 (HKLM-x32\...\Freecorder5.11) (Version: 5.11 - Applian Technologies Inc.)
GTK2-Runtime (HKLM-x32\...\GTK2-Runtime) (Version: 2.24.8-2011-12-03-ash - Alexander Shaduri)
Heroes of Hellas 2 - Olympia (x32 Version: 2.2.0.95 - WildTangent) Hidden
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Auto (Version: 1.0.12494.3472 - Hewlett-Packard Company) Hidden
HP Client Services (Version: 1.0.12656.3472 - Hewlett-Packard) Hidden
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Documentation (HKLM-x32\...\{0C107330-16DF-4D39-AA74-0E5448AED9E8}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Game Console (x32 Version: - WildTangent) Hidden
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.1.5 - WildTangent)
HP MovieStore (HKLM-x32\...\{9008D736-35CA-40DB-A2BE-5F32D954E5AA}) (Version: 2.0 - Hewlett-Packard)
HP MovieStore (x32 Version: 1.0.036 - Hewlett-Packard) Hidden
HP On Screen Display (HKLM-x32\...\{D7670221-BF9B-4DFF-B26B-5BE55A87329F}) (Version: 1.2.2 - Hewlett-Packard Company)
HP Power Manager (HKLM-x32\...\{872B1C80-38EC-4A31-A25C-980820593900}) (Version: 1.2.3 - Hewlett-Packard Company)
HP Product Detection (HKLM-x32\...\{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}) (Version: 10.7.9.0 - Hewlett-Packard Company)
HP Quick Launch (HKLM-x32\...\{BB1C717E-376C-4AA1-8940-81BFC38D9778}) (Version: 2.4.4 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{802C068E-0576-4F25-8137-D54B7DB0FC5E}) (Version: 8.4.4487.3576 - Hewlett-Packard Company)
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.0.12845.3522 - Hewlett-Packard Company)
HP Software Framework (HKLM-x32\...\{31EEA563-3544-4EA1-8773-BCBF83F9627A}) (Version: 4.1.8.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}) (Version: 7.0.39.15 - Hewlett-Packard Company)
HP Wireless Assistant (HKLM\...\{13DCC2C7-454D-42F0-A892-E0E9A5DE4E67}) (Version: 4.0.10.0 - Hewlett-Packard Company)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6341.0 - IDT)
Inkscape 0.48.5 (HKLM-x32\...\Inkscape) (Version: 0.48.5 - )
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2253 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
iTunes (HKLM\...\{18155797-EF2E-4699-9A16-FE787C4C10DB}) (Version: 10.2.2.14 - Apple Inc.)
Java Auto Updater (x32 Version: 2.0.7.1 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 14 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216014F0}) (Version: 6.0.140 - Sun Microsystems, Inc.)
Java(TM) 6 Update 22 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416022FF}) (Version: 6.0.220 - Oracle)
Java(TM) 6 Update 33 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216033FF}) (Version: 6.0.330 - Oracle)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
KTabS Reader (HKLM-x32\...\KTabS Reader) (Version: - KTabS)
LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3429 - CyberLink Corp.)
LabelPrint (x32 Version: 2.5.3429 - CyberLink Corp.) Hidden
LightScribe System Software (HKLM-x32\...\{E0E55FC1-C53D-4F8D-B14B-B59C312747C8}) (Version: 1.18.22.2 - LightScribe)
Logitech Vid (HKLM-x32\...\{4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}) (Version: 1.10.1009 - Logitech Inc.)
