Zpomalený ntb - kontrola logu

[Alishka]

RogueKiller Anti-Malware V14.7.3.0 (x64) [Sep 15 2020] (Free) by Adlice Software
mail : https://adlice.com/contact/
Website : https://adlice.com/download/roguekiller/
Operating System : Windows 10 (10.0.18362) 64 bits
Started in : Normal mode
User : Karolinka [Administrator]
Started from : C:\Program Files\RogueKiller\RogueKiller64.exe
Signatures : 20201001_073512, Driver : Loaded
Mode : Standard Scan, Scan -- Date : 2020/10/04 08:44:07 (Duration : 00:26:54)
Switches : -minimize

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Process Modules ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Services ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Tasks ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Registry ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
>>>>>> XX - Software
[PUP.Iolo (Potentially Malicious)] (X64) HKEY_USERS\S-1-5-21-3669847188-1399514790-620887643-1001\Software\Phoenix360 -- N/A -> Found
>>>>>> O2 - Browser Helper Objects
[PUP.Gen0 (Potentially Malicious)] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} -- N/A -> Found

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ WMI ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Hosts File ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Files ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
[PUP.Iolo (Potentially Malicious)] (file) mfc45.dat -- C:\Windows\SysWOW64\mfc45.dat -> Found
[PUP.Iolo (Potentially Malicious)] (folder) iolo -- C:\Users\Karolinka\AppData\Roaming\iolo -> Found
[PUP.Iolo (Potentially Malicious)] (folder) Phoenix360 -- C:\Users\Karolinka\AppData\Roaming\Phoenix360 -> Found
[Tr.Gen (Malicious)] (shortcut) Windows Movie Maker.lnk -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Movie Maker\Windows Movie Maker.lnk => C:\Program Files (x86)\Windows Live\Photo Gallery\WinMovieMaker.exe -> Found

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Web browsers ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[Reklama]

[Alishka]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Home x64
Ran by Karolinka (Administrator) on 03.10.2020 at 18:38:03,41
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 0




Registry: 7

Successfully deleted: HKCU\Software\Google\Chrome\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig (Registry Key)
Successfully deleted: HKCU\Software\Google\Chrome\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd (Registry Key)
Successfully deleted: HKCU\Software\Google\Chrome\Extensions\olfeabkoenfaoljndfecamgilllcpiak (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{15166C0D-0F30-4662-9684-7CF2C8680E2F} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A76DCF7E-25B0-417C-BEAB-573FF2128B90} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 03.10.2020 at 18:44:12,24
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[Alishka]

report po odstraneni v Rogue Killer



RogueKiller Anti-Malware V14.7.3.0 (x64) [Sep 15 2020] (Free) by Adlice Software
mail : https://adlice.com/contact/
Website : https://adlice.com/download/roguekiller/
Operating System : Windows 10 (10.0.18362) 64 bits
Started in : Normal mode
User : Karolinka [Administrator]
Started from : C:\Program Files\RogueKiller\RogueKiller64.exe
Signatures : 20201001_073512, Driver : Loaded
Mode : Standard Scan, Delete -- Date : 2020/10/04 09:46:19 (Duration : 00:26:54)
Switches : -minimize

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Delete ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
[PUP.Iolo (Potentially Malicious)] HKEY_USERS\S-1-5-21-3669847188-1399514790-620887643-1001\Software\Phoenix360 -- -> Deleted
[PUP.Gen0 (Potentially Malicious)] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} -- -> Deleted
[PUP.Iolo (Potentially Malicious)] mfc45.dat -- %SystemRoot%\SysWOW64\mfc45.dat -> Deleted
[PUP.Iolo (Potentially Malicious)] iolo -- %_Karolinka_appdata%\iolo -> Deleted
[PUP.Iolo (Potentially Malicious)] Phoenix360 -- %_Karolinka_appdata%\Phoenix360 -> Deleted
=> config -- C:\Users\KAROLI~1\AppData\Roaming\PHOENI~1\config -> Deleted
=> logs -- C:\Users\KAROLI~1\AppData\Roaming\PHOENI~1\logs -> Deleted
=> user-ebprofiles.json -- C:\Users\KAROLI~1\AppData\Roaming\PHOENI~1\USER-E~1.JSO -> Deleted
[Tr.Gen (Malicious)] Windows Movie Maker.lnk -- %programdata%\Microsoft\Windows\Start Menu\Programs\Windows Movie Maker\Windows Movie Maker.lnk (lnk => C:\Program Files (x86)\Windows Live\Photo Gallery\WinMovieMaker.exe []) -> Deleted

