PC-HELP.CZ

Ahoj,
poprosím o kontrolu logu. Při přihlášení do Gmailu na mě vyškočil error -"Někdo zřejmě získal přístup k mému účtu Google prostředníctvím malwaru v některém z mých zařízenÍ." Prosím o kontrolu

PS: Blokovane URL v Hosts pls nemazat, mám je tam už dlouho.


Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.26

Platform: x64 Windows 10 (Home), 10.0.19045.2364 (ReleaseId: 2009), Service Pack: 0
Time: 06.01.2023 - 08:47 (UTC+01:00)
Language: OS: Czech (0x405). Display: Czech (0x405). Non-Unicode: Czech (0x405)
Elevated: Yes
Ran by: marti (group: Administrator) on MTA-M5RC994, FirstRun: yes

Chrome: 108.0.5359.125
Firefox: 108.0.1.8384
Internet Explorer: 11.0.19041.1566
Default: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --single-argument %1 (Google Chrome)

Boot mode: Normal

Running processes:
Number | Path
1 C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
1 C:\Program Files (x86)\GZ Systems\Atom\AtomService\Atom.SDK.WindowsService.exe
24 C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
1 C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
1 C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
1 C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
1 C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe
1 C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.UpdateService.exe
1 C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
1 C:\Program Files (x86)\TREZOR Bridge\trezord.exe
1 C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe
1 C:\Program Files\CCleaner\CCleaner64.exe
1 C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
1 C:\Program Files\DAEMON Tools Lite\DTAgent.exe
1 C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
1 C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
1 C:\Program Files\Dolby\Dolby DAX3\API\DAX3API.exe
3 C:\Program Files\Everything\Everything.exe
4 C:\Program Files\Fing\Fing.exe
1 C:\Program Files\Fing\resources\extraResources\fingagent.exe
7 C:\Program Files\Google\Drive File Stream\68.0.2.0\GoogleDriveFS.exe
2 C:\Program Files\Google\Drive File Stream\68.0.2.0\crashpad_handler.exe
1 C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
1 C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe
1 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
1 C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
1 C:\Program Files\Microsoft OneDrive\OneDrive.exe
2 C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
3 C:\Program Files\Privax\HMA VPN\Vpn.exe
1 C:\Program Files\Privax\HMA VPN\VpnSvc.exe
3 C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
1 C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
1 C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
1 C:\Program Files\SUPERAntiSpyware\SASCore64.exe
1 C:\Program Files\Sandboxie-Plus\SandMan.exe
1 C:\Program Files\Sandboxie-Plus\SbieSvc.exe
1 C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2248.9.0_x64__cv1g1gvanyjgm\WhatsApp.exe
1 C:\Program Files\WindowsApps\61545TimGrabinat.wAPPerforGmail_3.6.5.0_x64__rcb0qdgx4z9ca\EasyMail.UwpApp.exe
1 C:\Program Files\WindowsApps\61545TimGrabinat.wAPPerforGmail_3.6.5.0_x64__rcb0qdgx4z9ca\EasyMail.Win32\EasyMail.Win32.exe
1 C:\Program Files\WindowsApps\AppleInc.iCloud_13.4.101.0_x86__nzyj5cx40ttqa\iCloud\iCloudServices.exe
1 C:\Program Files\WindowsApps\AppleInc.iTunes_12127.1.57051.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe
1 C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
1 C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.14326.21146.0_x64__8wekyb3d8bbwe\onenoteim.exe
1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe
1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\NisSrv.exe
1 C:\ProgramData\iMobieDNA\AppleDriver\AppleMobileDeviceProcess.exe
5 C:\Users\marti\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\CefSharp.BrowserSubprocess.exe
1 C:\Users\marti\AppData\Local\0install.net\implementations\sha256new_WV5TRETXUBOQ6LZJA35T7HWCPRK37DFDDMEP2CXC765WUMVMIUYQ\DeepL.exe
1 C:\Users\marti\AppData\Local\FluxSoftware\Flux\flux.exe
1 C:\Users\marti\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe
2 C:\Users\marti\AppData\Local\Screencast-O-Matic\v2_x64\Screencast-O-Matic.exe
1 C:\Users\marti\AppData\Local\WebEx\WebEx64\Meetings\atmgr.exe
1 C:\Users\marti\AppData\Local\WebEx\WebexHost.exe
1 C:\Users\marti\Desktop\HiJackThis\HiJackThis.exe
1 C:\Windows\ImmersiveControlPanel\SystemSettings.exe
1 C:\Windows\System32\ApplicationFrameHost.exe
1 C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe
1 C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxEM.exe
1 C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_c2ac023763d5d3ad\OneApp.IGCC.WinService.exe
1 C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHDCPSvc.exe
1 C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHeciSvc.exe
1 C:\Windows\System32\Intel\DPTF\dptf_helper.exe
1 C:\Windows\System32\Intel\DPTF\esif_uf.exe
6 C:\Windows\System32\RuntimeBroker.exe
1 C:\Windows\System32\SearchIndexer.exe
1 C:\Windows\System32\SecurityHealthService.exe
1 C:\Windows\System32\SecurityHealthSystray.exe
1 C:\Windows\System32\SgrmBroker.exe
2 C:\Windows\System32\WUDFHost.exe
1 C:\Windows\System32\cmd.exe
3 C:\Windows\System32\conhost.exe
2 C:\Windows\System32\csrss.exe
1 C:\Windows\System32\ctfmon.exe
1 C:\Windows\System32\dasHost.exe
1 C:\Windows\System32\dllhost.exe
1 C:\Windows\System32\dwm.exe
2 C:\Windows\System32\fontdrvhost.exe
1 C:\Windows\System32\ibtsiva.exe
1 C:\Windows\System32\lsass.exe
1 C:\Windows\System32\oobe\UserOOBEBroker.exe
1 C:\Windows\System32\rundll32.exe
1 C:\Windows\System32\services.exe
1 C:\Windows\System32\sihost.exe
1 C:\Windows\System32\smartscreen.exe
1 C:\Windows\System32\smss.exe
1 C:\Windows\System32\spoolsv.exe
83 C:\Windows\System32\svchost.exe
2 C:\Windows\System32\taskhostw.exe
1 C:\Windows\System32\wbem\WmiPrvSE.exe
1 C:\Windows\System32\wininit.exe
1 C:\Windows\System32\winlogon.exe
1 C:\Windows\System32\wlanext.exe
1 C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
1 C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
1 C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
1 C:\Windows\explorer.exe
1 C:\webOS_TV_SDK\Resources\Jre\bin\javaw.exe