Logitech Webcam Software (HKLM\...\{987FE247-4E69-4A2E-A961-D14F901FDBF6}) (Version: 12.10.1113 - Logitech Inc.)
Logitech Webcam Software Driver Package (HKLM\...\lvdrivers_12.10) (Version: 12.10.1110 - Logitech Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - KB2467175 (HKLM-x32\...\{a0fe116e-9a8a-466f-aee0-625cb7c207e3}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{6D52C408-B09A-4520-9B18-475B81D393F1}) (Version: 08.05.0818 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Mozilla Firefox 21.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 21.0 (x86 en-US)) (Version: 21.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 21.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95 - WildTangent) Hidden
OneTouch Version 3.0 (HKLM-x32\...\OneTouch Version 3.0) (Version: Version 3.0 - Visioneer Inc.)
Overtone Analyzer Premium Trial 3.2.2 (HKLM-x32\...\{T1047DB6-2ED4-4C3B-A513-F905288B285B}_is1) (Version: - Sygyt Software)
Panopticum Engraver 1.0 (HKLM-x32\...\Panopticum Engraver 1.0_is1) (Version: - )
PaperPort 7.0 (HKLM-x32\...\PaperPort 7.0) (Version: - )
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4725 - CyberLink Corp.)
Power2Go (x32 Version: 6.1.4725 - CyberLink Corp.) Hidden
QuickTime (HKLM-x32\...\{7BE15435-2D3E-4B58-867F-9C75BED0208C}) (Version: 7.71.80.42 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.26.902.2010 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.69 - Realtek Semiconductor Corp.)
REAPER (HKLM-x32\...\REAPER) (Version: - )
Recovery Manager (x32 Version: 1.0.22 - Hewlett-Packard) Hidden
RiyazStudio (HKLM-x32\...\RiyazStudio) (Version: 1.44c - RiyazStudio)
RoxioNow Player (HKLM-x32\...\{0EDEB615-1A60-425E-8306-0E10519C7B55}) (Version: 1.9.5.101 - RoxioNow)
Scala (HKLM-x32\...\Scala) (Version: 2.32 - Manuel Op de Coul)
Sony ACID Music Studio 6.0b (HKLM-x32\...\{D4A823CA-D124-456E-9A98-71544A928897}) (Version: 6.0.81 - Sony)
Spectrum Analyzer pro Lab (HKLM-x32\...\Spectrum Analyzer pro Lab) (Version: Lab - PAS-Products)
Starry Night Backyard 4 (HKLM-x32\...\Starry Night Backyard 4) (Version: - )
StroboSoft (HKLM-x32\...\{8CE75486-43C4-4E62-B184-E9CC6D653D3A}) (Version: 2.0.1 - Peterson)
SwarPlug Demo (HKLM-x32\...\SwarPlug Demo) (Version: - )
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.11.0 - Synaptics Incorporated)
System Requirements Lab for Intel (HKLM-x32\...\{CD41B576-4787-4D5C-95EE-24A4ABD89CD3}) (Version: 4.4.24.0 - Husdawg, LLC)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Virtual Families (x32 Version: 2.2.0.95 - WildTangent) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.95 - WildTangent) Hidden
Wheel of Fortune 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinPatrol (HKLM\...\{007811BF-E310-4285-BFC6-55DB29B3EDDE}) (Version: 20.5.2011.0 - BillP Studios)
WinPatrol (HKLM\...\{302A1E2E-DD58-4673-BC99-9CC10EC2637A}) (Version: 24.3.2012 - BillP Studios)
WinRAR 4.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
Yahoo! Detect (HKLM-x32\...\YTdetect) (Version: - )
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3725795197-1872689522-2498876610-1000_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender\BlendThumb64.dll ()