[jaro3]

Vypni antivir i firewall.
Stáhni Zoek.exe
http://download.bleepingcomputer.com/smeenk/zoek.exe

Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
-pozor , náběh programu může trvat déle.
Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .
Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log Zkopíruj sem celý obsah toho logu.
Pokud budou problémy , spusť zoek v nouz. režimu.


Stáhni si Zemana AntiMalware Free z tohoto odkazu:
https://www.zemana.com/Download/AntiMal ... .Setup.exe
a ulož si ho na plochu.
Poklepej na tento soubor na ploše a postupuj podle pokynů k instalaci programu.
Přijmi licenci k používání programu EULA , pokud se nabídne.
Pokud je k dispozici aktualizace programu , klepni na tlačítko „Update now“ ( aktualizovat nyní).
Můžeš si zatrhnout i vytvoření bodu obnovy:
Klikni na ozubené kolečko , poté na „Skenování“ a zatrhni „vytvářet body obnovy“.
Vrať se zpět ( klikni na domeček).
Zavři všechny otevřené soubory, složky a prohlížeče
Neměň žádné nastavení. Klikni na „Skenovat“.
Po skenu lze vidět , zda jsou nějaké nákazy. Klikni na „Další“. Nákazy budou přemístěny do karantény.
Když je skenování dokončeno, objeví se tisková zpráva , zkopíruj sem celý obsah té zprávy.
Jinak můžeš zprávy vidět , když klikneš vpravo nahoře na „ zprávy“.


Vlož nový log z HJT + informuj o problémech

[Alishka]

Zoek.exe v5.0.0.2 Updated 03-May-2018(Online Version)
Tool run by Karolinka on 04.10.2020 at 12:26:15,50.
Microsoft Windows 10 Home 10.0.18362 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Karolinka\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

04.10.2020 12:31:24 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\PROGRA~2\Softland deleted successfully
C:\PROGRA~2\VideoLAN deleted successfully
C:\PROGRA~2\Wondershare deleted successfully
C:\PROGRA~2\COMMON~1\AV deleted successfully
C:\PROGRA~2\COMMON~1\Nero deleted successfully
C:\Program Files\Fotolab deleted successfully
C:\PROGRA~3\Canon IJ Network Tool deleted successfully
C:\PROGRA~3\Comms deleted successfully
C:\PROGRA~3\SoftwareDistribution deleted successfully
C:\PROGRA~3\ssh deleted successfully
C:\PROGRA~3\SUPPORTDIR deleted successfully
C:\Users\Karolinka\AppData\Roaming\hps-install deleted successfully
C:\Users\Karolinka\AppData\Local\ActiveSync deleted successfully
C:\Users\Karolinka\AppData\Local\DBG deleted successfully
C:\Users\Karolinka\AppData\Local\MediaShow deleted successfully
C:\Users\Karolinka\AppData\Local\NetworkTiles deleted successfully
C:\Users\Karolinka\AppData\Local\WMTools Downloaded Files deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\DBG deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Maps deleted successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\DBG deleted successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\SharedWiFi deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3669847188-1399514790-620887643-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} deleted successfully
HKEY_USERS\S-1-5-21-3669847188-1399514790-620887643-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} deleted successfully
HKEY_USERS\S-1-5-21-3669847188-1399514790-620887643-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9} deleted successfully
HKEY_USERS\S-1-5-21-3669847188-1399514790-620887643-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DBC80044-A445-435B-BC74-9C25C1C588A9} deleted successfully
HKEY_USERS\S-1-5-21-3669847188-1399514790-620887643-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\AllMyTube@Wondershare.com deleted successfully

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ImControllerService deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ImControllerService deleted successfully

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Softland not found
C:\PROGRA~2\VideoLAN not found
C:\PROGRA~2\Wondershare not found
C:\Users\Karolinka\AppData\Local\Wondershare deleted
C:\Users\Karolinka\AppData\Roaming\calibre deleted
C:\Users\Karolinka\AppData\Roaming\discord deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Roaming\ETDCoInstaller.log deleted
C:\PROGRA~3\Avg_Update_0318tb_a00444 deleted
C:\PROGRA~3\Avg_Update_0517tb_a18180 deleted
C:\PROGRA~3\Avg_Update_0517tb_a18332 deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Karolinka\AppData\Local\oobelibMkey.log deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\CM258B8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d2ee0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d3338.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d33a7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d33d8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d3476.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d3497.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d34a9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d34da.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d34fb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d352c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d353e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d355f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d3590.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d369b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d36cc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d396e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d3a99.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d3c70.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1124-3ab0-1d3daa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba7e0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba840.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba861.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba873.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba894.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba8c5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba8c7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba8d9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba8ea.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba90c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba91d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba92f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba950.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba981.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba993.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba9b4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba9b6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba9c8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1314-3bac-ba9d9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-1847fe.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-18487d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-1848ae.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-18493d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-18495e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-184970.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-184991.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-1849c2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-1849f3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-184a14.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-184a45.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-184a66.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-184a78.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-184a99.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-184aca.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-184aeb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-184b0c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-184b5c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1430-1c78-184b6e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4984.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b49b5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b49d6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b49f8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4a09.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4a0b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4a1d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4a2e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4a30.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4a42.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4a73.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4a85.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4a96.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4ab7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4ac9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4aea.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4b2b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4b4c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-157c-300c-b4b6d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b5312.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b53df.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b5410.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b5431.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b5453.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b54e1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b5503.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b5524.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b5555.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b5576.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b5597.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b55c8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b5609.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b5639.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b565b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b56e9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b571a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b574b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17a0-2b08-4b575d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e5368.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e5483.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e54a4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e54d5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e5525.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e5546.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e55a6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e55d7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e5608.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e5629.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e56a8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e5708.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e5739.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e57a8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e57d9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e57fa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e581b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e584c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1b00-4b00-447e587d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b01f2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b0204.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b0206.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b0218.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b0239.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b024b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b025c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b026e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b0270.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b0281.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b0293.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b0295.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b02a7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b02b8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b02ba.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b02cc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b02fd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b035d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d38-38f4-3b036e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-140e16.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-140e85.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-140eb6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-140ef6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-140f18.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-140f29.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-140f4a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-140f6c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-140f8d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-140fcd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-140ffe.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-14103f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-141070.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-1410a1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-1410c2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-1410e3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-141114.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-141154.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-208-68-141185.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd4e2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd542.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd554.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd575.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd586.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd598.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd5b9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd5cb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd5ec.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd5fe.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd60f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd621.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd633.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd644.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd656.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd658.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd66a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd67b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2110-30c0-dd68d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-59722f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-597379.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-5973f8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-5974d5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-5975c1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-597631.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-597690.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-5976c1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-597702.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-597723.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-597792.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-5977d3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-597813.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-597863.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-5978c3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-5978f4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-597a0f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-597aec.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-226c-34d0-597c07.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-235eec.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-235f1d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-235f3e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-235f50.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-235f90.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-235fa2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-235fb3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-235fc5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-235fd7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-235fe8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-235ffa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-23601b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-23602d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-23603e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-236050.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-236071.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-236083.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-236095.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2424-3978-2360b6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b990b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b99a9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b99da.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9a2a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9a6b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9a9c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9aec.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9b2c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9b6d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9b8e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9bcf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9bff.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9c30.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9c90.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9cb1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9cf2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9d13.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9d54.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-254c-41b8-152b9d94.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fddc8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fde28.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fde49.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fde6b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fde8c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fde9d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fdede.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fdeff.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fdf7e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fdf9f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fdfd0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fdfe2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fe071.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fe0b1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fe120.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fe151.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fe173.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fe1a3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-17f4-3fe242.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6d9e4f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6d9ece.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6d9edf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6d9f00.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6d9f22.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6d9f33.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6da000.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6da012.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6da024.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6da035.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6da047.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6da1a1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6da1b2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6da202.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6da224.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6da235.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6da2e3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6da324.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-272c-335c-6da364.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-4782025e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-4782030c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-4782033d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-4782034f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-4782043b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-4782045c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-4782047e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-47820664.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-478206d3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-478206f5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-47820716.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-47820728.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-47820768.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-47820789.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-478207ba.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-47820943.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-47820954.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-47820985.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-27d8-3a70-478209a7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-42c245.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-42cef9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-42e2b2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-42e871.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-42ed06.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-42f006.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-42f41f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-42f6f0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-42fde7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-4309d0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-430bd5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-430d10.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-4311a6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-431522.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-43167c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-4316ec.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-431a2a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2950-3ea4-431de5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65b1d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65c29.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65cb7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65cd8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65d19.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65dc7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65dd8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65dfa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65e1b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65e3c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65e5d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65e7f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65ecf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65f0f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65fae.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db65fde.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db6602f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db660cd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ac-3da4-db660fe.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b96e099.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b96f0f6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b96f29e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b96f55f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b96f92a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b96fc68.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b96fdb2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b96ff2b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b970085.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b9702c9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b97050d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b97080d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b970a51.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b970b1e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b970c68.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b970c99.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b970ebe.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b971289.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2cac-3e8c-2b9713b4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d93ce.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d941e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d945f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d94af.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d94d0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d9501.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d9532.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d9572.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d95b3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d95d4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d9682.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d96a3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d96c5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d96d6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d96f7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d9786.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d97a7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d97d8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e98-12c0-582d97f9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d002d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d030d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d030f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d0321.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d0333.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d0344.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d0356.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d0368.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d036a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d037b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d039c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d03ae.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d04f8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d0519.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d051b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d052d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d053f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d057f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2fb4-1fc8-d05a0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-3923ad.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-3923de.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-39240f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-392420.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-392470.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-3924a1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-3924c3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-3924d4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-3924e6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-392507.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-392519.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-39252a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-39253c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-39254e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-39255f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-392571.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-392573.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-392594.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3138-34d8-3925a6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-edd98.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-edda9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-eddbb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-eddbd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-eddcf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-eddd1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-eddf2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-ede13.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-ede34.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-edec3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-edec5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-eded7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-eded9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-edeea.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-edeec.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-edefe.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-edf00.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-edf12.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3300-14e8-edf23.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-dee56.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-deeb6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-deec7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-deed9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-deeea.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-deefc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-deefe.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-def10.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-def50.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-def62.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-def73.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-def85.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-def97.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-defa8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-defaa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-defbc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-defdd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-defdf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3348-304c-df010.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-187316.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-1873d3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-187404.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-187416.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-187437.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-187468.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-187489.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-1874aa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-187568.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-187654.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-187695.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-1876d5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-187716.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-1877a4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-187852.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-1878b2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-1878d3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-187923.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-372c-20a4-187954.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49aa73.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49aad3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49aaf4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49ab15.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49ab37.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49ab48.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49ab5a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49ab6b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49ab8d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49ab9e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49abb0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49abd1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49abe3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49ac04.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49ac25.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49ac37.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49ac49.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49ac6a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3988-3c2c-49ac7b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-670846.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-670c8d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-670d89.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-670f50.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-671389.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-671456.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-6715cf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-67169c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-6716cd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-67174c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-67178c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-6717bd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-67184c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-6718fa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-67194a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-6719a9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-6719ea.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-671a1b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3a60-4b8-671ae8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3602.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3642.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3700.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3721.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3752.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b37a2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3811.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3842.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3883.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b38b3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3932.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3983.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b39c3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3a04.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3a73.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3b21.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3b71.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3be0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-3c94-3b68-36b3c21.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d85ac.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d8a71.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d8aa2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d8b40.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d8d07.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d8d76.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d8e44.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d903a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d90d8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d93d7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d9437.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d9514.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d95e1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d97a8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d9866.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d98a6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d98c7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d9918.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4208-490-145d9a42.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9ca2ee.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9cc731.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9cef9b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9cf8e4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9cfd79.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9d0079.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9d0137.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9d02a0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9d0736.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9d0b7e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9d0e2f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9d1064.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9d1160.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9d179b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9d19a1.tmp deleted

[Alishka]

C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9d1ccf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9d1fee.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9d231d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4218-29bc-9d2b1e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-142d46.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-142e23.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-142e73.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-142eb3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-142ec5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-142f15.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-142f56.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-142f77.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-142fb7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-142fd9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-143009.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-14303a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-14308a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-1430bb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-1430dd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-14311d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-14317d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-1431bd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-42c4-42c8-1431ee.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a0c9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a157.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a1a7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a3bd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a44b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a47c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a52a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a56a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a57c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a59d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a5de.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a5ff.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a611.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a622.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a634.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a665.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a6a5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a84d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-455c-31a0-8d9a9f5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f35cc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f361c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f366c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f36bc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f36de.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f36ef.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f3701.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f3713.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f3724.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f3736.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f3757.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f3778.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f378a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f37ab.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f37dc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f382c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f384d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f386f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-45e8-40a8-1f38a0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4b63.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4bd2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4c03.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4c24.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4c55.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4c96.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4cb7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4cd8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4d19.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4d3a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4d8a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4dda.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4e0b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4e7b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4efa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4f2a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4f6b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4f9c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4620-1810-862f4ffc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-76628fe9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-76629356.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-76629413.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-76629444.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-766295cd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-7662962d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-76629786.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-766297d6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-7662994f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-76629971.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-76629c32.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-76629c63.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-76629ce2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-76629d51.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-7662a199.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-7662a208.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-7662a2a6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-7662a596.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-4768-1ccc-7662a76d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-638f2c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-638fea.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-63900b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-63902c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-63905d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-63908e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-6390af.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-6390d0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-639101.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-639123.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-639153.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-639184.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-6391d4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-639225.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-639246.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-6392e4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-639305.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-639317.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-578-2d7c-6393b5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c67705.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c67736.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c67747.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c67749.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c6775b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c6776c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c6777e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c67790.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c677b1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c677c3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c677d4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c677d6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c677f7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c67809.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c6781b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c6782c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c6783e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c6786f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-5f8-2508-2c678bf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-683440d7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-683441d3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-68344223.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-68344235.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-68344246.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-68344268.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-683442b8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-683442e9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-683442fa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-6834431b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-6834438b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-683443db.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-6834443b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-6834446c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-6834447d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-6834449e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-683444cf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-6834452f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-714-4030-683445ae.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f7e6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f827.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f838.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f84a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f85c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f86d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f86f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f881.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f883.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f895.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f8b6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f8c7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f8c9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f8db.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f8dd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f8ef.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f8f1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f902.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-980-f7c-25f914.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-1076877c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-107687dc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-1076880d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-1076882e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-1076885f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-10768880.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-107688a1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-107688c3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-107688e4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-107688f5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-10768907.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-10768919.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-1076893a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-1076894c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-1076895d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-1076897e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-10768a4c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-10768a7c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-d20-4530-10768a8e.tmp deleted
C:\windows\SysNative\Tasks\Avast Secure Browser Heartbeat Task (Hourly) deleted
C:\windows\SysNative\Tasks\Avast Secure Browser Heartbeat Task (Logon) deleted
C:\windows\SysNative\Tasks\avast! Windows 10 Start Menu helper deleted
C:\windows\SysNative\Tasks\AvastUpdateTaskMachineCore deleted
C:\windows\SysNative\Tasks\AvastUpdateTaskMachineUA deleted
C:\WINDOWS\Syswow64\InstallUtil.InstallLog deleted
"C:\Users\Karolinka\AppData\Local\{90732045-E56A-4370-A6A7-ED10670840EB}" deleted
"C:\Users\Karolinka\AppData\Local\AVAST Software\APM\KarolinkaFfl2.dat" not deleted
"C:\Users\Karolinka\AppData\Local\AVAST Software\APM\Karolinka\kv_pam.db" not deleted
"C:\Users\Karolinka\AppData\Local\AVAST Software" not deleted
"C:\Users\Karolinka\AppData\Local\AVAST Software\APM" not deleted
"C:\Users\Karolinka\AppData\Local\AVAST Software\APM\Karolinka" not deleted

==== Orphaned Tasks deleted from Registry ======================

Avast Secure Browser Heartbeat Task (Hourly) deleted
Avast Secure Browser Heartbeat Task (Logon) deleted
avast Windows 10 Start Menu helper deleted
AvastUpdateTaskMachineCore deleted
AvastUpdateTaskMachineUA deleted
Lenovo\ImController deleted
Lenovo\ImController\Lenovo iM Controller Monitor deleted
Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance deleted
Lenovo\ImController\Plugins deleted
Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask deleted
Lenovo\ImController\TimeBasedEvents deleted
Lenovo\ImController\TimeBasedEvents\6110cb47-d54a-4e7d-855b-4e8338a8038d deleted
Lenovo\ImController\TimeBasedEvents\98e379c2-5173-465f-bc4c-cc2ddf197d72 deleted
Lenovo\ImController\TimeBasedEvents\b841531b-6810-4502-8c05-5cd1506cc9dc deleted
Lenovo\ImController\TimeBasedEvents\f6881800-229c-4eb5-956d-fe8621b0c6a1 deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"="C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi" [03.10.2020 18:11]
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"="C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi" [03.10.2020 18:11]

==== Firefox XPI-files found: ======================

- __MSG_res_PRODUCT_NAME_TRADEMARKED__ - C:\Program Files\mcafee\WebAdvisor\e10ssaffplg.xpi
- __MSG_PRODUCT_NAME__ - C:\Program Files\mcafee\WebAdvisor\e10ssbffplg.xpi
- __MSG_ext_FullName__ - C:\Program Files\mcafee\WebAdvisor\e10swbffplg.xpi

==== Chromium Look ======================

Google Chrome Version: 85.0.4183.121

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
efaidnbmnnnibpcajpcglclefindmkaj - No path found[]
eofcbnmajmjmplflapaojjnihcjkigck - No path found[]
fheoggkfdfchfphceeifdbepaooicaho - No path found[]
lifbcibllhkdhoafpjfnlhfpfgnpldfl - No path found[]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
fcfenmboojpjinhpgggodefccipikbpd - No path found[]
lmjegmlicamnimmfhcmpkclmigmmcbeh - No path found[]

OneTab - Karolinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\chphlpgkkbolifaimnlloiipkdnihall
Grammarly for Chrome - Karolinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen
Visor - Karolinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhpbckonakppajdgicbjdfokagjofnob
AlphaText - Karolinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpcaoilgpobajbkiamaojipjddpkkida
Mercury Reader - Karolinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\oknpjjbmpnndlpmnhmekjpocelpnlfdi
Chrome Media Router - Karolinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm
Grammarly for Microsoft Edge - Karolinka\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cnlefmmeadmemmdciolhbnfeacpdfbkd

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE13&ocid=UE13DHP"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{95B7759C-8C7F-4BF1-B163-73684A933233}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}] not found

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE13&ocid=UE13DHP"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{15166C0D-0F30-4662-9684-7CF2C8680E2F}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\SearchScopes\{15166C0D-0F30-4662-9684-7CF2C8680E2F} - http://www.bing.com/search?q={searchTerms}&form=PRLNC1&src=IE11TR&pc=LCTE
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{15166C0D-0F30-4662-9684-7CF2C8680E2F}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes\{15166C0D-0F30-4662-9684-7CF2C8680E2F} - http://www.bing.com/search?q={searchTerms}&form=PRLNC1&src=IE11TR&pc=LCTE
HKCU\SearchScopes "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15
HKCU\SearchScopes\{1C651D10-A23F-4228-960B-A49CB9914222} - http://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
HKCU\SearchScopes\{30C8F89C-15F9-4B39-8F2E-8F5DF900E983} - http://www.mapy.cz/?query={searchTerms}&sourceid=QuickSearch_12454
HKCU\SearchScopes\{32F5BD6B-06C6-4357-8052-A861DA31F1A0} - http://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_12454
HKCU\SearchScopes\{4983A08C-0353-4DB4-A1FD-185B5AF9611F} - http://www.novinky.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
HKCU\SearchScopes\{4FF9ECA3-26FE-4148-AAB7-58552032F1B9} - http://www.zbozi.cz/?q={searchTerms}&r=campmoz&sourceid=QuickSearch_12454
HKCU\SearchScopes\{564C62EF-65DF-4D94-9431-1004745B4C58} - http://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_12454
HKCU\SearchScopes\{9646CA4E-17A2-4E66-B843-B33B39D4B836} - http://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_12454
HKCU\SearchScopes\{DEE22504-1ED1-43F6-8DB1-A3A44A449343} - http://www.firmy.cz/?q={searchTerms}&sourceid=QuickSearch_12454

==== Reset Google Chrome ======================

C:\Users\Karolinka\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences was reset successfully
C:\Users\Karolinka\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Secure Preferences was reset successfully
C:\Users\Karolinka\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Karolinka\AppData\Local\Google\Chrome\User Data\Default\Preferences.bad was reset successfully
C:\Users\Karolinka\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Karolinka\AppData\Local\Microsoft\Edge\User Data\Default\Preferences was reset successfully
C:\Users\Karolinka\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences was reset successfully
C:\Users\Karolinka\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Web Data was reset successfully
C:\Users\Karolinka\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Karolinka\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
C:\Users\Karolinka\AppData\Local\Microsoft\Edge\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Karolinka\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Karolinka\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Edge Cache ======================

Edge Cache Emptied Successfully

==== Empty Chrome Cache ======================

C:\Users\Karolinka\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Cache emptied successfully
C:\Users\Karolinka\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Karolinka\AppData\Local\Microsoft\Edge\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=3459 folders=1683 1156472742 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Karolinka\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\KAROLI~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Karolinka\AppData\Local\AVAST Software\APM\KarolinkaFfl2.dat" not found
"C:\Users\Karolinka\AppData\Local\AVAST Software\APM\Karolinka\kv_pam.db" not found
"C:\Users\Karolinka\AppData\Local\AVAST Software" not found

==== EOF on 04.10.2020 at 13:26:16,08 ======================

[Alishka]

Scan Information
ProductName    :  Zemana AntiMalware
ScanStatus    :  Completed
ScanDate    :  10/4/2020 1:40:13 PM
ScanType    :  Smart Scan
ScanDuration    :  00:01:53
ScannedObjects    :  2213
DetectedObjects    :  2
ExcludedObjects    :  0
AutoUpload    :  True
OS    :  Windows 10 x64
Processor    :  4X Intel(R) Core(TM) i3-5005U CPU @ 2.00GHz
BIOSMode    :  UEFI
DomainInfo    :  WORKGROUP,False,NetSetupWorkgroupName
CUID    :  123A4AD226C64CAB251BBA


Detections
MD5    :  
Status    :  Scanned
Object    :  c:\users\karolinka\appdata\local\google\chrome\user data\default\extensions\dnollkdkikklpdganoecjcmmlddbennb
Publisher    :  
Size    :  0
Detection    :  HijackExt:ChromePlugin/Rozdělená obrazovka
Action    :  Delete
-----------------------------------------------------------------------
MD5    :  
Status    :  Scanned
Object    :  c:\users\karolinka\appdata\local\google\chrome\user data\default\extensions\lhpbckonakppajdgicbjdfokagjofnob
Publisher    :  
Size    :  0
Detection    :  HijackExt:ChromePlugin/Visor
Action    :  Delete
-----------------------------------------------------------------------

[Alishka]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:55:13, on 04.10.2020
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.18362.0001)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
C:\Program Files\WindowsApps\1CB77C17.17884BE984322_1.2.1.0_x86__th66h09paefv0\KakaoTalk.exe
C:\Users\Karolinka\Desktop\HijackThis.exe
C:\Users\Karolinka\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Users\Karolinka\AppData\Local\Microsoft\BingSvc\BingSvc.exe
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo15.msn.com/?pc=LCTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkI ... id=UE13DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\85.0.564.68\BHO\ie_to_edge_bho.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: McAfee WebAdvisor - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [Lenovo Smart Fingerprint] "C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Karolinka\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [BingSvc] C:\Users\Karolinka\AppData\Local\Microsoft\BingSvc\BingSvc.exe
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Discord] C:\Users\Karolinka\AppData\Local\Discord\app-0.0.307\Discord.exe
O4 - HKCU\..\Run: [Adobe Reader Synchronizer] "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe"
O4 - Startup: Poslat do aplikace OneNote.lnk = C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: AVG TuneUp.lnk = C:\Program Files (x86)\AVG\AVG TuneUp\TuneupUI.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra button: McAfee WebAdvisor - {48A61126-9A19-4C50-A214-FF08CB94995C} - C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll
O9 - Extra 'Tools' menuitem: McAfee WebAdvisor - {48A61126-9A19-4C50-A214-FF08CB94995C} - C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - (no file)
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Inc. - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\aswidsagent.exe
O23 - Service: Služba %1!s! Update (avast) (avast) - AVAST Software - C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Tools (avast! Tools) - AVAST Software - C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
O23 - Service: Služba %1!s! Update (avastm) (avastm) - AVAST Software - C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
O23 - Service: Avast Secure Browser Elevation Service (AvastSecureBrowserElevationService) - AVAST Software - C:\Program Files (x86)\AVAST Software\Browser\Application\85.0.5814.103\elevation_service.exe
O23 - Service: AvastWscReporter - AVAST Software - C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_86638 - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google LLC - C:\Program Files (x86)\Google\Chrome\Application\85.0.4183.121\elevation_service.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LenovoVantageService - Lenovo Group Ltd. - C:\Program Files (x86)\Lenovo\VantageService\3.3.115.0\LenovoVantageService.exe
O23 - Service: Lenovo Solution Center System Service (LSC.Services.SystemService) - Unknown owner - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe (file missing)
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
O23 - Service: McAfee WebAdvisor - McAfee, LLC - C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @oem5.inf,%WBFService_SvcDesc%;Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\WINDOWS\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @oem5.inf,%BioSyncService_SvcDesc%;BiometricSensorDataSynchronization (valWbioSyncSvc) - Unknown owner - C:\WINDOWS\system32\valWbioSyncSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 15060 bytes

[Alishka]

Pocitově je to rychlejší, ale stále trvá, než se nějaká aplikace otevře. Disk dost při každé akci šrotuje a docela hřeje.
Jestli myslíš, že je to OK, tak to necháme už být, aspoň trošku se to zrychlilo.

[jaro3]

Odinstaluj:
AVG TuneUp

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo15.msn.com/?pc=LCTE
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O1 - Hosts: ::1 localhost
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - (no file)


Stáhni si Memtest
http://www.stahuj.cz/utility_a_ostatni/ ... i/memtest/


Políčko , ve kterém je napsáno:
All unused RAM ponech.
-dej Start , nech nejméně 2h běžet , pokud bude po 2h stále 0 errors , jsou v pořádku.
V případě vyšších kapacit RAM je třeba Memtest spustit několikrát , pro 2GB ( jednotlivá největší kapacita RAM) 2x , pro 4GB 3x , pro 8Gb 4x ap.
poklepej na Memtest , pak znovu a znovu , do políček všech Memtestů napiš 2048 , pak dej u všech Memtestů "Start".