O1 - Hosts: 127.0.0.1 xvideos.com
O1 - Hosts: 127.0.0.1 pornhub.com
O1 - Hosts: 127.0.0.1 freevideo.cz
O1 - Hosts: 127.0.0.1 redtube.com
O1 - Hosts: 127.0.0.1 www.xvideos.com
O1 - Hosts: 127.0.0.1 www.pornhub.com
O1 - Hosts: 127.0.0.1 www. freevideo.cz
O1 - Hosts: 127.0.0.1 www.redtube.com
O1 - Hosts.ICS: .168.137.163 LGwebOSTV.mshome.net # 2020 9 1 14 10 36 30 653
O1 - Hosts.ICS: 192.168.137.8 Samsung.mshome.net # 2020 9 2 8 14 54 51 728
O1 - Hosts.ICS: 28
O2 - HKLM\..\BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\108.0.1462.54\BHO\ie_to_edge_bho_64.dll
O2 - HKLM\..\BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_241\bin\jp2ssv.dll
O2 - HKLM\..\BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_241\bin\ssv.dll
O2-32 - HKLM\..\BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\108.0.1462.54\BHO\ie_to_edge_bho.dll
O4 - Global User Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HMA VPN.lnk -> C:\Program Files (x86)\Privax\HMA VPN\Vpn.exe /nogui
O4 - Global User Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Stickies.lnk -> C:\Program Files (x86)\Stickies\stickies.exe
O4 - Global User Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TREZOR Bridge.lnk -> C:\Program Files (x86)\TREZOR Bridge\trezord.exe -v -l "%APPDATA%\TREZOR Bridge\trezord.log"
O4 - HKCU\..\Run: [AirBackupHelper] = C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe
O4 - HKCU\..\Run: [AllMyNotes] = C:\Program Files (x86)\AllMyNotes Organizer\AllMyNotes.exe -autostartup
O4 - HKCU\..\Run: [AnyTransToolHelper] = C:\Program Files (x86)\iMobie\AnyTrans\AnyTransToolHelper.exe
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] = C:\Program Files\CCleaner\CCleaner64.exe /MONITOR
O4 - HKCU\..\Run: [CiscoMeetingDaemon] = C:\Users\marti\AppData\Local\WebEx\WebexHost.exe /daemon /runFrom=autorun
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] = C:\Program Files\DAEMON Tools Lite\DTAgent.exe -autorun
O4 - HKCU\..\Run: [Fences] = c:\program files (x86)\stardock\fences\Fences.exe /startup
O4 - HKCU\..\Run: [Freedom] = C:\Program Files (x86)\Freedom\FreedomBlocker.exe
O4 - HKCU\..\Run: [GoogleDriveFS] = C:\Program Files\Google\Drive File Stream\68.0.2.0\GoogleDriveFS.exe --startup_mode
O4 - HKCU\..\Run: [HP ENVY 4500 series (NET)] = C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe -deviceID "CN44T1409W060D:NW" -scfn "HP ENVY 4500 series (NET)" -AutoStart 1
O4 - HKCU\..\Run: [OneDrive] = C:\Program Files\Microsoft OneDrive\OneDrive.exe /background (Microsoft)
O4 - HKCU\..\Run: [ProtonVPN] = C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe
O4 - HKCU\..\Run: [SandboxiePlus_AutoRun] = C:\Program Files\Sandboxie-Plus\SandMan.exe -autorun
O4 - HKCU\..\Run: [Screencast-O-Matic Tray] = C:\Users\marti\AppData\Local\Screencast-O-Matic\v2_x64\Screencast-O-Matic.exe tray
O4 - HKCU\..\Run: [electron.app.Fing] = C:\Program Files\Fing\Fing.exe --processStart "Fing.exe" --process-start-args "--hidden" (file missing)
O4 - HKCU\..\Run: [f.lux] = C:\Users\marti\AppData\Local\FluxSoftware\Flux\flux.exe /noshow
O4 - HKLM\..\Run: [Everything] = C:\Program Files\Everything\Everything.exe -startup
O4 - HKLM\..\Run: [Fences] = C:\Program Files (x86)\Stardock\Fences\Fences.exe /startup
O4 - HKLM\..\Run: [KeePass 2 PreLoad] = C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe --preload
O4 - HKLM\..\Run: [RTHDVCPL] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
O4 - HKLM\..\Run: [RtHDVBg_Dolby] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4
O4 - HKLM\..\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /LENOVO_DOLBYDRAGON
O4 - HKU\.DEFAULT\..\Run: [GoogleDriveFS] = C:\Program Files\Google\Drive File Stream\68.0.2.0\GoogleDriveFS.exe --startup_mode
O4 - HKU\S-1-5-19\..\Run: [GoogleDriveFS] = C:\Program Files\Google\Drive File Stream\68.0.2.0\GoogleDriveFS.exe --startup_mode
O4 - HKU\S-1-5-20\..\Run: [GoogleDriveFS] = C:\Program Files\Google\Drive File Stream\68.0.2.0\GoogleDriveFS.exe --startup_mode
O4 - HKU\S-1-5-21-2686290433-1851989028-3160282163-1021\..\Run: [AirBackupHelper] = C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe (User 'Visitor')
O4 - HKU\S-1-5-21-2686290433-1851989028-3160282163-1021\..\Run: [AnyTransToolHelper] = C:\Program Files (x86)\iMobie\AnyTrans\AnyTransToolHelper.exe (User 'Visitor')
O4 - HKU\S-1-5-21-2686290433-1851989028-3160282163-1021\..\Run: [Fences] = c:\program files (x86)\stardock\fences\Fences.exe /startup (User 'Visitor')
O4 - HKU\S-1-5-21-2686290433-1851989028-3160282163-1021\..\Run: [MicrosoftEdgeAutoLaunch_E7AE71D0E9E7CF799E14C4AE10DD0FD3] = C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --no-startup-window --win-session-start /prefetch:5 (User 'Visitor')
O4 - HKU\S-1-5-21-2686290433-1851989028-3160282163-1021\..\RunOnce: [Delete Cached Standalone Update Binary] = C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Visitor\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (User 'Visitor')
O4 - HKU\S-1-5-21-2686290433-1851989028-3160282163-1021\..\RunOnce: [Delete Cached Update Binary] = C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Visitor\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (User 'Visitor')
O4 - HKU\S-1-5-21-2686290433-1851989028-3160282163-1021\..\RunOnce: [OneDrive] = C:\Program Files\Microsoft OneDrive\OneDrive.exe /background /setautostart (Microsoft) (User 'Visitor')
O4 - HKU\S-1-5-21-2686290433-1851989028-3160282163-1021\..\RunOnce: [Uninstall 19.043.0304.0013\amd64] = C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Visitor\AppData\Local\Microsoft\OneDrive\19.043.0304.0013\amd64" (User 'Visitor')
O4 - HKU\S-1-5-21-2686290433-1851989028-3160282163-1021\..\RunOnce: [Uninstall 19.043.0304.0013] = C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Visitor\AppData\Local\Microsoft\OneDrive\19.043.0304.0013" (User 'Visitor')
O4 - User Startup: C:\Users\marti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoUpdate_tv.bat
O4 - User Startup: C:\Users\marti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeepL auto-start.lnk -> C:\Users\marti\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe
O4-32 - HKLM\..\Run: [AirBackupHelper] = C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe
O4-32 - HKLM\..\Run: [KeyScrambler] = C:\Program Files (x86)\KeyScrambler\keyscrambler.exe /a
O4-32 - HKLM\..\Run: [Lightshot] = C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\Add to Google Photos Screensa&ver: (default) = C:\Windows\system32\GPhotos.scr (file missing)
O8 - Context menu item: HKU\S-1-5-21-2686290433-1851989028-3160282163-1021\..\Internet Explorer\MenuExt\Add to Google Photos Screensa&ver: (default) = C:\Windows\system32\GPhotos.scr (file missing)
O15 - Trusted Zone: https://deedu-files.sharepoint.com
O15 - Trusted Zone: https://deedu-myfiles.sharepoint.com
O17 - DHCP DNS 1: 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{4d161afd-f3c9-4150-827c-085301fb0062}: [NameServer] = 100.120.35.1
O21 - HKLM\..\ShellIconOverlayIdentifiers\ GoogleDriveCloudOverlayIconHandler: GoogleDriveCloudOverlayIconHandler - {A8E52322-8734-481D-A7E2-27B309EF8D56} - C:\Program Files\Google\Drive File Stream\68.0.2.0\drivefsext.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\ GoogleDriveMirrorBlacklistedOverlayIconHandler: GoogleDriveMirrorBlacklistedOverlayIconHandler - {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} - C:\Program Files\Google\Drive File Stream\68.0.2.0\drivefsext.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\ GoogleDrivePinnedOverlayIconHandler: GoogleDrivePinnedOverlayIconHandler - {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} - C:\Program Files\Google\Drive File Stream\68.0.2.0\drivefsext.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\ GoogleDriveProgressOverlayIconHandler: GoogleDriveProgressOverlayIconHandler - {C973DA94-CBDF-4E77-81D1-E5B794FBD146} - C:\Program Files\Google\Drive File Stream\68.0.2.0\drivefsext.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\ GoogleDriveBlacklisted: Google Drive Shell extension - {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} - C:\Program Files\Google\Drive\googledrivesync64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\ GoogleDriveSynced: Google Drive Shell extension - {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} - C:\Program Files\Google\Drive\googledrivesync64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\ GoogleDriveSyncing: Google Drive Shell extension - {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} - C:\Program Files\Google\Drive\googledrivesync64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\00asw: (no name) - {472083B0-C522-11CF-8763-00608CC02F24} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\00avg: (no name) - {472083B0-C522-11CF-8763-00608CC02F24} - (no file)
O22 - Task (.job): (Not scheduled) Driver Easy Scheduled Scan.job - C:\Program Files\Easeware\DriverEasy\DriverEasy.exe --scan
O22 - Task (.job): (Not scheduled) update-S-1-5-21-2686290433-1851989028-3160282163-1001.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
O22 - Task (.job): (Not scheduled) update-sys.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NoUACCheck
O22 - Task: (disabled) (update) \Microsoft\Windows\UpdateOrchestrator\Reboot_AC - C:\WINDOWS\system32\MusNotification.exe /RunOnAC RebootDialog (Microsoft)
O22 - Task: (disabled) (update) \Microsoft\Windows\UpdateOrchestrator\Reboot_Battery - C:\WINDOWS\system32\MusNotification.exe /RunOnBattery RebootDialog (Microsoft)