==================== Restore Points =========================

10-09-2014 05:50:02 Scheduled Checkpoint
10-09-2014 06:08:40 Windows Update
12-09-2014 05:55:01 Windows Update
17-09-2014 05:16:53 Windows Update
25-09-2014 04:31:54 Scheduled Checkpoint
26-09-2014 16:32:56 avast! antivirus system restore point
27-09-2014 02:56:06 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 22:34 - 2009-06-10 17:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {203B0D7E-F0C3-466D-B5C9-F7A5A0063E46} - System32\Tasks\4801 => Wscript.exe C:\Users\bigdog\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {24C01797-3777-44AE-A16C-0F03451ECD9C} - System32\Tasks\{1B6BEA4B-6E17-4724-8C9F-011D2DB7339F} => Iexplore.exe http://ui.skype.com/ui/0/4.2.0.166.324/en/eula
Task: {35AD41D6-21F7-49E2-9954-588282C5FCAF} - System32\Tasks\HPCeeScheduleForBIGDOG-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {51D4E510-1325-40D9-B79D-EE1E9272D0AA} - System32\Tasks\HPCeeScheduleForbigdog => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {541D9BC9-1CB5-4BEF-A606-7EC593617FA6} - System32\Tasks\{DD0EA413-BFE3-4541-8592-4F74B8CDA7D1} => Iexplore.exe http://ui.skype.com/ui/0/4.2.0.166.324/ ... otincluded
Task: {5BF9108F-A61D-4FF2-9D4D-60949A12A121} - System32\Tasks\{5B1DE925-8EC5-48AB-A076-F9F386A2A884} => Iexplore.exe http://ui.skype.com/ui/0/4.2.0.166.324/ ... otincluded
Task: {64656AD5-FD24-4D41-A3CB-3EF8063E9130} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {6D0B6029-3235-40C2-ABAE-4EDD1A1B55F5} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-07-06] (CyberLink)
Task: {719ABACA-33D4-452D-9561-5B0030A32F25} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {B0843A54-A192-4D0B-BFF1-31D93F934B5E} - System32\Tasks\{40B63EC2-C214-4D5D-A7C9-C1EC4B513864} => Iexplore.exe http://ui.skype.com/ui/0/4.2.0.166.324/en/eula
Task: {C8B6C881-E6FD-4A57-A795-984EB92ABD88} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: {C8E70927-F562-4CC4-9BE4-1A798BDD6F05} - System32\Tasks\{9F0CD840-6536-4D5C-A592-377B8152B280} => C:\Program Files (x86)\Adobe\Photoshop 6.0\Photoshp.exe [2011-06-11] (Adobe Systems, Incorporated)
Task: {D21E5842-B766-4756-8F98-0EA11CE8364E} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2010-11-17] ()
Task: {EBCFA24C-584E-403F-B3EB-55BF6FF66FD3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-08-04] (Hewlett-Packard)
Task: {F12F964C-B6F3-478C-8878-BDC91F7FA316} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {F47DB51D-9DB0-4061-BE87-A969864C9A4C} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-30] (AVAST Software)
Task: {FBC1E5DB-88AE-4D1D-82D8-7B25F0AA9A42} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: C:\Windows\Tasks\HPCeeScheduleForBIGDOG-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForbigdog.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Loaded Modules (whitelisted) =============

2010-12-08 14:55 - 2010-12-08 14:55 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2010-07-21 18:33 - 2010-07-21 18:33 - 00267832 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll
2010-07-21 18:33 - 2010-07-21 18:33 - 00030264 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_LogicLayer.dll
2010-07-21 18:33 - 2010-07-21 18:33 - 00052280 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HardwareAccess.dll
2011-11-20 23:25 - 2011-05-28 23:05 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
2014-07-30 22:05 - 2014-07-30 22:05 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-09-29 17:17 - 2014-09-29 17:17 - 02867200 _____ () C:\Program Files\AVAST Software\Avast\defs\14092901\algo.dll
2011-06-06 09:22 - 2011-04-14 21:01 - 00548854 ____N () C:\Program Files (x86)\BillP Studios\WinPatrol\sqlite3.dll
2014-07-30 22:05 - 2014-07-30 22:05 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-09-27 09:12 - 2014-09-27 09:12 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\60e3de33f3b7204f87483b97989a13b6\IsdiInterop.ni.dll
2011-05-13 04:58 - 2011-01-12 17:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-3725795197-1872689522-2498876610-500 - Administrator - Disabled)
bigdog (S-1-5-21-3725795197-1872689522-2498876610-1000 - Administrator - Enabled) => C:\Users\bigdog
Guest (S-1-5-21-3725795197-1872689522-2498876610-501 - Limited - Disabled) => C:\Users\Guest
HomeGroupUser$ (S-1-5-21-3725795197-1872689522-2498876610-1002 - Limited - Enabled)
lindi (S-1-5-21-3725795197-1872689522-2498876610-1271 - Limited - Enabled) => C:\Users\lindi