O22 - Task: (disabled) \Agent Activation Runtime\S-1-5-21-2686290433-1851989028-3160282163-1001 - C:\WINDOWS\System32\AgentActivationRuntimeStarter.exe
O22 - Task: (disabled) \Microsoft\Windows\Management\Autopilot\DetectHardwareChange - {62B2DD2C-F129-42EE-BF59-55D3FD21C215},DetectHardwareChange - C:\WINDOWS\System32\Autopilot.dll (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Autopilot\RemediateHardwareChange - {62B2DD2C-F129-42EE-BF59-55D3FD21C215},RemediateHardwareChange - C:\WINDOWS\System32\Autopilot.dll (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\Retry - C:\WINDOWS\system32\ProvTool.exe /turn 5 /source ProvRetryTask (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\RunOnReboot - C:\WINDOWS\system32\ProvTool.exe /turn 5 /source ContinueSessionTask (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - C:\WINDOWS\system32\usoclient.exe StartMaintenanceWork (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work - C:\WINDOWS\system32\usoclient.exe StartWork (Microsoft)
O22 - Task: (disabled) \S-1-5-21-2686290433-1851989028-3160282163-1001\DataSenseLiveTileTask - C:\WINDOWS\System32\DataUsageLiveTileTask.exe
O22 - Task: (telemetry) \Microsoft\Office\Office Subscription Maintenance - C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe (Microsoft)
O22 - Task: (telemetry) \Microsoft\Office\OfficeTelemetryAgentFallBack2016 - C:\Program Files\Microsoft Office\root\Office16\msoia.exe scan upload mininterval:2880 (Microsoft)
O22 - Task: (telemetry) \Microsoft\Office\OfficeTelemetryAgentLogOn2016 - C:\Program Files\Microsoft Office\root\Office16\msoia.exe scan upload (Microsoft)
O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\PcaPatchDbTask - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\PcaSvc.dll,PcaPatchSdbTask (Microsoft)
O22 - Task: (update) \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker - C:\WINDOWS\system32\MusNotification.exe (Microsoft)
O22 - Task: CCleaner Update - C:\Program Files\CCleaner\CCUpdate.exe
O22 - Task: CCleanerSkipUAC - marti - C:\Program Files\CCleaner\CCleaner.exe $(Arg0)
O22 - Task: Driver Easy Scheduled Scan - C:\Program Files\Easeware\DriverEasy\DriverEasy.exe --scan
O22 - Task: GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
O22 - Task: GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
O22 - Task: HMA VPN Update - C:\Program Files\Privax\HMA VPN\VpnUpdate.exe
O22 - Task: IcarusPrivaxVpnUpgrade - C:\Program Files\Privax\HMA VPN\setup\privax_vpn_online_setup.exe /silent /ShowVpnGui=0 /RestartUpdaterTaskName=IcarusPrivaxVpnUpgrade /RestartUpdaterAppExe="C:\Program Files\Privax\HMA VPN\setup\privax_vpn_online_setup.exe" (file missing)
O22 - Task: OneDrive Per-Machine Standalone Update Task - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe
O22 - Task: OneDrive Reporting Task-S-1-5-21-2686290433-1851989028-3160282163-1001 - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe /reporting
O22 - Task: OneDrive Reporting Task-S-1-5-21-2686290433-1851989028-3160282163-1017 - C:\Users\marti\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting (file missing)
O22 - Task: OneDrive Reporting Task-S-1-5-21-2686290433-1851989028-3160282163-1021 - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe /reporting
O22 - Task: OneDrive Reporting Task-S-1-5-21-2686290433-1851989028-3160282163-1022 - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe /reporting
O22 - Task: Opera scheduled Autoupdate 1592437018 - C:\Users\marti\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0)
O22 - Task: Opera scheduled assistant Autoupdate 1592437027 - C:\Users\marti\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate --component-name=assistant --component-path="C:\Users\marti\AppData\Local\Programs\Opera\assistant" $(Arg0)
O22 - Task: \Lenovo\Lenovo Service Bridge\S-1-5-21-2686290433-1851989028-3160282163-1001 - C:\Users\marti\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe
O22 - Task: \Microsoft\Office\Office Performance Monitor - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe (Microsoft)
O22 - Task: \Microsoft\Windows\AppListBackup\Backup - {E0DCC2CC-3354-45F2-8914-519E07809082} - C:\WINDOWS\system32\AppListBackupLauncher.dll (Microsoft)
O22 - Task: \Microsoft\Windows\Printing\PrinterCleanupTask - {C56F065E-DE49-4E42-BE7C-305C45609D25} - C:\WINDOWS\System32\PrinterCleanupTask.dll (Microsoft)
O22 - Task: \Microsoft\Windows\Shell\ThemesSyncedImageDownload - {79F8E185-4E45-4B74-8182-02AA430661E4} - C:\WINDOWS\System32\Themes.SsfDownload.ScheduledTask.dll (Microsoft)
O22 - Task: \Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB - C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
O22 - Task: \Privax\HMA VPN Bug Report - C:\Program Files\Privax\HMA VPN\AvBugReport.exe --filter "*.dmp;*.mdmp;icarus.log" --send "dumps|report" --silent --product 78 --programpath "C:\Program Files\Privax\HMA VPN" --configpath "C:\ProgramData\Privax\HMA VPN" --path "C:\ProgramData\Privax\HMA VPN\log" --path "C:\ProgramData\Privax\Icarus\Logs" --logpath "C:\ProgramData\Privax\HMA VPN\log" --guid fd7fda8c-604e-4ceb-9283-63a19c630776
O22 - Task: \Privax\HMA VPN Update - C:\Program Files\Common Files\Privax\Icarus\privax-vpn\icarus.exe /update:privax-vpn /silent
O22 - Task: \RobotFramework\Amazon - Firefox - D:\Robot Framework\win10firefox_taskscheduler.bat (file missing)
O22 - Task: \RobotFramework\Amazon - chrome - D:\Robot Framework\win10CHROME.bat (file missing)
O22 - Task: \RobotFramework\Amazon IE - D:\Robot Framework\win10IE_taskscheduler.bat (file missing)
O22 - Task: \RobotFramework\Everything - C:\Program Files\Everything\Everything.exe
O22 - Task: npcapwatchdog - C:\Program Files\Npcap\CheckStatus.bat
O22 - Task: update-S-1-5-21-2686290433-1851989028-3160282163-1001 - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
O22 - Task: update-sys - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
O23 - Service R2: Adobe Acrobat Update Service - (AdobeARMservice) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service R2: Atom Service - (AtomService) - C:\Program Files (x86)\GZ Systems\Atom\AtomService\Atom.SDK.WindowsService.exe
O23 - Service R2: Dolby DAX API Service - C:\Program Files\Dolby\Dolby DAX3\API\DAX3API.exe
O23 - Service R2: Everything - C:\Program Files\Everything\Everything.exe -svc
O23 - Service R2: Fing.Agent - C:\Program Files\Fing\resources\extraResources\fingagent.exe --servicemode Fing.Agent --agentroot "C:\Users\marti\AppData\Roaming"
O23 - Service R2: HMA VPN - (HmaProVpn) - C:\Program Files\Privax\HMA VPN\VpnSvc.exe
O23 - Service R2: HP Print Scan Doctor Service - (HPPrintScanDoctorService) - C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
O23 - Service R2: Intel Bluetooth Service - (ibtsiva) - C:\WINDOWS\system32\ibtsiva.exe
O23 - Service R2: Intel(R) Content Protection HDCP Service - (cplspcon) - C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHDCPSvc.exe
O23 - Service R2: Intel(R) Dynamic Platform and Thermal Framework service - (esifsvc) - C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe
O23 - Service R2: Intel(R) Graphics Command Center Service - (igccservice) - C:\WINDOWS\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_c2ac023763d5d3ad\OneApp.IGCC.WinService.exe
O23 - Service R2: Intel(R) HD Graphics Control Panel Service - (igfxCUIService2.0.0.0) - C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe
O23 - Service R2: Malwarebytes Service - (MBAMService) - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
O23 - Service R2: Realtek Audio Service - (RtkAudioService) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service R2: SAS Core Service - (!SASCORE) - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service R2: Sandboxie Service - (SbieSvc) - C:\Program Files\Sandboxie-Plus\SbieSvc.exe
O23 - Service R3: Disc Soft Lite Bus Service - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service R3: Intel(R) Content Protection HECI Service - (cphs) - C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHeciSvc.exe
O23 - Service R3: ProtonVPN Update Service - C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.UpdateService.exe
O23 - Service S2: OSSEC HIDS - (OssecSvc) - C:\Program Files (x86)\ossec-agent\ossec-agent.exe
O23 - Service S2: Služba Aktualizace Google (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
O23 - Service S3: CCleaner Performance Optimizer Service - (CCleanerPerformanceOptimizerService) - C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe
O23 - Service S3: FileSyncHelper - C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncHelper.exe
O23 - Service S3: Google Chrome Elevation Service (GoogleChromeElevationService) - (GoogleChromeElevationService) - C:\Program Files (x86)\Google\Chrome\Application\108.0.5359.125\elevation_service.exe
O23 - Service S3: Mozilla Maintenance Service - (MozillaMaintenance) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service S3: Office 64 Source Engine - (ose64) - c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
O23 - Service S3: OneDrive Updater Service - C:\Program Files\Microsoft OneDrive\22.238.1114.0002\OneDriveUpdaterService.exe
O23 - Service S3: ProtonVPN Service - C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPNService.exe
O23 - Service S3: QFX Software Update Service - (QFXUpdateService) - C:\Program Files (x86)\KeyScrambler\x64\QFXUpdateService.exe
O23 - Service S3: Služba Aktualizace Google (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc


--
End of file - Time spent: 32,5 sec. - 55920 bytes, CRC32: FFFFFFFF. Sign: 祔⡜

Tento HJT prosím.:
https://sourceforge.net/projects/hjt/fi ... e/download

Stáhni si ATF Cleaner
https://www.majorgeeks.com/mg/getmirror ... ner,2.html
Poklepej na ATF Cleaner.exe, klikni na select all, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome ,Edge , tak ATF nemusíš použít.


Stáhni si TFC
http://www.geekstogo.com/forum/files/fi ... -oldtimer/
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/
http://www.adlice.com/downloadprogress/
pro majitele win7 stáhni zde:
https://filehippo.com/download_adwcleaner/ ( nedávej aktualizaci!)

Ulož si ho na svojí plochu . Klikni na „Souhlasím“ k povrzení podmínek.
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Skenování“
Po skenu se objeví log , který se otevře. ( jinak je uložen systémovem disku jako) C:\AdwCleaner\Logs, jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
https://www.malwarebytes.com/mwb-download/thankyou/

na plochu , nainstaluj a spusť ho
-Pokud není program aktuální , klikni na možnost „Aktualizovat nyní“ či „Opravit nyní“.
- bude nalezena aktualizace a nainstaluje se.
- poté klikni na Spustit skenování
- po proběhnutí skenu se ti objeví hláška vpravo dole, tak klikni na Zobrazit zprávu a vyber Export a vyber Kopírovat do schránky a vlož sem celý log. Nebo klikni na „Textový soubor ( .txt)“ a log si ulož.
-jinak se log nachází v programu po kliknutí na „Zprávy“ , nebo je uložen zde: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs

- po té klikni na tlačítko Dokončit, a program zavři křížkem vpravo nahoře.
(zatím nic nemaž!).
Pokud budou problémy , spusť v nouz. režimu.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:38:44, on 06.01.2023
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.19041.1566)


Boot mode: Normal

Running processes:
C:\Users\marti\AppData\Local\FluxSoftware\Flux\flux.exe
C:\Users\marti\AppData\Local\WebEx\WebexHost.exe
C:\Program Files\WindowsApps\AppleInc.iCloud_13.4.101.0_x86__nzyj5cx40ttqa\iCloud\iCloudServices.exe
C:\Program Files\WindowsApps\61545TimGrabinat.wAPPerforGmail_3.6.5.0_x64__rcb0qdgx4z9ca\EasyMail.Win32\EasyMail.Win32.exe
C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
C:\Users\marti\Desktop\HiJackThis\HiJackThis.exe
C:\WINDOWS\SysWOW64\DllHost.exe
C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\FOXITREADER.EXE
C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\FoxitReaderConnectedPDFService.exe
C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
C:\Users\marti\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
O2 - BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\108.0.1462.54\BHO\ie_to_edge_bho.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O4 - HKLM\..\Run: [Lightshot] C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O4 - HKLM\..\Run: [AirBackupHelper] C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe
O4 - HKLM\..\Run: [KeyScrambler] C:\Program Files (x86)\KeyScrambler\keyscrambler.exe /a
O4 - HKCU\..\Run: [AllMyNotes] C:\Program Files (x86)\AllMyNotes Organizer\AllMyNotes.exe -autostartup
O4 - HKCU\..\Run: [Fences] "c:\program files (x86)\stardock\fences\Fences.exe" /startup
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [HP ENVY 4500 series (NET)] "C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN44T1409W060D:NW" -scfn "HP ENVY 4500 series (NET)" -AutoStart 1
O4 - HKCU\..\Run: [electron.app.Fing] C:\Program Files\Fing\Fing.exe --processStart "Fing.exe" --process-start-args "--hidden"
O4 - HKCU\..\Run: [f.lux] "C:\Users\marti\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
O4 - HKCU\..\Run: [OneDrive] "C:\Program Files\Microsoft OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [SandboxiePlus_AutoRun] "C:\Program Files\Sandboxie-Plus\SandMan.exe" -autorun
O4 - HKCU\..\Run: [AirBackupHelper] C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe
O4 - HKCU\..\Run: [AnyTransToolHelper] C:\Program Files (x86)\iMobie\AnyTrans\AnyTransToolHelper.exe
O4 - HKCU\..\Run: [GoogleDriveFS] C:\Program Files\Google\Drive File Stream\68.0.2.0\GoogleDriveFS.exe --startup_mode
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [ProtonVPN] C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe
O4 - HKCU\..\Run: [Freedom] C:\Program Files (x86)\Freedom\FreedomBlocker.exe
O4 - HKCU\..\Run: [Screencast-O-Matic Tray] C:\Users\marti\AppData\Local\Screencast-O-Matic\v2_x64\Screencast-O-Matic.exe tray
O4 - HKCU\..\Run: [CiscoMeetingDaemon] "C:\Users\marti\AppData\Local\WebEx\WebexHost.exe" /daemon /runFrom=autorun
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [GoogleDriveFS] C:\Program Files\Google\Drive File Stream\68.0.2.0\GoogleDriveFS.exe --startup_mode (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2686290433-1851989028-3160282163-1021\..\Run: [Fences] "c:\program files (x86)\stardock\fences\Fences.exe" /startup (User 'Visitor')
O4 - HKUS\S-1-5-21-2686290433-1851989028-3160282163-1021\..\RunOnce: [Delete Cached Update Binary] C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Visitor\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (User 'Visitor')
O4 - HKUS\S-1-5-18\..\Run: [GoogleDriveFS] C:\Program Files\Google\Drive File Stream\68.0.2.0\GoogleDriveFS.exe --startup_mode (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [GoogleDriveFS] C:\Program Files\Google\Drive File Stream\68.0.2.0\GoogleDriveFS.exe --startup_mode (User 'Default user')
O4 - Startup: AutoUpdate_tv.bat
O4 - Startup: DeepL auto-start.lnk = C:\Users\marti\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe
O4 - Global Startup: HMA VPN.lnk = C:\Program Files\Privax\HMA VPN\Vpn.exe
O4 - Global Startup: Stickies.lnk = C:\Program Files (x86)\Stickies\stickies.exe
O4 - Global Startup: TREZOR Bridge.lnk = C:\Program Files (x86)\TREZOR Bridge\trezord.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{4d161afd-f3c9-4150-827c-085301fb0062}: NameServer = 100.120.35.1
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Atom Service (AtomService) - Unknown owner - C:\Program Files (x86)\GZ Systems\Atom\AtomService\Atom.SDK.WindowsService.exe
O23 - Service: CCleaner Performance Optimizer Service (CCleanerPerformanceOptimizerService) - Unknown owner - C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHeciSvc.exe
O23 - Service: Intel(R) Content Protection HDCP Service (cplspcon) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHDCPSvc.exe
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_82e29 - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: Dolby DAX API Service - Unknown owner - C:\Program Files\Dolby\Dolby DAX3\API\DAX3API.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @oem15.inf,%ServiceDisplayName%;Intel(R) Dynamic Platform and Thermal Framework service (esifsvc) - Unknown owner - C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe (file missing)
O23 - Service: Everything - voidtools - C:\Program Files\Everything\Everything.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Fing.Agent - Fing Limited - C:\Program Files\Fing\resources\extraResources\fingagent.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) (GoogleChromeElevationService) - Google LLC - C:\Program Files (x86)\Google\Chrome\Application\108.0.5359.125\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HMA VPN (HmaProVpn) - Privax Limited - C:\Program Files\Privax\HMA VPN\VpnSvc.exe
O23 - Service: HP Print Scan Doctor Service (HPPrintScanDoctorService) - HP Inc. - C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
O23 - Service: @oem43.inf,%SERVICE_NAME%;Intel Bluetooth Service (ibtsiva) - Unknown owner - C:\WINDOWS\system32\ibtsiva (file missing)
O23 - Service: Intel(R) Graphics Command Center Service (igccservice) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_c2ac023763d5d3ad\OneApp.IGCC.WinService.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: OSSEC HIDS (OssecSvc) - Unknown owner - C:\Program Files (x86)\ossec-agent\ossec-agent.exe
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: ProtonVPN Service - Unknown owner - C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPNService.exe
O23 - Service: ProtonVPN Update Service - Unknown owner - C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.UpdateService.exe
O23 - Service: QFX Software Update Service (QFXUpdateService) - Unknown owner - C:\Program Files (x86)\KeyScrambler\x64\QFXUpdateService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Sandboxie Service (SbieSvc) - sandboxie-plus.com - C:\Program Files\Sandboxie-Plus\SbieSvc.exe
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 16255 bytes

Ještě to další.

# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-06-2023
# Duration: 00:00:02
# OS: Windows 10 (Build 19045.2364)
# Cleaned: 3
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

Deleted Seznam doplněk - Email - bgjpfhpjcgdppjbgnpnjllokbmcdllig

***** [ Chromium URLs ] *****

Deleted AVG Secure Search

***** [ Firefox (and derivatives) ] *****

Deleted BlockSite - Stay Focused & Control Your Time - {dd3d7613-0246-469d-bc65-2a3cc1668adc}

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1799 octets] - [06/01/2023 19:01:59]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########


==============
MALWAREBYTES:

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 06.01.23
Čas skenování: 19:08
Logovací soubor: 22c249ee-8ded-11ed-8bb3-60f677034f20.json

-Informace o softwaru-
Verze: 4.5.19.229
Verze komponentů: 1.0.1860
Aktualizovat verzi balíku komponent: 1.0.64335
Licence: Zkušební

-Systémová informace-
OS: Windows 10 (Build 19045.2364)
CPU: x64
Systém souborů: NTFS
Uživatel: MTA-M5RC994\marti

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 382435
Zjištěné hrozby: 0
Hrozby umístěné do karantény: 0
Uplynulý čas: 4 min, 22 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 0
(Nebyly zjištěny žádné škodlivé položky)

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)

WMI: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

Stáhni si Junkware Removal Tool by Thisisu
http://www.bleepingcomputer.com/downloa ... oval-tool/
https://downloads.malwarebytes.com/file/JRT-EOL
na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dlouho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.


Sophos Virus Removal Tool je praktický softwarový nástroj, který by mohl odstranit infekce, které antivirový program nedetekuje .
Stáhněte si ho zde z některého odkazu:
https://www.majorgeeks.com/mg/getmirror ... ool,1.html
https://www.majorgeeks.com/mg/get/sopho ... ool,1.html
http://www.majorgeeks.com/mg/getmirror/ ... ool,1.html
http://www.majorgeeks.com/mg/getmirror/ ... ool,2.html

Viry mohou zpomalit počítač, nebo se snaží ukrást vaše data, a ani nevíte , že je máte. Co potřebujete, je rychlý a snadný způsob, jak je najít a zbavit se jich, pokud již máte antivirový program v počítači nainstalován , můžete nainstalovat i nástroj Sophos Virus Removal , který identifikuje a vyčistí zbylé infekce, které mohl Váš antivirový program přehlédnout.
K použití Sophos Virus Removal Tool na něj poklepejte a stiskněte tlačítko „Start scanning“ . Pak bude Sophos Virus Removal Tool vyhledávat a odstraňovat viry, které najde. Může být vyžadován restart.
Pokud byly nalezeny viry , tak po skenu klikni na „Details…“ a potom na „View log file“. Zkopíruj celý log a vlož ho sem. Potom zavři „threat detail“ a klikni na „Start cleanup“.
Jinak se log nachází zde:
C:\ProgramData\Sophos\Sophos Virus Removal Tool\Logs

Stáhni si RogueKiller by Adlice Software
http://www.adlice.com/download/roguekiller/
http://www.bleepingcomputer.com/download/roguekiller/
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- - klikni na „Scan“. V novém okně nic neměň a klikni dole na „Start“ ve sloupci „Quick Scan“
- Program skenuje procesy PC. Po proskenování klikni na „Results “ , v dalším okně pak levým t. na „Export“ a vyber : „Text File“ , log nazvi třeb RK a ulož do dokumentů nebo na plochu. Otevři soubor a celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.
-pokud bude mít log více než 60.000 znaků , rozděl ho a vlož do více příspěvků

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Home x64
Ran by marti (Administrator) on 07.01.2023 at 23:02:43,89
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 10

Successfully deleted: C:\ProgramData\mntemp (File)
Successfully deleted: C:\ProgramData\thunder network (Folder)
Successfully deleted: C:\Users\marti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig (Folder)
Successfully deleted: C:\Users\Public\thunder network (Folder)
Successfully deleted: C:\WINDOWS\system32\Tasks\Driver Easy Scheduled Scan (Task)
Successfully deleted: C:\WINDOWS\system32\Tasks\update-S-1-5-21-2686290433-1851989028-3160282163-1001 (Task)
Successfully deleted: C:\WINDOWS\system32\Tasks\update-sys (Task)
Successfully deleted: C:\WINDOWS\Tasks\Driver Easy Scheduled Scan.job (Task)
Successfully deleted: C:\WINDOWS\Tasks\update-S-1-5-21-2686290433-1851989028-3160282163-1001.job (Task)
Successfully deleted: C:\WINDOWS\Tasks\update-sys.job (Task)



Registry: 2

Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.01.2023 at 23:06:15,65
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


sophos - no results

Program : RogueKiller Anti-Malware
Version : 15.6.5.0
x64 : Yes
Program Date : Jan 4 2023
Location : C:\Program Files\RogueKiller\RogueKiller64.exe
Premium : No
Company : Adlice Software
Website : https://www.adlice.com/
Contact : https://adlice.com/contact/
Website : https://adlice.com/download/roguekiller/
Operating System : Windows 10 (10.0.19045) 64-bit
64-bit OS : Yes
Startup : 0
WindowsPE : No
User : marti
User is Admin : Yes
Date : 2023/01/08 07:23:53
Type : Scan
Aborted : No
Scan Mode : Quick
Duration : 13
Found items : 0
Total scanned : 995
Signatures Version : 20230102_133153
Truesight Driver : Yes
Updates Count : 0
Arguments : -minimize

************************* Warnings *************************

************************* Processes *************************

************************* Modules *************************

************************* Services *************************

************************* Scheduled Tasks *************************

************************* Registry *************************

************************* WMI *************************

************************* Hosts File *************************
is_too_big : No
hosts_file_path : N/A


************************* Filesystem *************************

************************* Web Browsers *************************

************************* Antirootkit *************************

Vypni antivir i firewall, RogueKiller, Malwarebytes Antimalware, windowsDefender
Stáhni zoek:
https://uloz.to/file/nFH1LwSrGioP/zoek1-rar

Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
-pozor , náběh programu může trvat déle.
Do okna programu vlož skript níže:

klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .
Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log Zkopíruj sem celý obsah toho logu.
Pokud budou problémy , spusť zoek v nouz. režimu.


Stáhni si Zemana AntiMalware Free z tohoto odkazu:
https://www.zemana.com/Download/AntiMal ... .Setup.exe

(posuvník dolu na download)
a ulož si ho na plochu.
Poklepej na tento soubor na ploše a postupuj podle pokynů k instalaci programu.
Přijmi licenci k používání programu EULA , pokud se nabídne.
Pokud je k dispozici aktualizace programu , klepni na tlačítko „Update now“ ( aktualizovat nyní).
Zavři všechny otevřené soubory, složky a prohlížeče
Neměň žádné nastavení. Klikni na „Skenovat nyní“.
Po skenu lze vidět , zda jsou nějaké nákazy. Klikni na „Vykonat“ ( vymazat). Nákazy budou přemístěny do karantény.
Když je skenování dokončeno, klikni vlevo na „zprávy“ a pak na „otevři zprávu“ a zkopíruj sem celý obsah té zprávy.

Vlož nový log z HJT + informuj o problémech

PART 1:

Zoek.exe v5.0.0.2 Updated 03-May-2018(Online Version)
Tool run by marti on 08.01.2023 at 23:57:34,23.
Microsoft Windows 10 Home 10.0.19045 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\marti\Desktop\zoek1\zoek1\zoek (1).exe [Scan all users] [Script inserted]

==== System Restore Info ======================

09.01.2023 0:01:38 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Java deleted successfully
C:\PROGRA~3\Shared Space deleted successfully
C:\PROGRA~3\SoftwareDistribution deleted successfully
C:\PROGRA~3\ssh deleted successfully
C:\PROGRA~3\Validity deleted successfully
C:\Users\marti\AppData\Roaming\webex deleted successfully
C:\Users\marti\AppData\Local\GHISLER deleted successfully
C:\Users\Muj Navstevnik\AppData\Local\VirtualStore deleted successfully
C:\Users\Visitor\AppData\Local\PlaceholderTileLogoFolder deleted successfully
C:\Users\Visitor\AppData\Local\VirtualStore deleted successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Packages deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\n3zrpzpn.default-release-1\prefs.js:

Added to C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\n3zrpzpn.default-release-1\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

Deleted from C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\tcgmz2nt.default-release-1574705216060\prefs.js:

Added to C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\tcgmz2nt.default-release-1574705216060\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

Deleted from C:\Users\marti\AppData\Roaming\Zotero\Zotero\Profiles\0suvmhae.default\prefs.js:

Added to C:\Users\marti\AppData\Roaming\Zotero\Zotero\Profiles\0suvmhae.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\n3zrpzpn.default-release-1

user.js not found
---- Lines searchengine removed from prefs.js ----
user_pref("browser.pageActions.persistedActions", "{\"version\":1,\"ids\":[\"bookmark\",\"pinTab\",\"bookmarkSeparator\",\"copyURL\",\"emailLink\",\"a
---- FireFox user.js and prefs.js backups ----

prefs__0110_.backup

ProfilePath: C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\tcgmz2nt.default-release-1574705216060

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs__0110_.backup

ProfilePath: C:\Users\marti\AppData\Roaming\Zotero\Zotero\Profiles\0suvmhae.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs__0110_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Java not found
C:\Users\marti\AppData\Roaming\Daedalus Mainnet deleted
C:\Users\marti\AppData\Roaming\discord deleted
C:\Users\marti\AppData\Roaming\Fing deleted
C:\Users\marti\AppData\Roaming\Messenger deleted
C:\Users\marti\AppData\Roaming\Slack deleted
C:\Users\marti\AppData\Roaming\Sublime Text 2 deleted
C:\Users\marti\AppData\Roaming\TestReach deleted
C:\Users\marti\.android deleted
C:\PROGRA~2\COMMON~1\Wondershare deleted
C:\Users\marti\AppData\Roaming\Wondershare deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\marti\AppData\Local\updater.log deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\CM2430C.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\CM2476.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\CM29273.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\CM2BE01.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\CM2F63B.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tpm-1a94-34d8-bf492.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tpm-23f0-390c-2e98e2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tpm-52a4-b10-12d51a6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a242e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a2450.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a2452.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a2463.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a2475.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a2477.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a2489.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a249a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a24ac.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a24ae.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a24bf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a24d1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a24d3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a24e5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a24f6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a24f8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a250a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a251c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1120-2af4-a251e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2cc7bc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2cc80c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2cc84d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2cc86e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2cc88f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2cc8b1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2cc8e1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2cc912.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2cc943.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2cc964.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2cc9a5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2cc9e5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2cca45.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2ccb51.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2ccbd0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2ccc3f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2ccd89.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2ccdca.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-121c-358-2cce58.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a4f2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a590.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a5d1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a5f2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a604.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a625.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a636.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a667.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a689.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a69a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a6bb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a6cd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a6ee.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a73e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a760.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a791.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a7a2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a7e3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12c8-143c-a9a833.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9dd61.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9dd83.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9dd94.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9dda6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9ddb8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9ddba.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9ddcb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9dddd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9ddee.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9ddf0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9de02.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9de14.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9de25.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9de27.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9de39.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9de4b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9de4d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9de5e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-12cc-2930-9de70.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4c5b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4c8c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4c8e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4ca0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4cb1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4cc3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4cc5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4cd7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4ce8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4cfa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4d0b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4d1d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4d2f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4d40.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4d52.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4d64.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4d66.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4d77.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-134c-a70-9a4d89.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98ee4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f05.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f07.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f19.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f1b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f2c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f2e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f40.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f42.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f53.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f55.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f67.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f69.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f7b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f7d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98f8e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98fa0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98fb2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1510-3494-98fc3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f89a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f8ac.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f8bd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f8cf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f8d1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f8e3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f8f4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f906.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f908.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f91a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f92b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f93d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f93f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f950.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f962.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f974.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f985.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f987.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1594-ff8-9f999.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d002d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d00bc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d015a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d01c9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d01eb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d022b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d024c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d03b6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d050f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d06b7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d08fb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d090d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d095d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d09cd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d09ee.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d0a0f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d0a30.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d0c26.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-1c98-d0c96.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a7879.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a78a9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a78bb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a78cd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a78cf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a78e0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a78f2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a78f4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a7906.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a7917.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a7919.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a792b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a793c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a794e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a7950.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a7962.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a7973.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a7975.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b0-4058-a7987.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-118fc7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-119075.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-1190a6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-1190b8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-1190e9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-11910a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-11914a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-11918b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-1191db.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-11924a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-11928b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-1192eb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-11930c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-11934c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-11937d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-1193ae.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-1193ef.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-11941f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16b4-54-119441.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174c78.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174c99.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174cab.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174cad.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174cbe.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174cd0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174cd2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174ce3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174cf5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174cf7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174d09.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174d1a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174d1c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174d2e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174d40.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174d42.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174d53.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174d65.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16c8-15ac-174d86.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a316d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a317f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a3190.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a31a2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a31b4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a31c5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a31d7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a31e8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a320a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a321b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a321d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a322f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a3241.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a3243.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a3254.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a3266.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a3277.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a3289.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-16dc-29d0-a32aa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f927.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f948.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f94a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f95c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f96d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f96f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f981.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f983.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f995.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f9a6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f9a8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f9ba.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f9bc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f9cd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f9df.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f9e1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9f9f3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9fa04.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-17f4-14a8-9fa06.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad39c9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad39eb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad39fc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3a0e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3a1f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3a21.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3a33.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3a45.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3a47.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3a58.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3a6a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3a6c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3a7e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3a8f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3aa1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3aa3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3ab4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3ac6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1810-3398-3ad3ad8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-999e0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-999f2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99a03.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99a15.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99a17.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99a29.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99a5a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99a5c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99a6d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99a7f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99a81.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99a92.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99a94.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99aa6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99ab8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99aba.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99acb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99acd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-185c-246c-99adf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-17171f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-171731.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-171743.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-171745.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-171756.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-171758.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-17176a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-17176c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-17177e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-17178f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-171791.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-1717a3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-1717a5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-1717b6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-1717b8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-1717ca.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-1717cc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-1717de.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-18ac-3634-1717ef.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-acddc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-acdfd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-ace0f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-ace20.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-ace32.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-ace44.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-ace55.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-ace77.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-ace98.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-acea9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-acebb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-acedc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-aceee.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-acf00.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-acf11.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-acf23.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-acf34.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-acf36.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-191c-12f8-acf48.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-2387b1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-238840.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-238890.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-2388b1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-238940.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-238961.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-238983.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-2389a4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-2389b5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-2389d7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-238a27.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-238a38.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-238a4a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-238aaa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-238bd5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-238bf6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-238c17.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-238d71.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a30-2090-238e4e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8e04.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8e16.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8e27.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8e39.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8e4b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8e5c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8e8d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8e9f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8ec0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8ee1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8ef3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8f05.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8f16.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8f37.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8f49.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8f5b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8f6c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8f7e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a60-46d8-a8f90.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bd7dc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bdaeb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bdbc8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bdd60.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bddfe.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bdedb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bdf0c.tmp deleted

PART 2:

C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bdf8b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-be087.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-be0b8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-be108.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-be148.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-be244.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-be312.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-be3bf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-be46d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-be54a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-be656.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-be8a9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-be8ea.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bea73.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-beb30.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bebde.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bed38.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bede6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-beee2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bf00c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bf1b4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bf31e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bf33f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bf39f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bf3b0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bf3e1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bf402.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1a94-34d8-bf433.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95b8f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95b91.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95ba3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95ba5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95bb6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95bb8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95bba.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95bcc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95bce.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95be0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95be2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95be4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95bf5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95bf7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95c09.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95c0b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95c1c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95c1e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ad4-68c-95c30.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b27b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b29d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b2ae.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b2c0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b2d1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b302.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b314.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b326.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b337.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b358.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b37a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b38b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b39d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b3af.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b3c0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b3d2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b3e3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b3f5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1bac-31d8-30b407.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf7d7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf7f8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf80a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf81b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf82d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf82f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf841.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf852.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf864.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf866.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf877.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf889.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf89b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf8ac.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf8be.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf8c0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf8d2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf8e3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c10-1730-3cf8f5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba026.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba038.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba04a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba04c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba05d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba07f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba090.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba0b1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba0b3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba0d5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba0e6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba0f8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba0fa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba11b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba12d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba13e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba140.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba152.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1c8c-2848-3ba154.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a171f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a1730.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a1742.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a1754.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a1756.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a1767.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a1779.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a177b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a178c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a179e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a17a0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a17b2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a17b4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a17c5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a17d7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a17d9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a17eb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a17fc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ca8-4b70-a180e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-1601c7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-1601e9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-16020a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-16020c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-16021e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-16022f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-160241.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-160243.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-160254.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-160266.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-160278.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-1602a9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-1602ab.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-1602bc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-1602ce.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-1602d0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-1602e1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-1602f3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1d04-3bd0-1602f5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da45c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da47e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da480.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da491.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da493.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da4a5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da4b6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da4b8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da4ca.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da4cc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da4de.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da4ef.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da4f1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da503.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da505.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da517.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da528.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da52a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1dbc-26b0-da53c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a5e3a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a5e6b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a5e7c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a5ecc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a5fa9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a5fea.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a603a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a605b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a606d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a608e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a60af.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a60c1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a60e2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a60f4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a6105.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a6117.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a6129.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a612b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e58-c1c-a613c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fc3c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fc5d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fc8e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fc9f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fcd0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fce2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fcf4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fcf6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fd07.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fd19.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fd2a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fd3c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fd4e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fd5f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fd71.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fd83.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fd94.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fdc5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1e60-714-25fdc7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cbbe.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cbcf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cbe1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cbe3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cbf5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cbf7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cc08.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cc0a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cc1c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cc1e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cc30.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cc32.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cc43.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cc55.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cc57.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cc68.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cc6a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cc7c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ea4-bd4-9cc8e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1310bc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1310be.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1310e0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1310f1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131112.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131114.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131136.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131138.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131159.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-13115b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-13117c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-13118e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1311af.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1311c1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1311e2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1311e4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131205.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131217.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131228.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-13123a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-13128a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-13129c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1312bd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1312bf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1312e0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1312f2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131313.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131315.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131336.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131338.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-13135a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-13137b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-13139c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-13139e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1313bf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1313c1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1314dd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1314ee.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1314f0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131512.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131523.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131525.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131537.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131548.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-13154a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-13155c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-13156e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131570.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131581.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-131593.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1315a5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1315a7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1315b8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1315ca.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1315db.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1315ed.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1eb0-a94-1315ef.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c569.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c58a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c59c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c5ad.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c5bf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c5d1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c5d3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c5e4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c5f6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c608.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c619.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c62b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c63c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c63e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c650.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c662.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c673.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c685.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ec8-41f8-12c697.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a396c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a397e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a398f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a39a1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a39a3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a39b4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a39c6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a39c8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a39da.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a39eb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a39ed.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a39ff.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a3a11.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a3a13.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a3a24.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a3a36.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a3a47.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a3a49.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-1ee4-2d04-a3a5b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-122735.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-122756.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-122758.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-12276a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-12276c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-12277d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-12278f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-122791.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-1227c2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-1227c4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-1227d6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-1227d8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-1227e9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-1227eb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-1227fd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-12280e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-122810.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-122822.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20-d9c-122834.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c1b5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c234.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c245.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c312.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c343.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c393.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c441.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c50e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c55f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c5ce.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c5ef.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c64f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c68f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c6ef.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c7dc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c85b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c8da.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c90a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-20a8-3338-28c9f7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1ea822.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1ea94d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1ea96f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1ea9bf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1eaa1e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1eaa7e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1eaaaf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1eaae0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1eab40.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1eab80.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1eabd0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1eac20.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1eac61.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1eacc1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1ead40.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1ead71.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1eada1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1eadd2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-21dc-42f4-1eae32.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a52e0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a5301.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a5341.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a5353.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a5365.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a5386.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a5397.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a53a9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a53da.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a53dc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a53ee.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a542e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a545f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a5471.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a5473.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a5484.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a54a5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a54c7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2244-421c-a54d8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-986a6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-986b8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-986ba.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-986cc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-986dd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-986df.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-986f1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-98702.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-98704.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-98716.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-98728.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-9872a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-9873b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-9874d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-9874f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-98761.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-98772.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-98774.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22a4-5a4-98786.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d02b4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d02d5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d02e7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d02f9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d030a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d031c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d031e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d032f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d0341.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d0353.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d0364.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d0376.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d0388.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d038a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d039b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d03ad.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d03be.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d03d0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22b4-19cc-3d03e2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95dc2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95dd3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95de5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95df6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95e08.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95e1a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95e2b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95e2d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95e3f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95e41.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95e53.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95e55.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95e66.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95e78.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95e7a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95e8b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95e8d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95e9f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-22d8-30f8-95eb1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e75dc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e761c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e763d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e764f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e7670.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e7692.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e76c2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e7703.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e7734.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e7774.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e77a5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e77f5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e7865.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e7a99.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e7cdd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e7daa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e7e97.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e7f16.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e7fc4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e8014.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e80d1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e8141.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e823d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e82bc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e834a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e83aa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e8477.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e84f6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e8602.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e86b0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e87bb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e88c7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e8984.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e89e4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e8bbb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e8db1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e90df.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e91cc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e97f8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e9838.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e985a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e986b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e987d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e988f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e98cf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-23f0-390c-2e98e1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-109327.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-109349.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-10934b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-10935c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b568c2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b56950.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b56971.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b56983.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b56995.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b569a6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b569b8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b569d9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b569eb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b569fc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b56a0e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b56a2f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b56a41.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b56a62.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2420-2084-b56a74.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d0ee.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d11f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d140.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d161.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d192.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d1a4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d1b6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d215.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d237.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d258.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d279.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d29a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d2bc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d2ec.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d30e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d32f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d350.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d371.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2554-3608-20d393.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5d03.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5d24.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5d36.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5d47.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5d59.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5d5b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5d6c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5d6e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5d80.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5d92.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5d94.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5da5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5da7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5db9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5dcb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5dcd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5dde.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5df0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2564-3f0-d5df2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fa34.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fa46.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fa57.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fa79.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fa7b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fa8c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fa8e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33faa0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33faa2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fab3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fac5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fac7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fae8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fafa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fb69.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fb8b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fb9c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fbae.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-25cc-3b30-33fbb0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-10056e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-100580.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-100591.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-1005a3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-1005a5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-1005b7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-1005c8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-1005da.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-1005ec.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-1005ee.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-1005ff.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-100611.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-100622.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-100624.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-100636.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-100648.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-100659.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-10065b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-26c4-13b8-10066d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcaa7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcac9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcada.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcaec.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcaee.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcaff.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcb11.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcb23.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcb34.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcb36.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcb48.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcb5a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcb5c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcb6d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcb7f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcb81.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcb92.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcba4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2768-2198-fcba6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc4fb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc54b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc56c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc5cc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc60d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc66c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc6bc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc6ed.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc73d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc7fb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc85b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc8ab.tmp deleted

PART 3 ZOEK:

C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc8dc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc95b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1cc9e9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1ccaf5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1ccb84.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1ccbf3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2784-2430-1ccc24.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bca0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bcb2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bcc4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bcd5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bce7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bcf8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bd0a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bd1c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bd3d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bd3f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bd51.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bd62.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bd74.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bd85.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bd97.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bda9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bdab.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bdbc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-278c-2158-15bdce.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-3817f73.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-3817fa4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-3817fc5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-3817fe7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-3817ff8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-381801a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-381802b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-381804c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-381805e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-381807f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-3818091.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-38180b2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-38180c4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-38180e5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-38180f7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-3818118.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-3818158.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-38181c8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2828-29e8-38181f9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef22c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef3b4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef424.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef4a3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef4b4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef4d5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef535.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef585.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef624.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef76e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef7be.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef7df.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef800.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef822.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef833.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef845.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef866.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef8a7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-285c-65c-1ef8b8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a10e5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a1125.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a1127.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a1149.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a115a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a117c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a118d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a11ae.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a11d0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a11f1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a1212.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a1224.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a1235.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a1237.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a1249.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a126a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a126c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a127e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2864-2470-a1290.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3bbe.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3bcf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3be1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3bf3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3c04.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3c06.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3c18.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3c29.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3c3b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3c4d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3c5e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3c70.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3c82.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3c93.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3c95.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3ca7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3cb8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3cca.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28d0-8c0-a3ccc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99acb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99adc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99ade.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99af0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99af2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99b03.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99b05.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99b17.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99b19.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99b2b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99b2d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99b3e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99b40.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99b52.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99b54.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99b75.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99b87.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99b89.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e4-3b54-99b9a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d37ca.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3868.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3906.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3927.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3949.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3999.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d39d9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3a1a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3a4b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3a6c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3aac.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3ace.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3aef.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3b2f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3b60.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3b72.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3bb2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3be3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-28e8-4420-1d3c04.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e24d7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e2508.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e2529.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e253b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e254c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e256e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e257f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e2591.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e25a2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e25b4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e25c6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e25c8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e25d9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e25eb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e25fd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e260e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e262f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e2641.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2924-3894-e2662.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f60f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f650.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f662.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f683.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f694.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f6a6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f6b8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f6c9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f6fa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f70c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f71d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f73f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f7ae.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f7c0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f7f1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f802.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f823.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f825.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2958-297c-15f847.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170925.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170add.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170afe.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170b1f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170b41.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170b91.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170bb2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170be3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170bf4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170c83.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170d7f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170e2d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170e6d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170f1b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170f8b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170fbc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-170fdd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-17100e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2970-23d8-17102f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b44b2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b44c3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b44d5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b44e7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b44e9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b44fa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b450c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b450e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b4520.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b4531.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b4533.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b4545.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b4556.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b4558.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b456a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b457c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b457e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b458f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2994-4444-b45a1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97ea7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97eb9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97ecb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97ecd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97ecf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97ee0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97ef2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97ef4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97f06.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97f17.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97f19.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97f2b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97f2d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97f3e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97f50.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97f71.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97f73.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97f85.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-29bc-25b0-97f87.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-be9eb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-be9fc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-be9fe.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea00.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea12.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea14.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea16.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea28.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea2a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea3b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea3d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea4f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea60.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea72.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea74.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea86.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea88.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea99.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a10-321c-bea9b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f032.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f063.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f094.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f0a6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f0b7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f0d8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f0ea.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f0fc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f14c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f18c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f1ae.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f1bf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f1c1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f1d3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f1e4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f1f6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f208.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f229.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a24-3a04-29f23b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-399533.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-399593.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-3995b4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-3995c6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-3995d8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-3995f9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-399659.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-399707.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-399718.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-399768.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-39978a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-3997ca.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-3997eb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-39981c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-39982e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-39984f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-3998ce.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-399a37.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a5c-455c-399ad6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132dc8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132dd9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132deb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132dfd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132dff.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132e10.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132e12.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132e24.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132e35.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132e37.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132e49.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132e5b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132e5d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132e6e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132e70.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132e82.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132e94.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132e96.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2a70-32f4-132ea7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4a2c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4a4e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4a5f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4a71.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4a83.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4a94.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4aa6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4ab7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4ac9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4adb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4aec.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4afe.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4b10.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4b21.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4b23.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4b35.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4b46.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4b58.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2ad0-b50-5e4b6a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b632.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b634.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b646.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b648.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b64a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b64c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b65d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b65f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b661.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b673.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b675.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b677.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b689.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b68b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b68d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b68f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b6a0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b6a2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2b74-2b6c-9b6b4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-243566.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-2435a7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-2435a9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-2435da.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-2435fb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-24361c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-24362e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-24363f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-243661.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-243682.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-243693.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-2436a5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-2436b7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-2436c8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-2436ea.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-24370b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-24372c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-24374d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2bec-19d4-24375f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bba7e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbb1c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbb5d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbb9d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbbed.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbc2e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbc6e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbcbf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbd9b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbdcc.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbe1c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbe5d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbead.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbebf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbee0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbf20.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbf80.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbfb1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2c8c-264c-bbfe2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186ec0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186ef1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186f03.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186f14.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186f36.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186f47.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186f59.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186f5b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186f6c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186f7e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186f90.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186f92.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186fa3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186fb5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186fb7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186fc9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186fda.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186fec.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2d8c-438c-186fee.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b36c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b38e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b390.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b3a1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b3b3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b3c4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b3d6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b3e8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b409.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b41b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b42c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b43e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b44f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b461.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b482.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b494.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b4a6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b4b7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e34-211c-11b4c9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c7d9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c7fa.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c80c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c80e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c820.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c831.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c833.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c845.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c857.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c859.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c86a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c87c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c87e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c88f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c8a1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c8a3.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c8b5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c8c6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2e68-dac-82c8d8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e6d7.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e6f9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e70a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e71c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e73d.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e76e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e78f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e791.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e7b2.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e7b4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e7c6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e7d8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e7da.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e7eb.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e7fd.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e7ff.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e811.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e822.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f20-3f00-9e834.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ff57c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ff6f5.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ff784.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ff89f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ff8d0.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ff8e1.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ff903.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ff914.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ff926.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ff957.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ff988.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ff9a9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ff9f9.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ffa1a.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ffa4b.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ffa7c.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ffa8e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ffaed.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ffb1e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ffb5f.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-16ffbaf.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-cb0b6e.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-cb0b80.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-cb0b91.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-cb0b93.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-cb0bb4.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-cb0bb6.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-cb0bd8.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-cb0bda.tmp deleted
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\tw-2f3c-170c-cb0bfb.tmp deleted