==================== Faulty Device Manager Devices =============

Name: Bluetooth Device (Personal Area Network)
Description: Bluetooth Device (Personal Area Network)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: BthPan
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Realtek PCIe FE Family Controller
Description: Realtek PCIe FE Family Controller
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: RTL8167
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Processor: Intel(R) Pentium(R) CPU P6300 @ 2.27GHz
Percentage of memory in use: 41%
Total physical RAM: 3893.86 MB
Available physical RAM: 2262.68 MB
Total Pagefile: 7785.9 MB
Available Pagefile: 5946.25 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:450.04 GB) (Free:366.75 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:15.43 GB) (Free:1.93 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.08 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: F4AEA3A7)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15.4 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

==================== End Of Log ============================
heyoka05
Regular Member
 
Posts: 72
Joined: July 11th, 2007, 11:48 am

Re: infected with the cryptowall

Unread postby heyoka05 » September 29th, 2014, 9:48 pm

Not sure what caused the language to change at the end of FRST txt. it's English in the file on my system ??
Once again thanks for your time and trouble
take care
heyoka05
Regular Member
 
Posts: 72
Joined: July 11th, 2007, 11:48 am

Re: infected with the cryptowall

Unread postby wannabeageek » September 30th, 2014, 1:51 am

Hi heyoka05,

Don't run off on me now, we have much much more to do.

Do you know anything about the Group Policies set on your computer?

wbg
wannabeageek
MRU Master
MRU Master
 
Posts: 1871
Joined: November 23rd, 2009, 10:21 pm
Location: California

Re: infected with the cryptowall

Unread postby heyoka05 » September 30th, 2014, 12:11 pm

lol .....no I'm here until you say quit .....that's just a salutation

Do you know anything about the Group Policies set on your computer?
Honestly no .....though I'd love to understand more about computers , I probably know just enough to be dangerous lol
heyoka05
Regular Member
 
Posts: 72
Joined: July 11th, 2007, 11:48 am

Re: infected with the cryptowall

Unread postby wannabeageek » September 30th, 2014, 11:53 pm

Hi heyoka05,

Most of us use this as a closing or parting salutation.
Once again thanks for your time and trouble
take care


Step 1.
Registry Backup (TCRB)

Please download tweaking.com_registry_backup_setup.exe
Choose a download site for the installer... download and save it to your desktop.
Double click on the "...setup.exe" program and install the program. Let the install use the default installation. How to tutorial here.

Once the program is installed...
  1. Double click the Tweaking.com Registry Backup icon ... on your Desktop to open the program.
  2. Right mouse click the Tweaking.com Registry Backup icon, select "Run As Administrator" to run it... if UAC prompts, please allow it.
  3. It should open with the Backup Registry tab selected and all file options checked. Check any that are not already checked.
  4. Click on Backup Now to create a backup of your Registry.
    You'll see "Waiting for Volume Shadow Copy snapshot..." this may take a few moments, just be patient.
  5. When completed you should see a message saying something like ... Successful ??/?? Registry Files Backed Up ... ?? is total number of files, both numbers should match.
  6. Close and exit the program.

< STOP > If you did not successfully complete this step. < STOP > Do not continue with any other steps, post back and let me know!


Step 2.
  • Click Start
  • Type notepad.exe in the search programs and files box and click Enter.
  • A blank Notepad page should open.
    • Copy/Paste the contents of the quote box below into Notepad.
    • To make this easy, click the "select all" button then hover over the highlighted text and right mouse click to select copy.
Code: Select all
Task: {203B0D7E-F0C3-466D-B5C9-F7A5A0063E46} - System32\Tasks\4801 => Wscript.exe C:\Users\bigdog\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {C8B6C881-E6FD-4A57-A795-984EB92ABD88} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION

File:
C:\Users\bigdog\AppData\Local\Temp\launchie.vbs

ListPermissions:
HKLM\SOFTWARE\Policies .
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies .
HKCU\SOFTWARE\Policies .
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies .

    • Save it to the same folder/directory that FRST.exe is in, naming it as fixlist.txt

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system

  • Start FRST in a similar manner to when you ran a scan earlier, but this time when it opens ....
    • Press the Fix button once and wait.
    • FRST will process fixlist.txt
    • When finished, it will produce a log fixlog.txt in the same folder/directory as FRST64.exe
    • Please post me the log
wannabeageek
MRU Master
MRU Master
 
Posts: 1871
Joined: November 23rd, 2009, 10:21 pm
Location: California

Re: infected with the cryptowall

Unread postby heyoka05 » October 1st, 2014, 11:01 pm

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-09-2014
Ran by bigdog at 2014-10-01 22:59:01 Run:1
Running from C:\Users\bigdog\Desktop
Loaded Profile: bigdog (Available profiles: bigdog & lindi & Guest)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Task: {203B0D7E-F0C3-466D-B5C9-F7A5A0063E46} - System32\Tasks\4801 => Wscript.exe C:\Users\bigdog\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {C8B6C881-E6FD-4A57-A795-984EB92ABD88} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION

File:
C:\Users\bigdog\AppData\Local\Temp\launchie.vbs

ListPermissions:
HKLM\SOFTWARE\Policies .
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies .
HKCU\SOFTWARE\Policies .
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies .

*****************

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{203B0D7E-F0C3-466D-B5C9-F7A5A0063E46}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{203B0D7E-F0C3-466D-B5C9-F7A5A0063E46}" => Key deleted successfully.
C:\Windows\System32\Tasks\4801 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\4801" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C8B6C881-E6FD-4A57-A795-984EB92ABD88}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C8B6C881-E6FD-4A57-A795-984EB92ABD88}" => Key deleted successfully.
C:\Windows\System32\Tasks\0 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\0" => Key deleted successfully.

========================= File: ========================

"File:" not found.
====== End Of File: ======

"C:\Users\bigdog\AppData\Local\Temp\launchie.vbs" => File/Directory not found.

"ListPermissions: -> Listing permissions failed. File\Directory not found.
HKLM\SOFTWARE\Policies . => Error: No automatic fix found for this entry.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies . => Error: No automatic fix found for this entry.
HKCU\SOFTWARE\Policies . => Error: No automatic fix found for this entry.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies . => Error: No automatic fix found for this entry.

==== End of Fixlog ====
heyoka05
Regular Member
 
Posts: 72
Joined: July 11th, 2007, 11:48 am

Re: infected with the cryptowall

Unread postby wannabeageek » October 4th, 2014, 12:48 am

Hi heyoka05,

Lets try something a little different. Unfortunately this is going to take longer because of the method we are forced to use.

Create a batch file
  1. Open Notepad.
  2. Copy/paste the following text into the empty Notepad window.
    • To make this easy, click the "select all" button then hover over the highlighted text and right mouse click to select copy.
    Code: Select all
    @echo off
    reg.exe export HKLM\SOFTWARE\Policies  C:\Users\bigdog\Desktop\look.reg
    ren C:\Users\bigdog\Desktop\look.reg look.txt
    Notepad.exe %userprofile%\Desktop\look.txt
    Del look.txt
    Del %0
    
  3. Save the file as look.bat on your desktop. Save it with the file type... all types *.*.
  4. Right click on the file look.bat select "Run As Administrator" to run it. If prompted by UAC, please allow it.


Post the results found in look.txt.
wannabeageek
MRU Master
MRU Master
 
Posts: 1871
Joined: November 23rd, 2009, 10:21 pm
Location: California
Advertisement
Register to Remove

Next

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 287 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware