| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Avira free antivirus meldet TR/Dropper.A.25752Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
15.03.2015, 08:52
| #1 |
 |  Avira free antivirus meldet TR/Dropper.A.25752 Moin Moin Zusammen, hab gerade den Scan von Avira durchlaufen lassen und dabei wurde TR/Dropper.A.25752 gefunden. Es wäre super, wenn ihr mir helfen könnt Ich bin nach dem http://www.trojaner-board.de/69886-a...-beachten.html verfahren und hab hier die Files: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 07:41 on 15/03/2015 (Jens Name)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
GMER und FRST ist leider zu groß, deshalb als ZIP Vielen Dank für eure Hilfe Grüße winnie |
|
15.03.2015, 08:52
| #2 |
| /// the machine /// TB-Ausbilder    | Avira free antivirus meldet TR/Dropper.A.25752 Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann auf Arbeit keine Anhänge öffnen, danke.  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
15.03.2015, 08:54
| #3 |
| | Avira free antivirus meldet TR/Dropper.A.25752 Hi Schrauber, danke,...mach ich :-)
__________________Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-03-15 08:29:42
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD75 rev.01.0 698,64GB
Running: Gmer-19357.exe; Driver: C:\Users\JENSVA~1\AppData\Local\Temp\awldrfog.sys
---- User code sections - GMER 2.1 ----
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1420] C:\Windows\system32\kernel32.dll!RegSetValueExW 000000007750a400 7 bytes JMP 000000016fff0228
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1420] C:\Windows\system32\kernel32.dll!RegQueryValueExW 0000000077513f20 5 bytes JMP 000000016fff0180
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1420] C:\Windows\system32\kernel32.dll!RegDeleteValueW 000000007752ffb0 5 bytes JMP 000000016fff01b8
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1420] C:\Windows\system32\kernel32.dll!K32GetMappedFileNameW 000000007753f2e0 5 bytes JMP 000000016fff0110
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1420] C:\Windows\system32\kernel32.dll!K32EnumProcessModulesEx 0000000077569a30 7 bytes JMP 000000016fff00d8
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1420] C:\Windows\system32\kernel32.dll!K32GetModuleInformation 00000000775794c0 5 bytes JMP 000000016fff0148
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1420] C:\Windows\system32\kernel32.dll!RegSetValueExA 00000000775987e0 7 bytes JMP 000000016fff01f0
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1420] C:\Windows\system32\ole32.dll!CoCreateInstance 000007fefd867490 11 bytes JMP 000007fffd650228
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1420] C:\Windows\system32\ole32.dll!CoSetProxyBlanket 000007fefd87bf00 7 bytes JMP 000007fffd650260
.text C:\Windows\system32\Dwm.exe[1736] C:\Windows\system32\KERNELBASE.dll!FreeLibrary 000007fefd662db0 5 bytes JMP 000007fffd650180
.text C:\Windows\system32\Dwm.exe[1736] C:\Windows\system32\KERNELBASE.dll!GetModuleHandleW 000007fefd6637d0 7 bytes JMP 000007fffd6500d8
.text C:\Windows\system32\Dwm.exe[1736] C:\Windows\system32\KERNELBASE.dll!LoadLibraryExW 000007fefd668ef0 6 bytes JMP 000007fffd650148
.text C:\Windows\system32\Dwm.exe[1736] C:\Windows\system32\KERNELBASE.dll!GetModuleHandleExW 000007fefd67af60 5 bytes JMP 000007fffd650110
.text C:\Windows\system32\Dwm.exe[1736] C:\Windows\system32\GDI32.dll!D3DKMTQueryAdapterInfo 000007feff8c89f0 8 bytes JMP 000007fffd6501f0
.text C:\Windows\system32\Dwm.exe[1736] C:\Windows\system32\GDI32.dll!D3DKMTGetDisplayModeList 000007feff8cbe50 8 bytes JMP 000007fffd6501b8
.text C:\Windows\system32\Dwm.exe[1736] C:\Windows\system32\dxgi.dll!CreateDXGIFactory 000007fef9bbdc88 5 bytes JMP 000007fff9b900d8
.text C:\Windows\system32\Dwm.exe[1736] C:\Windows\system32\dxgi.dll!CreateDXGIFactory1 000007fef9bbde10 5 bytes JMP 000007fff9b90110
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[2660] C:\Windows\system32\kernel32.dll!RegSetValueExW 000000007750a400 7 bytes JMP 000000016fff0228
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[2660] C:\Windows\system32\kernel32.dll!RegQueryValueExW 0000000077513f20 5 bytes JMP 000000016fff0180
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[2660] C:\Windows\system32\kernel32.dll!RegDeleteValueW 000000007752ffb0 5 bytes JMP 000000016fff01b8
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[2660] C:\Windows\system32\kernel32.dll!K32GetMappedFileNameW 000000007753f2e0 5 bytes JMP 000000016fff0110
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[2660] C:\Windows\system32\kernel32.dll!K32EnumProcessModulesEx 0000000077569a30 7 bytes JMP 000000016fff00d8
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[2660] C:\Windows\system32\kernel32.dll!K32GetModuleInformation 00000000775794c0 5 bytes JMP 000000016fff0148
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[2660] C:\Windows\system32\kernel32.dll!RegSetValueExA 00000000775987e0 7 bytes JMP 000000016fff01f0
.text C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe[2696] C:\Windows\system32\ole32.dll!CoCreateInstance 000007fefd867490 11 bytes JMP 000007fffd650228
.text C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe[2696] C:\Windows\system32\ole32.dll!CoSetProxyBlanket 000007fefd87bf00 7 bytes JMP 000007fffd650260
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\kernel32.dll!RegQueryValueExW 00000000754f1f0e 7 bytes JMP 000000016e113dd0
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\kernel32.dll!RegSetValueExW 00000000754f5bad 7 bytes JMP 000000016e1140e0
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\kernel32.dll!RegSetValueExA 0000000075501409 7 bytes JMP 000000016e113f10
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\kernel32.dll!RegDeleteValueW 000000007550ea45 7 bytes JMP 000000016e113dc0
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\kernel32.dll!K32EnumProcessModulesEx 0000000075598e24 7 bytes JMP 000000016e113b50
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\kernel32.dll!K32GetModuleInformation 0000000075598ea9 5 bytes JMP 000000016e113c00
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\kernel32.dll!K32GetMappedFileNameW 00000000755991ff 5 bytes JMP 000000016e113b60
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleW 0000000075901d29 5 bytes JMP 000000016e113b00
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleExW 0000000075901dd7 5 bytes JMP 000000016e113ab0
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW 0000000075902ab1 5 bytes JMP 000000016e113c10
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\KERNELBASE.dll!FreeLibrary 0000000075902d17 5 bytes JMP 000000016e113890
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\USER32.dll!CreateWindowExW 0000000075968a29 5 bytes JMP 000000016e113370
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\USER32.dll!EnumDisplayDevicesA 0000000075974572 5 bytes JMP 000000016e113810
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\USER32.dll!EnumDisplayDevicesW 000000007598e567 5 bytes JMP 000000016e113880
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\USER32.dll!ChangeDisplaySettingsExW 00000000759b07d7 5 bytes JMP 000000016e113280
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\USER32.dll!DisplayConfigGetDeviceInfo 00000000759c7a5c 5 bytes JMP 000000016e113800
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\GDI32.dll!D3DKMTGetDisplayModeList 000000007588e96b 5 bytes JMP 000000016e1133e0
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\GDI32.dll!D3DKMTQueryAdapterInfo 000000007588eba5 5 bytes JMP 000000016e1133f0
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\ole32.dll!CoSetProxyBlanket 0000000076285ea5 5 bytes JMP 000000016e113320
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2352] C:\Windows\syswow64\ole32.dll!CoCreateInstance 00000000762b9d0b 5 bytes JMP 000000016e1132b0
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\KERNEL32.dll!RegQueryValueExW 00000000754f1f0e 7 bytes JMP 000000016e113dd0
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\KERNEL32.dll!RegSetValueExW 00000000754f5bad 7 bytes JMP 000000016e1140e0
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\KERNEL32.dll!RegSetValueExA 0000000075501409 7 bytes JMP 000000016e113f10
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\KERNEL32.dll!RegDeleteValueW 000000007550ea45 7 bytes JMP 000000016e113dc0
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\KERNEL32.dll!K32EnumProcessModulesEx 0000000075598e24 7 bytes JMP 000000016e113b50
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\KERNEL32.dll!K32GetModuleInformation 0000000075598ea9 5 bytes JMP 000000016e113c00
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\KERNEL32.dll!K32GetMappedFileNameW 00000000755991ff 5 bytes JMP 000000016e113b60
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleW 0000000075901d29 5 bytes JMP 000000016e113b00
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleExW 0000000075901dd7 5 bytes JMP 000000016e113ab0
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW 0000000075902ab1 5 bytes JMP 000000016e113c10
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\KERNELBASE.dll!FreeLibrary 0000000075902d17 5 bytes JMP 000000016e113890
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\GDI32.dll!D3DKMTGetDisplayModeList 000000007588e96b 5 bytes JMP 000000016e1133e0
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\GDI32.dll!D3DKMTQueryAdapterInfo 000000007588eba5 5 bytes JMP 000000016e1133f0
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\USER32.dll!CreateWindowExW 0000000075968a29 5 bytes JMP 000000016e113370
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\USER32.dll!EnumDisplayDevicesA 0000000075974572 5 bytes JMP 000000016e113810
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\USER32.dll!EnumDisplayDevicesW 000000007598e567 5 bytes JMP 000000016e113880
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\USER32.dll!ChangeDisplaySettingsExW 00000000759b07d7 5 bytes JMP 000000016e113280
.text C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe[2928] C:\Windows\syswow64\USER32.dll!DisplayConfigGetDeviceInfo 00000000759c7a5c 5 bytes JMP 000000016e113800
.text C:\Users\Jens name\AppData\Local\Akamai\netsession_win.exe[3084] C:\Windows\syswow64\kernel32.dll!RegQueryValueExW 00000000754f1f0e 7 bytes JMP 000000016e113dd0
.text C:\Users\Jens name\AppData\Local\Akamai\netsession_win.exe[3084] C:\Windows\syswow64\kernel32.dll!RegSetValueExW 00000000754f5bad 7 bytes JMP 000000016e1140e0
.text C:\Users\Jens name\AppData\Local\Akamai\netsession_win.exe[3084] C:\Windows\syswow64\kernel32.dll!RegSetValueExA 0000000075501409 7 bytes JMP 000000016e113f10
.text C:\Users\Jens name\AppData\Local\Akamai\netsession_win.exe[3084] C:\Windows\syswow64\kernel32.dll!RegDeleteValueW 000000007550ea45 7 bytes JMP 000000016e113dc0
.text C:\Users\Jens name\AppData\Local\Akamai\netsession_win.exe[3084] C:\Windows\syswow64\kernel32.dll!K32EnumProcessModulesEx 0000000075598e24 7 bytes JMP 000000016e113b50
.text C:\Users\Jens name\AppData\Local\Akamai\netsession_win.exe[3084] C:\Windows\syswow64\kernel32.dll!K32GetModuleInformation 0000000075598ea9 5 bytes JMP 000000016e113c00
.text C:\Users\Jens name\AppData\Local\Akamai\netsession_win.exe[3084] C:\Windows\syswow64\kernel32.dll!K32GetMappedFileNameW 00000000755991ff 5 bytes JMP 000000016e113b60
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\kernel32.dll!RegQueryValueExW 00000000754f1f0e 7 bytes JMP 000000016e113dd0
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\kernel32.dll!RegSetValueExW 00000000754f5bad 7 bytes JMP 000000016e1140e0
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\kernel32.dll!RegSetValueExA 0000000075501409 7 bytes JMP 000000016e113f10
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\kernel32.dll!RegDeleteValueW 000000007550ea45 7 bytes JMP 000000016e113dc0
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\kernel32.dll!K32EnumProcessModulesEx 0000000075598e24 7 bytes JMP 000000016e113b50
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\kernel32.dll!K32GetModuleInformation 0000000075598ea9 5 bytes JMP 000000016e113c00
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\kernel32.dll!K32GetMappedFileNameW 00000000755991ff 5 bytes JMP 000000016e113b60
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleW 0000000075901d29 5 bytes JMP 000000016e113b00
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleExW 0000000075901dd7 5 bytes JMP 000000016e113ab0
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW 0000000075902ab1 5 bytes JMP 000000016e113c10
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\KERNELBASE.dll!FreeLibrary 0000000075902d17 5 bytes JMP 000000016e113890
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\USER32.dll!CreateWindowExW 0000000075968a29 5 bytes JMP 000000016e113370
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\USER32.dll!EnumDisplayDevicesA 0000000075974572 5 bytes JMP 000000016e113810
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\USER32.dll!EnumDisplayDevicesW 000000007598e567 5 bytes JMP 000000016e113880
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\USER32.dll!ChangeDisplaySettingsExW 00000000759b07d7 5 bytes JMP 000000016e113280
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\USER32.dll!DisplayConfigGetDeviceInfo 00000000759c7a5c 5 bytes JMP 000000016e113800
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\GDI32.dll!D3DKMTGetDisplayModeList 000000007588e96b 5 bytes JMP 000000016e1133e0
.text C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe[3308] C:\Windows\syswow64\GDI32.dll!D3DKMTQueryAdapterInfo 000000007588eba5 5 bytes JMP 000000016e1133f0
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3356] C:\Windows\system32\kernel32.dll!RegSetValueExW 000000007750a400 7 bytes JMP 000000016fff0228
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3356] C:\Windows\system32\kernel32.dll!RegQueryValueExW 0000000077513f20 5 bytes JMP 000000016fff0180
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3356] C:\Windows\system32\kernel32.dll!RegDeleteValueW 000000007752ffb0 5 bytes JMP 000000016fff01b8
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3356] C:\Windows\system32\kernel32.dll!K32GetMappedFileNameW 000000007753f2e0 5 bytes JMP 000000016fff0110
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3356] C:\Windows\system32\kernel32.dll!K32EnumProcessModulesEx 0000000077569a30 7 bytes JMP 000000016fff00d8
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3356] C:\Windows\system32\kernel32.dll!K32GetModuleInformation 00000000775794c0 5 bytes JMP 000000016fff0148
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3356] C:\Windows\system32\kernel32.dll!RegSetValueExA 00000000775987e0 7 bytes JMP 000000016fff01f0
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3356] C:\Windows\system32\KERNELBASE.dll!FreeLibrary 000007fefd662db0 5 bytes JMP 000007fffd650180
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3356] C:\Windows\system32\KERNELBASE.dll!GetModuleHandleW 000007fefd6637d0 7 bytes JMP 000007fffd6500d8
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3356] C:\Windows\system32\KERNELBASE.dll!LoadLibraryExW 000007fefd668ef0 6 bytes JMP 000007fffd650148
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3356] C:\Windows\system32\KERNELBASE.dll!GetModuleHandleExW 000007fefd67af60 5 bytes JMP 000007fffd650110
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3356] C:\Windows\system32\GDI32.dll!D3DKMTQueryAdapterInfo 000007feff8c89f0 8 bytes JMP 000007fffd6501f0
.text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3356] C:\Windows\system32\GDI32.dll!D3DKMTGetDisplayModeList 000007feff8cbe50 8 bytes JMP 000007fffd6501b8
.text C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe[3400] C:\Windows\syswow64\kernel32.dll!RegQueryValueExW 00000000754f1f0e 7 bytes JMP 000000016e113dd0
.text C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe[3400] C:\Windows\syswow64\kernel32.dll!RegSetValueExW 00000000754f5bad 7 bytes JMP 000000016e1140e0
.text C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe[3400] C:\Windows\syswow64\kernel32.dll!RegSetValueExA 0000000075501409 7 bytes JMP 000000016e113f10
.text C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe[3400] C:\Windows\syswow64\kernel32.dll!RegDeleteValueW 000000007550ea45 7 bytes JMP 000000016e113dc0
.text C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe[3400] C:\Windows\syswow64\kernel32.dll!K32EnumProcessModulesEx 0000000075598e24 7 bytes JMP 000000016e113b50
.text C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe[3400] C:\Windows\syswow64\kernel32.dll!K32GetModuleInformation 0000000075598ea9 5 bytes JMP 000000016e113c00
.text C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe[3400] C:\Windows\syswow64\kernel32.dll!K32GetMappedFileNameW 00000000755991ff 5 bytes JMP 000000016e113b60
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\kernel32.dll!RegQueryValueExW 00000000754f1f0e 7 bytes JMP 000000016e113dd0
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\kernel32.dll!RegSetValueExW 00000000754f5bad 7 bytes JMP 000000016e1140e0
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\kernel32.dll!RegSetValueExA 0000000075501409 7 bytes JMP 000000016e113f10
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\kernel32.dll!RegDeleteValueW 000000007550ea45 7 bytes JMP 000000016e113dc0
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\kernel32.dll!K32EnumProcessModulesEx 0000000075598e24 7 bytes JMP 000000016e113b50
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\kernel32.dll!K32GetModuleInformation 0000000075598ea9 5 bytes JMP 000000016e113c00
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\kernel32.dll!K32GetMappedFileNameW 00000000755991ff 5 bytes JMP 000000016e113b60
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleW 0000000075901d29 5 bytes JMP 000000016e113b00
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleExW 0000000075901dd7 5 bytes JMP 000000016e113ab0
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW 0000000075902ab1 5 bytes JMP 000000016e113c10
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\KERNELBASE.dll!FreeLibrary 0000000075902d17 5 bytes JMP 000000016e113890
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\GDI32.dll!D3DKMTGetDisplayModeList 000000007588e96b 5 bytes JMP 000000016e1133e0
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\GDI32.dll!D3DKMTQueryAdapterInfo 000000007588eba5 5 bytes JMP 000000016e1133f0
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\USER32.dll!CreateWindowExW 0000000075968a29 5 bytes JMP 000000016e113370
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\USER32.dll!EnumDisplayDevicesA 0000000075974572 5 bytes JMP 000000016e113810
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\USER32.dll!EnumDisplayDevicesW 000000007598e567 5 bytes JMP 000000016e113880
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\USER32.dll!ChangeDisplaySettingsExW 00000000759b07d7 5 bytes JMP 000000016e113280
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\USER32.dll!DisplayConfigGetDeviceInfo 00000000759c7a5c 5 bytes JMP 000000016e113800
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\ole32.dll!CoSetProxyBlanket 0000000076285ea5 5 bytes JMP 000000016e113320
.text C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe[3684] C:\Windows\syswow64\ole32.dll!CoCreateInstance 00000000762b9d0b 5 bytes JMP 000000016e1132b0
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[3748] C:\Windows\syswow64\kernel32.dll!RegQueryValueExW 00000000754f1f0e 7 bytes JMP 000000016e113dd0
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[3748] C:\Windows\syswow64\kernel32.dll!RegSetValueExW 00000000754f5bad 7 bytes JMP 000000016e1140e0
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[3748] C:\Windows\syswow64\kernel32.dll!RegSetValueExA 0000000075501409 7 bytes JMP 000000016e113f10
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[3748] C:\Windows\syswow64\kernel32.dll!RegDeleteValueW 000000007550ea45 7 bytes JMP 000000016e113dc0
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[3748] C:\Windows\syswow64\kernel32.dll!K32EnumProcessModulesEx 0000000075598e24 7 bytes JMP 000000016e113b50
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[3748] C:\Windows\syswow64\kernel32.dll!K32GetModuleInformation 0000000075598ea9 5 bytes JMP 000000016e113c00
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[3748] C:\Windows\syswow64\kernel32.dll!K32GetMappedFileNameW 00000000755991ff 5 bytes JMP 000000016e113b60
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[3748] C:\Windows\syswow64\ole32.dll!CoSetProxyBlanket 0000000076285ea5 5 bytes JMP 000000016e113320
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[3748] C:\Windows\syswow64\ole32.dll!CoCreateInstance 00000000762b9d0b 5 bytes JMP 000000016e1132b0
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000075e61401 2 bytes JMP 7551b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000075e61419 2 bytes JMP 7551b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000075e61431 2 bytes JMP 75598ea9 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000075e6144a 2 bytes CALL 754f48ad C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000075e614dd 2 bytes JMP 755987a2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000075e614f5 2 bytes JMP 75598978 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000075e6150d 2 bytes JMP 75598698 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000075e61525 2 bytes JMP 75598a62 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000075e6153d 2 bytes JMP 7550fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000075e61555 2 bytes JMP 755168ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000075e6156d 2 bytes JMP 75598f61 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000075e61585 2 bytes JMP 75598ac2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000075e6159d 2 bytes JMP 7559865c C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000075e615b5 2 bytes JMP 7550fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000075e615cd 2 bytes JMP 7551b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000075e616b2 2 bytes JMP 75598e24 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[3576] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000075e616bd 2 bytes JMP 755985f1 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Google\Drive\googledrivesync.exe[2816] C:\Windows\syswow64\kernel32.dll!RegQueryValueExW 00000000754f1f0e 7 bytes JMP 000000016e113dd0
.text C:\Program Files (x86)\Google\Drive\googledrivesync.exe[2816] C:\Windows\syswow64\kernel32.dll!RegSetValueExW 00000000754f5bad 7 bytes JMP 000000016e1140e0
.text C:\Program Files (x86)\Google\Drive\googledrivesync.exe[2816] C:\Windows\syswow64\kernel32.dll!RegSetValueExA 0000000075501409 7 bytes JMP 000000016e113f10
.text C:\Program Files (x86)\Google\Drive\googledrivesync.exe[2816] C:\Windows\syswow64\kernel32.dll!RegDeleteValueW 000000007550ea45 7 bytes JMP 000000016e113dc0
.text C:\Program Files (x86)\Google\Drive\googledrivesync.exe[2816] C:\Windows\syswow64\kernel32.dll!K32EnumProcessModulesEx 0000000075598e24 7 bytes JMP 000000016e113b50
.text C:\Program Files (x86)\Google\Drive\googledrivesync.exe[2816] C:\Windows\syswow64\kernel32.dll!K32GetModuleInformation 0000000075598ea9 5 bytes JMP 000000016e113c00
.text C:\Program Files (x86)\Google\Drive\googledrivesync.exe[2816] C:\Windows\syswow64\kernel32.dll!K32GetMappedFileNameW 00000000755991ff 5 bytes JMP 000000016e113b60
.text C:\Program Files (x86)\Google\Drive\googledrivesync.exe[2816] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleW 0000000075901d29 5 bytes JMP 000000016e113b00
.text C:\Program Files (x86)\Google\Drive\googledrivesync.exe[2816] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleExW 0000000075901dd7 5 bytes JMP 000000016e113ab0
.text C:\Program Files (x86)\Google\Drive\googledrivesync.exe[2816] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW 0000000075902ab1 5 bytes JMP 000000016e113c10
.text C:\Program Files (x86)\Google\Drive\googledrivesync.exe[2816] C:\Windows\syswow64\KERNELBASE.dll!FreeLibrary 0000000075902d17 5 bytes JMP 000000016e113890
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\KERNEL32.dll!RegQueryValueExW 00000000754f1f0e 7 bytes JMP 000000016e113dd0
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\KERNEL32.dll!RegSetValueExW 00000000754f5bad 7 bytes JMP 000000016e1140e0
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\KERNEL32.dll!RegSetValueExA 0000000075501409 7 bytes JMP 000000016e113f10
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\KERNEL32.dll!RegDeleteValueW 000000007550ea45 7 bytes JMP 000000016e113dc0
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\KERNEL32.dll!K32EnumProcessModulesEx 0000000075598e24 7 bytes JMP 000000016e113b50
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\KERNEL32.dll!K32GetModuleInformation 0000000075598ea9 5 bytes JMP 000000016e113c00
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\KERNEL32.dll!K32GetMappedFileNameW 00000000755991ff 5 bytes JMP 000000016e113b60
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleW 0000000075901d29 5 bytes JMP 000000016e113b00
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleExW 0000000075901dd7 5 bytes JMP 000000016e113ab0
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW 0000000075902ab1 5 bytes JMP 000000016e113c10
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\KERNELBASE.dll!FreeLibrary 0000000075902d17 5 bytes JMP 000000016e113890
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\GDI32.dll!D3DKMTGetDisplayModeList 000000007588e96b 5 bytes JMP 000000016e1133e0
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\GDI32.dll!D3DKMTQueryAdapterInfo 000000007588eba5 5 bytes JMP 000000016e1133f0
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\USER32.dll!CreateWindowExW 0000000075968a29 5 bytes JMP 000000016e113370
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\USER32.dll!EnumDisplayDevicesA 0000000075974572 5 bytes JMP 000000016e113810
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\USER32.dll!EnumDisplayDevicesW 000000007598e567 5 bytes JMP 000000016e113880
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\USER32.dll!ChangeDisplaySettingsExW 00000000759b07d7 5 bytes JMP 000000016e113280
.text C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[5040] C:\Windows\syswow64\USER32.dll!DisplayConfigGetDeviceInfo 00000000759c7a5c 5 bytes JMP 000000016e113800
.text C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE[5100] C:\Windows\syswow64\ole32.dll!CoSetProxyBlanket 0000000076285ea5 5 bytes JMP 000000016e113320
.text C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE[5100] C:\Windows\syswow64\ole32.dll!CoCreateInstance 00000000762b9d0b 5 bytes JMP 000000016e1132b0
.text C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe[1336] C:\Windows\syswow64\KERNEL32.dll!RegQueryValueExW 00000000754f1f0e 7 bytes JMP 000000016e113dd0
.text C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe[1336] C:\Windows\syswow64\KERNEL32.dll!RegSetValueExW 00000000754f5bad 7 bytes JMP 000000016e1140e0
.text C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe[1336] C:\Windows\syswow64\KERNEL32.dll!RegSetValueExA 0000000075501409 7 bytes JMP 000000016e113f10
.text C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe[1336] C:\Windows\syswow64\KERNEL32.dll!RegDeleteValueW 000000007550ea45 7 bytes JMP 000000016e113dc0
.text C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe[1336] C:\Windows\syswow64\KERNEL32.dll!K32EnumProcessModulesEx 0000000075598e24 7 bytes JMP 000000016e113b50
.text C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe[1336] C:\Windows\syswow64\KERNEL32.dll!K32GetModuleInformation 0000000075598ea9 5 bytes JMP 000000016e113c00
.text C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe[1336] C:\Windows\syswow64\KERNEL32.dll!K32GetMappedFileNameW 00000000755991ff 5 bytes JMP 000000016e113b60
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\kernel32.dll!RegQueryValueExW 00000000754f1f0e 7 bytes JMP 000000016e113dd0
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\kernel32.dll!RegSetValueExW 00000000754f5bad 7 bytes JMP 000000016e1140e0
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\kernel32.dll!RegSetValueExA 0000000075501409 7 bytes JMP 000000016e113f10
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\kernel32.dll!RegDeleteValueW 000000007550ea45 7 bytes JMP 000000016e113dc0
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\kernel32.dll!K32EnumProcessModulesEx 0000000075598e24 7 bytes JMP 000000016e113b50
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\kernel32.dll!K32GetModuleInformation 0000000075598ea9 5 bytes JMP 000000016e113c00
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\kernel32.dll!K32GetMappedFileNameW 00000000755991ff 5 bytes JMP 000000016e113b60
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleW 0000000075901d29 5 bytes JMP 000000016e113b00
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleExW 0000000075901dd7 5 bytes JMP 000000016e113ab0
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW 0000000075902ab1 5 bytes JMP 000000016e113c10
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\KERNELBASE.dll!FreeLibrary 0000000075902d17 5 bytes JMP 000000016e113890
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\USER32.dll!CreateWindowExW 0000000075968a29 5 bytes JMP 000000016e113370
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\USER32.dll!EnumDisplayDevicesA 0000000075974572 5 bytes JMP 000000016e113810
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\USER32.dll!EnumDisplayDevicesW 000000007598e567 5 bytes JMP 000000016e113880
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\USER32.dll!ChangeDisplaySettingsExW 00000000759b07d7 5 bytes JMP 000000016e113280
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\USER32.dll!DisplayConfigGetDeviceInfo 00000000759c7a5c 5 bytes JMP 000000016e113800
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\GDI32.dll!D3DKMTGetDisplayModeList 000000007588e96b 5 bytes JMP 000000016e1133e0
.text C:\Program Files (x86)\Dell\Stage Remote\DMR.exe[2880] C:\Windows\syswow64\GDI32.dll!D3DKMTQueryAdapterInfo 000000007588eba5 5 bytes JMP 000000016e1133f0
.text C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe[7132] C:\Windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory 0000000077820038 5 bytes JMP 0000000169921986
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\kernel32.dll!RegQueryValueExW 00000000754f1f0e 7 bytes JMP 000000016e113dd0
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\kernel32.dll!RegSetValueExW 00000000754f5bad 7 bytes JMP 000000016e1140e0
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\kernel32.dll!RegSetValueExA 0000000075501409 7 bytes JMP 000000016e113f10
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\kernel32.dll!RegDeleteValueW 000000007550ea45 7 bytes JMP 000000016e113dc0
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\kernel32.dll!K32EnumProcessModulesEx 0000000075598e24 7 bytes JMP 000000016e113b50
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\kernel32.dll!K32GetModuleInformation 0000000075598ea9 5 bytes JMP 000000016e113c00
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\kernel32.dll!K32GetMappedFileNameW 00000000755991ff 5 bytes JMP 000000016e113b60
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleW 0000000075901d29 5 bytes JMP 000000016e113b00
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\KERNELBASE.dll!GetModuleHandleExW 0000000075901dd7 5 bytes JMP 000000016e113ab0
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW 0000000075902ab1 5 bytes JMP 000000016e113c10
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\KERNELBASE.dll!FreeLibrary 0000000075902d17 5 bytes JMP 000000016e113890
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\GDI32.dll!D3DKMTGetDisplayModeList 000000007588e96b 5 bytes JMP 000000016e1133e0
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\GDI32.dll!D3DKMTQueryAdapterInfo 000000007588eba5 5 bytes JMP 000000016e1133f0
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\USER32.dll!CreateWindowExW 0000000075968a29 5 bytes JMP 000000016e113370
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\USER32.dll!EnumDisplayDevicesA 0000000075974572 5 bytes JMP 000000016e113810
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\USER32.dll!EnumDisplayDevicesW 000000007598e567 5 bytes JMP 000000016e113880
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\USER32.dll!ChangeDisplaySettingsExW 00000000759b07d7 5 bytes JMP 000000016e113280
.text C:\Users\Jens name\Downloads\Gmer-19357.exe[6816] C:\Windows\syswow64\USER32.dll!DisplayConfigGetDeviceInfo 00000000759c7a5c 5 bytes JMP 000000016e113800
---- Threads - GMER 2.1 ----
Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [7412:5532] 000007fefb942bf8
Thread C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe [2780:3824] 0000000077852e65
Thread C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe [2780:6840] 0000000077853e85
Thread C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe [2780:7768] 0000000072178f48
Thread C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe [2780:3500] 0000000077853e85
Thread C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe [2780:5680] 0000000077853e85
---- Processes - GMER 2.1 ----
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Qt5Widgets.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 22:07:46) 0000000064da0000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Qt5Gui.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 22:07:44) 0000000064ab0000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\libGLESv2.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308](2015-03-04 22:08:06) 000000006da30000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Qt5Core.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 22:07:44) 00000000631b0000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\icuin52.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308] (ICU I18N DLL/The ICU Project)(2015-03-04 22:08:06) 000000004a900000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\icuuc52.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308] (ICU Common DLL/The ICU Project)(2015-03-04 22:08:06) 00000000044c0000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\icudt52.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308] (ICU Data DLL/The ICU Project)(2015-03-04 22:08:06) 000000004ad00000
Library c:\users\jensva~1\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpl4nsoj.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308](2015-03-14 21:00:47) 0000000003e70000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Qt5Network.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 22:07:44) 000000005c180000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Qt5WebKit.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 22:07:46) 000000005b190000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Qt5Quick.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 22:07:44) 000000005af70000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Qt5Qml.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 22:07:44) 000000005ad10000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Qt5Sql.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 22:07:44) 000000005c4c0000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\libEGL.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308](2015-03-04 22:08:06) 000000005e4e0000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Qt5WebKitWidgets.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 22:07:46) 000000005c440000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Qt5OpenGL.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 22:07:44) 000000005c400000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Qt5PrintSupport.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 22:07:44) 000000005c3b0000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308](2015-03-04 22:08:06) 000000005ac10000
Library C:\Users\Jens name\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll (*** suspicious ***) @ C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe [3308](2015-03-04 22:07:48) 000000005abd0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\python27.dll (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816] (Python Core/Python Software Foundation)(2015-03-14 20:59:09) 000000001e000000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\win32api.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:07) 000000001e8c0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\pywintypes27.dll (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:09) 000000001e7a0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\pythoncom27.dll (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:07) 00000000002b0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\_socket.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:08) 0000000000260000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\_ssl.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:09) 0000000010000000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\win32com.shell.shell.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:07) 000000001e800000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\_hashlib.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:09) 0000000002b00000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\wx._core_.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:07) 0000000003120000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\wxbase294u_vc90.dll (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816] (wxWidgets for MSW/wxWidgets development team)(2015-03-14 20:59:10) 0000000003250000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\wxbase294u_net_vc90.dll (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816] (wxWidgets for MSW/wxWidgets development team)(2015-03-14 20:59:10) 0000000000320000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\wxmsw294u_core_vc90.dll (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816] (wxWidgets for MSW/wxWidgets development team)(2015-03-14 20:59:10) 0000000003440000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\wxmsw294u_adv_vc90.dll (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816] (wxWidgets for MSW/wxWidgets development team)(2015-03-14 20:59:10) 00000000038e0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\wx._gdi_.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:09) 0000000004290000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\wx._windows_.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:09) 0000000004360000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\wxmsw294u_html_vc90.dll (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816] (wxWidgets for MSW/wxWidgets development team)(2015-03-14 20:59:11) 0000000004430000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\wx._controls_.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:08) 00000000046f0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\wx._misc_.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:06) 0000000004800000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\pysqlite2._sqlite.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:07) 00000000048c0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\_elementtree.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:07) 000000001d100000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\pyexpat.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:08) 00000000003d0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\_ctypes.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:07) 000000001d1a0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\win32file.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:08) 000000001ea10000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\win32security.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:08) 000000001ec80000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\hashobjs_ext.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:09) 0000000000630000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\win32gui.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:07) 000000001ea40000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\win32event.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:08) 000000001e9b0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\win32inet.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:08) 000000001eaa0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\win32crypt.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:06) 000000001e980000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\wx._html2.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:07) 0000000000890000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\wxmsw294u_webview_vc90.dll (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816] (wxWidgets for MSW/wxWidgets development team)(2015-03-14 20:59:10) 00000000008c0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\_multiprocessing.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:09) 00000000025a0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\_yappi.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:09) 00000000025b0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\win32process.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:09) 000000001ebf0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\unicodedata.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:08) 0000000005bf0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\wx._wizard.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:06) 00000000025c0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\win32pipe.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:09) 000000001eb90000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\select.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:08) 0000000002bd0000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\win32pdh.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:09) 000000001eb60000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\win32profile.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:08) 000000001ec20000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\win32ts.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:07) 000000001ed40000
Library C:\Users\JENSVA~1\AppData\Local\Temp\_MEI11442\wx._animate.pyd (*** suspicious ***) @ C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2816](2015-03-14 20:59:07) 0000000003a20000
Library C:\ProgramData\Kaspersky Lab\KSS2\DataRoot\Bases\Cache\klavemu.kdl.6e86633e63e607038cfa66d3f88c5d60 (*** suspicious ***) @ C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [7132] (Heuristics engine/Kaspersky Lab ZAO)(2014-08-24 11:45:31) 0000000057730000
Library C:\ProgramData\Kaspersky Lab\KSS2\DataRoot\Bases\Cache\kjim.kdl.d4e5f800473001b23e283d91de9755fb (*** suspicious ***) @ C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [7132] (Script Heuristics Engine/Kaspersky Lab ZAO)(2014-08-24 12:09:35) 00000000591a0000
Library C:\ProgramData\Kaspersky Lab\KSS2\DataRoot\Bases\Cache\qscan.kdl.b2ff916870cb69af1da84f4b229ebcec (*** suspicious ***) @ C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [7132] (Initial Scan Engine/Kaspersky Lab ZAO)(2014-12-16 21:36:48) 0000000071210000
Library C:\ProgramData\Kaspersky Lab\KSS2\DataRoot\Bases\Cache\pbs.kdl.eefcc4c76375abb2b40e8e5c00c7eccf (*** suspicious ***) @ C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [7132] (Extensional Scan Engine/Kaspersky Lab ZAO)(2014-09-30 11:27:01) 000000005eca0000
Library C:\ProgramData\Kaspersky Lab\KSS2\DataRoot\Bases\Cache\kavsys.kdl.6320146b23a54cc3a482468b7b46e6a4 (*** suspicious ***) @ C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [7132] (Set of system interfaces/Kaspersky Lab ZAO)(2014-12-16 21:36:58) 000000005f030000
---- EOF - GMER 2.1 ----
Gruß Winnie |
|
15.03.2015, 08:55
| #4 |
| | Avira free antivirus meldet TR/Dropper.A.25752 und dann doch FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Jens Name (administrator) on DELL-XPS502_JV on 15-03-2015 07:43:39
Running from C:\Users\Jens Name\Downloads
Loaded Profiles: Jens Name (Available profiles: Jens Name)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Akamai Technologies, Inc.) C:\Users\Jens Name\AppData\Local\Akamai\netsession_win.exe
(Ericsson AB) C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Akamai Technologies, Inc.) C:\Users\Jens Name\AppData\Local\Akamai\netsession_win.exe
(Google Inc.) C:\Users\Jens Name\AppData\Local\Google\Chrome\Application\chrome.exe
(Dropbox, Inc.) C:\Users\Jens Name\AppData\Roaming\Dropbox\bin\Dropbox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Google Inc.) C:\Users\Jens Name\AppData\Local\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Google Inc.) C:\Users\Jens Name\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Google Inc.) C:\Users\Jens Name\AppData\Local\Google\Chrome\Application\chrome.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
() C:\Program Files (x86)\Dell\Stage Remote\DMR.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssist\imstrayicon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Google Inc.) C:\Users\Jens Name\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jens Name\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2531624 2010-12-17] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6611048 2011-02-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2188904 2011-01-18] (Realtek Semiconductor)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-09-16] (Intel(R) Corporation)
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [4479648 2011-01-25] (Dell Inc.)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2034752 2011-08-08] ()
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [RoxWatchTray] => C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] => C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703280 2015-03-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [688984 2014-12-31] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [688984 2014-12-31] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Jens Name\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [WirelessManager] => C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe [194600 2010-07-28] (Ericsson AB)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3666224 2013-09-20] (Safer-Networking Ltd.)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [26232152 2015-02-19] (Google)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [Google Update] => C:\Users\Jens Name\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-22] (Google Inc.)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [GoogleChromeAutoLaunch_4B47325B8DBA69C1C38307FCBA185332] => C:\Users\Jens Name\AppData\Local\Google\Chrome\Application\chrome.exe [809288 2015-03-07] (Google Inc.)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\RunOnce: [Uninstall C:\Users\Jens Name\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jens Name\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64"
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\RunOnce: [Uninstall C:\Users\Jens Name\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jens Name\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328"
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [688984 2014-12-31] (Garmin Ltd or its subsidiaries)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [166568 2014-07-02] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [146480 2014-07-02] (NVIDIA Corporation)
AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [146480 2014-07-02] (NVIDIA Corporation)
Startup: C:\Users\Jens Name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Jens Name\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Jens Name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GM_DevUpdate.lnk
ShortcutTarget: GM_DevUpdate.lnk -> C:\Program Files (x86)\Speed-Link Vibration Joystick\GM_DevUpdate.exe ()
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens Name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens Name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens Name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens Name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens Name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens Name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens Name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens Name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
BootExecute: autocheck autochk * lsdeletesdnclean64.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {EC89F7B2-2E2F-48A0-9FF9-18C677BA5109} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {EC89F7B2-2E2F-48A0-9FF9-18C677BA5109} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKLM-x32 -> {EC89F7B2-2E2F-48A0-9FF9-18C677BA5109} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1320315719-3326968574-895728413-1001 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
SearchScopes: HKU\S-1-5-21-1320315719-3326968574-895728413-1001 -> {0E2CC663-24F1-4779-A6BD-FF67D6F88CA8} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1320315719-3326968574-895728413-1001 -> {EC89F7B2-2E2F-48A0-9FF9-18C677BA5109} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-20] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-20] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-20] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-20] (Oracle Corporation)
DPF: HKLM {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2013-10-09] (GARMIN Corp.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-10-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-10-20] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll [2014-12-11] ( Microsoft Corporation)
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2013-10-09] (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-10-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-10-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll [2014-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1320315719-3326968574-895728413-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Jens Name\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin HKU\S-1-5-21-1320315719-3326968574-895728413-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Jens Name\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin HKU\S-1-5-21-1320315719-3326968574-895728413-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Jens Name\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-08-08] (Unity Technologies ApS)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
Chrome:
=======
CHR HomePage: Profile 1 -> hxxp://www.google.de/
CHR StartupUrls: Profile 1 -> "hxxp://www.google.de/"
CHR DefaultSuggestURL: Profile 1 -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Jens Name\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (BILD Online) - C:\Users\Jens Name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\akelcgelcacijekkjghmpikldlfpjpho [2015-01-29]
CHR Extension: (Angry Birds) - C:\Users\Jens Name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2015-01-29]
CHR Extension: (Google Docs) - C:\Users\Jens Name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-29]
CHR Extension: (Google Drive) - C:\Users\Jens Name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-29]
CHR Extension: (YouTube) - C:\Users\Jens Name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-29]
CHR Extension: (GCVote) - C:\Users\Jens Name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\boingbkmoapffongfpcancmephhnmehp [2015-01-29]
CHR Extension: (Google Search) - C:\Users\Jens Name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-29]
CHR Extension: (AdBlock) - C:\Users\Jens Name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-01-29]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Jens Name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-11]
CHR Extension: (Google Wallet) - C:\Users\Jens Name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-29]
CHR Extension: (Gmail) - C:\Users\Jens Name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-29]
CHR HKU\S-1-5-21-1320315719-3326968574-895728413-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\JENSVA~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-01-31]
CHR HKU\S-1-5-21-1320315719-3326968574-895728413-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Users\Jens Name\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-03-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-03-04] (Avira Operations GmbH & Co. KG)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2552528 2015-01-30] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201424 2015-01-30] (Dell Inc.)
S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [451416 2014-12-31] (Garmin Ltd or its subsidiaries)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202080 2014-06-15] (Kaspersky Lab ZAO)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [88576 2011-09-15] () [File not signed]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [19288 2015-02-19] (Dell Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132120 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-14] (Avira Operations GmbH & Co. KG)
S3 CoachUsb; C:\Windows\System32\DRIVERS\CoachUsb.sys [78472 2009-05-06] (FotoNation Inc.)
S3 CoachVid; C:\Windows\System32\DRIVERS\CoachVid.sys [72968 2009-05-06] (FotoNation Inc.)
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2015-01-30] (Dell Computer Corporation)
S3 GMFilter; C:\Windows\SysWow64\Drivers\GMFilter.sys [19840 2004-12-30] () [File not signed]
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [113280 2010-02-03] (ITE )
R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69376 2011-10-28] (Lavasoft AB)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [299352 2014-07-02] (NVIDIA Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-09-11] ()
S3 Lavasoft Kernexplorer; \??\C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-15 07:43 - 2015-03-15 07:44 - 00028216 _____ () C:\Users\Jens Name\Downloads\FRST.txt
2015-03-15 07:43 - 2015-03-15 07:43 - 02095616 _____ (Farbar) C:\Users\Jens Name\Downloads\FRST64.exe
2015-03-15 07:43 - 2015-03-15 07:43 - 00000000 ____D () C:\Users\Jens Name\Desktop\tb
2015-03-15 07:43 - 2015-03-15 07:43 - 00000000 ____D () C:\FRST
2015-03-15 07:41 - 2015-03-15 07:41 - 00000488 _____ () C:\Users\Jens Name\Downloads\defogger_disable.log
2015-03-15 07:41 - 2015-03-15 07:41 - 00000000 _____ () C:\Users\Jens Name\defogger_reenable
2015-03-15 07:40 - 2015-03-15 07:41 - 01135104 _____ (Farbar) C:\Users\Jens Name\Downloads\FRST.exe
2015-03-15 07:40 - 2015-03-15 07:40 - 00050477 _____ () C:\Users\Jens Name\Downloads\Defogger.exe
2015-03-15 01:00 - 2015-03-15 01:00 - 00000000 _____ () C:\Windows\setuperr.log
2015-03-15 01:00 - 2015-03-15 01:00 - 00000000 _____ () C:\Windows\setupact.log
2015-03-12 21:32 - 2015-03-12 21:32 - 05325696 _____ (Piriform Ltd) C:\Users\Jens Name\Downloads\ccsetup503.exe
2015-03-11 16:27 - 2015-03-11 16:27 - 00000000 ____D () C:\Windows\system32\78QY3S1_SupportAssistClient_20150311162736
2015-03-11 08:08 - 2015-02-20 05:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 08:08 - 2015-02-20 05:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 08:08 - 2015-02-20 05:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 08:08 - 2015-02-20 05:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 08:08 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 08:08 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 08:08 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 08:08 - 2015-02-20 05:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 08:08 - 2015-02-20 04:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 08:08 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 08:08 - 2015-02-03 04:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 08:08 - 2015-02-03 04:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 08:08 - 2015-02-03 04:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 08:08 - 2015-02-03 04:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 08:08 - 2015-02-03 04:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 08:08 - 2015-02-03 04:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 08:08 - 2015-02-03 04:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 08:08 - 2015-02-03 04:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 08:08 - 2015-02-03 04:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 08:08 - 2015-02-03 04:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 08:08 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 08:08 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 08:08 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 08:08 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 08:08 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 08:08 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 08:08 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 08:08 - 2014-10-31 23:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 08:07 - 2015-03-06 06:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 08:07 - 2015-03-06 06:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 08:07 - 2015-03-06 06:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 08:07 - 2015-03-06 06:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 08:07 - 2015-03-06 06:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 08:07 - 2015-03-06 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 08:07 - 2015-03-06 06:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 08:07 - 2015-03-06 06:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 08:07 - 2015-03-06 06:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 08:07 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 08:07 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 08:07 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 08:07 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 08:07 - 2015-02-26 04:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 08:07 - 2015-02-24 04:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 08:07 - 2015-02-24 03:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 08:07 - 2015-02-21 02:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 08:07 - 2015-02-21 01:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 08:07 - 2015-02-21 01:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 08:07 - 2015-02-21 01:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 08:07 - 2015-02-21 01:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 08:07 - 2015-02-21 00:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 08:07 - 2015-02-21 00:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 08:07 - 2015-02-20 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 08:07 - 2015-02-20 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 08:07 - 2015-02-20 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 08:07 - 2015-02-20 03:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 08:07 - 2015-02-20 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 08:07 - 2015-02-20 03:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 08:07 - 2015-02-20 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 08:07 - 2015-02-20 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 08:07 - 2015-02-20 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 08:07 - 2015-02-20 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 08:07 - 2015-02-20 03:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 08:07 - 2015-02-20 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 08:07 - 2015-02-20 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 08:07 - 2015-02-20 03:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 08:07 - 2015-02-20 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 08:07 - 2015-02-20 03:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 08:07 - 2015-02-20 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 08:07 - 2015-02-20 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 08:07 - 2015-02-20 03:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 08:07 - 2015-02-20 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 08:07 - 2015-02-20 03:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 08:07 - 2015-02-20 03:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 08:07 - 2015-02-20 03:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 08:07 - 2015-02-20 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 08:07 - 2015-02-20 03:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 08:07 - 2015-02-20 03:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 08:07 - 2015-02-20 03:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 08:07 - 2015-02-20 02:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 08:07 - 2015-02-20 02:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 08:07 - 2015-02-20 02:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-03-11 08:07 - 2015-02-20 02:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 08:07 - 2015-02-20 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 08:07 - 2015-02-20 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 08:07 - 2015-02-20 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 08:07 - 2015-02-20 02:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 08:07 - 2015-02-20 02:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 08:07 - 2015-02-20 02:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 08:07 - 2015-02-20 02:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 08:07 - 2015-02-20 02:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 08:07 - 2015-02-20 02:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 08:07 - 2015-02-20 02:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 08:07 - 2015-02-20 02:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-11 08:07 - 2015-02-20 02:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 08:07 - 2015-02-20 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-11 08:07 - 2015-02-20 02:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 08:07 - 2015-02-20 01:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 08:07 - 2015-02-20 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-11 08:07 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 08:07 - 2015-02-13 06:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 08:07 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 08:07 - 2015-02-03 04:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 08:07 - 2015-02-03 04:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 08:07 - 2015-02-03 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 08:07 - 2015-02-03 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 08:07 - 2015-02-03 04:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 08:07 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 08:07 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 08:07 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 08:07 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 08:07 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 08:07 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 08:07 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 08:07 - 2015-02-03 03:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 08:07 - 2015-01-31 04:48 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-03-11 08:07 - 2015-01-31 04:48 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-11 08:07 - 2015-01-31 00:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 08:07 - 2015-01-31 00:56 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-03-11 08:07 - 2015-01-17 03:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 08:07 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 08:06 - 2015-02-04 04:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 08:06 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-10 13:16 - 2015-03-10 13:16 - 00001518 _____ () C:\Users\Jens Name\Downloads\URLLink (7).acsm
2015-03-10 13:16 - 2015-03-10 13:16 - 00001478 _____ () C:\Users\Jens Name\Downloads\URLLink (8).acsm
2015-03-10 13:15 - 2015-03-10 13:16 - 00001487 _____ () C:\Users\Jens Name\Downloads\URLLink (6).acsm
2015-03-05 07:51 - 2015-03-05 07:51 - 00032912 _____ () C:\Users\Jens Name\Desktop\mitgl-tel+mail-feb2015.xlsx
2015-03-03 21:31 - 2015-03-03 21:31 - 01250304 _____ () C:\Users\Jens Name\Downloads\flugpersonal.ppt
2015-03-03 21:31 - 2015-03-03 21:31 - 01250304 _____ () C:\Users\Jens Name\Downloads\flugpersonal (1).ppt
2015-02-26 20:16 - 2015-02-26 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Beurer
2015-02-26 20:16 - 2015-02-26 20:16 - 00000000 ____D () C:\ProgramData\Beurer
2015-02-26 20:16 - 2015-02-26 20:16 - 00000000 ____D () C:\Program Files (x86)\Beurer
2015-02-26 20:00 - 2015-02-26 20:04 - 98110248 _____ (Beurer Health And Well-Being) C:\Users\Jens Name\Downloads\setup.exe
2015-02-26 00:03 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-26 00:03 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-25 14:30 - 2015-02-25 14:30 - 00001457 _____ () C:\Users\Jens Name\Downloads\URLLink (5).acsm
2015-02-25 14:25 - 2015-02-25 14:25 - 00001485 _____ () C:\Users\Jens Name\Downloads\URLLink (4).acsm
2015-02-25 14:25 - 2015-02-25 14:25 - 00001457 _____ () C:\Users\Jens Name\Downloads\URLLink (3).acsm
2015-02-25 13:20 - 2015-02-25 13:21 - 26069441 _____ () C:\Users\Jens Name\Downloads\com.samsung.android.app.watchmanager_1.7.031004 (1).apk
2015-02-25 12:59 - 2015-02-25 12:59 - 09670357 _____ () C:\Users\Jens Name\Downloads\apk-install-7278911.apk
2015-02-25 12:28 - 2015-02-25 12:28 - 00000000 ____D () C:\Users\Jens Name\Downloads\Neuer Ordner
2015-02-25 12:28 - 2015-02-25 12:28 - 00000000 ____D () C:\Users\Jens Name\Downloads\gf
2015-02-25 12:25 - 2015-02-25 12:25 - 01182190 _____ () C:\Users\Jens Name\Downloads\7z938.exe
2015-02-25 12:11 - 2015-02-25 12:11 - 00971547 _____ () C:\Users\Jens Name\Downloads\GR.GearManagerStub.apk
2015-02-25 11:53 - 2015-02-25 11:54 - 26069441 _____ () C:\Users\Jens Name\Downloads\com.samsung.android.app.watchmanager_1.7.031004.apk
2015-02-22 21:49 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-22 21:49 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-22 21:49 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-22 21:49 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-19 11:10 - 2015-02-19 11:10 - 00186177 _____ () C:\Users\Jens Name\Downloads\PB_Umsatzauskunft_KtoNr0631085201_19-02-2015_1106.xml
2015-02-19 11:10 - 2015-02-19 11:10 - 00186177 _____ () C:\Users\Jens Name\Downloads\PB_Umsatzauskunft_KtoNr0631085201_19-02-2015_1106 (1).xml
2015-02-15 20:16 - 2015-02-15 20:26 - 00000000 ____D () C:\Telefon Maren
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-15 07:44 - 2014-08-22 20:06 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-15 07:41 - 2011-12-30 15:16 - 00000000 ____D () C:\Users\Jens Name
2015-03-15 07:38 - 2011-12-31 11:07 - 00001152 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1320315719-3326968574-895728413-1001UA.job
2015-03-15 07:34 - 2011-12-27 07:03 - 01489466 _____ () C:\Windows\WindowsUpdate.log
2015-03-15 06:47 - 2013-01-10 21:11 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-14 22:20 - 2015-02-12 19:39 - 00000426 _____ () C:\Windows\Tasks\Dell SupportAssistAgent AutoUpdate.job
2015-03-14 22:19 - 2015-02-11 12:22 - 00003484 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask
2015-03-14 22:09 - 2009-07-14 05:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-14 22:09 - 2009-07-14 05:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-14 22:03 - 2013-10-23 05:42 - 00000000 ____D () C:\ProgramData\boost_interprocess
2015-03-14 22:02 - 2012-07-12 17:23 - 00003986 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{D3F2ED7F-9929-48CA-A472-7EC179DE8884}
2015-03-14 22:01 - 2014-08-31 19:48 - 00000000 ___RD () C:\Users\Jens Name\Dropbox
2015-03-14 22:01 - 2014-08-31 19:14 - 00000000 ____D () C:\Users\Jens Name\AppData\Roaming\Dropbox
2015-03-14 22:00 - 2013-12-01 11:06 - 00000000 ___RD () C:\Users\Jens Name\Google Drive
2015-03-14 22:00 - 2011-12-27 14:40 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2015-03-14 22:00 - 2011-12-27 14:40 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2015-03-14 22:00 - 2011-12-27 14:36 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2015-03-14 21:59 - 2013-01-10 21:11 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-14 21:58 - 2012-03-10 12:16 - 00622268 _____ () C:\aaw7boot.log
2015-03-14 21:58 - 2011-12-27 07:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-14 21:58 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-14 13:38 - 2011-12-31 11:07 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1320315719-3326968574-895728413-1001Core.job
2015-03-13 08:42 - 2010-11-21 07:50 - 00700118 _____ () C:\Windows\system32\perfh007.dat
2015-03-13 08:42 - 2010-11-21 07:50 - 00149968 _____ () C:\Windows\system32\perfc007.dat
2015-03-13 08:42 - 2009-07-14 06:13 - 01622228 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-12 21:33 - 2014-03-19 08:54 - 00000784 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-03-12 21:33 - 2012-10-24 15:41 - 00000000 ____D () C:\Program Files\CCleaner
2015-03-12 20:50 - 2012-03-10 12:16 - 00000000 ____D () C:\Windows\Minidump
2015-03-12 13:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-03-12 07:14 - 2014-08-31 19:48 - 00001051 _____ () C:\Users\Jens Name\Desktop\Dropbox.lnk
2015-03-12 07:14 - 2014-08-31 19:15 - 00000000 ____D () C:\Users\Jens Name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-03-11 16:32 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-11 16:25 - 2009-07-14 05:45 - 00362408 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-11 16:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-11 16:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-10 17:48 - 2013-12-01 11:04 - 00002044 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2015-03-10 17:48 - 2013-12-01 11:04 - 00002042 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2015-03-10 17:48 - 2013-12-01 11:04 - 00002032 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2015-03-10 17:48 - 2013-12-01 11:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-03-10 13:16 - 2013-08-01 21:45 - 00000000 ____D () C:\Users\Jens Name\Documents\My Digital Editions
2015-03-07 16:01 - 2013-08-01 16:59 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-07 15:55 - 2011-12-30 15:29 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-05 23:20 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-05 18:23 - 2012-01-05 22:23 - 00000000 ____D () C:\Users\Jens Name\AppData\Roaming\SoftGrid Client
2015-03-05 11:27 - 2014-03-01 09:47 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-05 11:27 - 2012-10-27 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-03-05 11:27 - 2012-10-27 21:37 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-03-04 14:48 - 2013-05-09 18:41 - 00044088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-03-04 14:48 - 2013-03-30 18:52 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-03-04 14:48 - 2013-03-30 18:52 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-03-03 14:17 - 2010-11-21 04:27 - 00295552 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-26 20:16 - 2014-09-26 08:12 - 00002107 _____ () C:\Users\Public\Desktop\Beurer*HealthManager.lnk
2015-02-26 20:15 - 2014-09-26 08:09 - 00000000 ____D () C:\Users\Jens Name\AppData\Roaming\Beurer HealthManager
2015-02-26 16:24 - 2011-02-11 18:12 - 00000000 ____D () C:\DELL
2015-02-22 22:17 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-22 21:51 - 2011-02-11 11:22 - 01596508 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-02-21 12:01 - 2014-03-01 10:21 - 00003556 _____ () C:\Windows\System32\Tasks\GarminUpdaterTask
2015-02-21 12:01 - 2014-03-01 10:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2015-02-21 12:01 - 2014-03-01 09:47 - 00001890 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2015-02-21 12:01 - 2014-03-01 09:47 - 00000000 ____D () C:\ProgramData\Garmin
2015-02-21 12:01 - 2014-02-27 07:13 - 00000000 ____D () C:\Program Files (x86)\Garmin
2015-02-19 10:50 - 2012-02-27 17:31 - 00000826 _____ () C:\Windows\wiso.ini
2015-02-19 10:50 - 2012-02-27 17:27 - 00000000 ____D () C:\ProgramData\Buhl Data Service GmbH
==================== Files in the root of some directories =======
2014-11-22 16:58 - 2014-11-22 16:58 - 0000854 _____ () C:\Users\Jens Name\AppData\Local\recently-used.xbel
Files to move or delete:
====================
C:\Users\Jens Name\APP_IO_WXP_VSTA_W7_A02_Setup-7W7T4_ZPE.exe
C:\Users\Jens Name\CONEXANT_D400-USB-MODEM_DPP14_A00_SETUP_ZPE.exe
C:\Users\Jens Name\CONEXANT_D400-USB-MODEM_J6N4K_A02_SETUP_ZPE.exe
C:\Users\Jens Name\CW1394A0.exe
C:\Users\Jens Name\DELL_MOBILE-BROADBAND-MANAGE_A08_R291705.exe
C:\Users\Jens Name\DELL_WIRELESS-5540-HSPA-MINI_A11_R287094.exe
C:\Users\Jens Name\DELL_WIRELESS-5550-HSPA-MINI_A03_R298995.exe
C:\Users\Jens Name\DELL_WIRELESS-5550-HSPA-MINI_A03_R298998.exe
C:\Users\Jens Name\DELL_WIRELESS-5620-EVDO-HSPA_A09_R292028.exe
C:\Users\Jens Name\L502X_A__06.exe
C:\Users\Jens Name\R261284.exe
C:\Users\Jens Name\R293038.exe
C:\Users\Jens Name\R296901.exe
C:\Users\Jens Name\R304505.exe
C:\Users\Jens Name\R304507.exe
Some content of TEMP:
====================
C:\Users\Jens Name\AppData\Local\Temp\avgnt.exe
C:\Users\Jens Name\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpl4nsoj.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-03-05 12:29
==================== End Of Log ============================
|
|
15.03.2015, 13:52
| #5 |
| /// the machine /// TB-Ausbilder | Avira free antivirus meldet TR/Dropper.A.25752 Fehlt noch die Addition.txt von FRST 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
15.03.2015, 18:57
| #6 |
| | Avira free antivirus meldet TR/Dropper.A.25752 Moin Schrauber, ups, sorry...pendle gerade zwischen Krankenhaus und zuhause, bin da schusselig Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Jens name at 2015-03-15 07:45:02
Running from C:\Users\Jens name\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
AccelerometerP11 (HKLM-x32\...\{87434D51-51DB-4109-B68F-A829ECDCF380}) (Version: 2.00.11.22 - STMicroelectronics)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.9.0.1380 - Adobe Systems Incorporated)
Adobe Digital Editions 2.0 (HKLM-x32\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
Akamai NetSession Interface (HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Avira (HKLM-x32\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 15.0.8.650 - Avira)
Beurer HealthManager (HKLM-x32\...\Beurer*HealthManager) (Version: 3.5.0.0 - Beurer Health And Well-Being)
Beurer HealthManager (x32 Version: 3.5.0.0 - Beurer Health And Well-Being) Hidden
CANON iMAGE GATEWAY MyCamera Download Plugin (HKLM-x32\...\MyCamera Download Plugin) (Version: 3.1.1.2 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.8.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM-x32\...\Canon MOV Encoder) (Version: 1.6.0.1 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.7.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.10 (HKLM-x32\...\DPP) (Version: 3.10.2.0 - Canon Inc.)
Canon Utilities EOS Sample Music (HKLM-x32\...\EOS Sample Music) (Version: 1.0.0.204 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.10.2.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (HKLM-x32\...\EOS Video Snapshot Task) (Version: 1.0.0.10 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM-x32\...\MovieUploaderForYouTube) (Version: 1.2.0.7 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.7.0.24 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.5.0.9 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell Data Vault (Version: 4.1.9.0 - Dell Inc.) Hidden
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.61 - Dell Inc.)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.61 - Dell Inc.)
Dell DataSafe Online (HKLM-x32\...\{C53BCCBE-9268-4C09-82E9-611444A73B3F}) (Version: 2.10.1.3 - Dell)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell Mobile Broadband Manager (HKLM-x32\...\{23EEC842-57ED-4055-A056-9D4185DFB1AA}) (Version: 6.1.24.2 - Dell)
Dell MusicStage (HKLM-x32\...\{3255BC3F-32BA-41ED-93A0-B9AEB6CDD9E6}) (Version: 1.5.201.0 - Fingertapps)
Dell PhotoStage (HKLM-x32\...\{0D98F04D-11A1-4B64-A406-43292B9EEE90}) (Version: 1.5.0.67 - ArcSoft)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.67 - ArcSoft)
Dell Stage (HKLM-x32\...\{E2F57269-065E-4B19-8CDA-AB6C401FAF1A}) (Version: 1.7.209.0 - Fingertapps)
Dell Stage Remote (HKLM-x32\...\{2299EEBD-0A83-4B26-AA4A-057AE9E5BAE8}) (Version: 2.0.0.50 - ArcSoft)
Dell Stage Remote (HKLM-x32\...\{AF4D3C63-009B-4A17-B02E-D395065DD3F0}) (Version: 2.0.0.50 - ArcSoft)
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.0.6584.52 - Dell)
Dell SupportAssistAgent (HKLM-x32\...\{287348C8-8B47-4C36-AF28-441A3B7D8722}) (Version: 1.0.1.56462 - Dell)
Dell System Detect (HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\9204f5692a8faf3b) (Version: 3.3.2.0 - Dell)
Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.2.0.1712 - CyberLink Corp.)
Dell VideoStage (x32 Version: 1.2.0.1712 - CyberLink Corp.) Hidden
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.44 - Creative Technology Ltd)
Die Siedler IV (HKLM-x32\...\S4Uninst) (Version: - )
Digital Line Detect (HKLM-x32\...\{E646DCF0-5A68-11D5-B229-002078017FBF}) (Version: 1.21 - BVRP Software, Inc)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
Dropbox (HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Dropbox) (Version: 3.2.9 - Dropbox, Inc.)
eBay (HKLM-x32\...\{A8B88634-7F90-402F-B66A-86429755F6A5}) (Version: 1.4.0 - eBay Inc.)
Elevated Installer (x32 Version: 3.2.27.0 - Garmin Ltd or its subsidiaries) Hidden
ElsterFormular (HKLM-x32\...\ElsterFormular 13.2.0.8623p) (Version: 13.2.0.8623p - Landesfinanzdirektion Thüringen)
ffdshow v1.1.3978 [2011-08-25] (HKLM-x32\...\ffdshow_is1) (Version: 1.1.3978.0 - )
FileZilla Client 3.7.3 (HKLM-x32\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
FSX Bonus Multiplayer Racing Missions (HKLM-x32\...\{FD523531-7EA3-4F11-948C-C5F4B734FDB2}) (Version: 10.0.61219.0 - Microsoft Corporation)
Garmin Communicator Plugin (HKLM-x32\...\{032A13FF-D26D-4844-9597-7EF698627985}) (Version: 4.1.0 - Garmin Ltd or its subsidiaries)
Garmin Communicator Plugin x64 (HKLM\...\{AFA301E1-B410-4F1B-B1C0-2E92FDCD94AD}) (Version: 4.1.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{855d8086-4275-4bd3-a7a8-b44da3a56d7a}) (Version: 3.2.27.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 3.2.27.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 3.2.27.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin HomePort (HKLM-x32\...\{49DF97E8-88A5-41A7-94D8-DC578DDEC9D5}) (Version: 2.2.4 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Google Chrome) (Version: 41.0.2272.89 - Google Inc.)
Google Drive (HKLM-x32\...\{6C36881B-0E51-4231-9D02-BF2149664D34}) (Version: 1.20.8672.3137 - Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GPSinfo version S-0PC-07-1109022 (HKLM-x32\...\{7F8A9255-C043-4895-AFFC-67D900C5D516}_is1) (Version: S-0PC-07-1109022 - Globalsat Worldcom Group)
Grib-Wetter V7.0 (HKLM-x32\...\Grib-Wetter) (Version: - )
HTC BMP USB Driver (HKLM-x32\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)
HTC Driver Installer (HKLM-x32\...\{6D6664A9-3342-4948-9B7E-034EFE366F0F}) (Version: 3.0.0.021 - HTC Corporation)
HTC Sync (HKLM-x32\...\{AB77DFDE-9949-4AEF-B180-BE322C3E65D0}) (Version: 3.2.20 - HTC Corporation)
Intel PROSet Wireless (x32 Version: - ) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2455 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{295AEB79-B53A-4F1B-860F-7800BB7E3681}) (Version: 14.2.1000 - Intel Corporation)
Internet-TV für Windows Media Center (HKLM-x32\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation)
Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle)
Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.450 - Oracle)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Kaspersky Security Scan (HKLM-x32\...\InstallWIX_{D1282694-0693-41A8-ABC1-6D1FFC1F65C4}) (Version: 12.0.1.881 - Kaspersky Lab)
Kaspersky Security Scan (x32 Version: 12.0.1.881 - Kaspersky Lab) Hidden
Kobo (HKLM-x32\...\Kobo) (Version: 3.12.0 - Rakuten Kobo Inc.)
LiveUpload to Facebook (HKLM-x32\...\{45FE5100-6C09-4B34-AC2F-92D8B3864546}) (Version: 3.2.3.0 - William Duff)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 5.1.3 - CEWE Stiftung u Co. KGaA)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Flight Simulator X: Acceleration (HKLM-x32\...\FlightSim_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: 10.0.61637.0 - Microsoft Game Studios)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.31211.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Monkey Island Special Edition Collection (HKLM-x32\...\{400B1F12-4521-4F42-89CF-98AD318E2D2B}) (Version: 1.00.0000 - LucasArts)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Netwaiting (HKLM-x32\...\{3F92ABBB-6BBF-11D5-B229-002078017FBF}) (Version: 2.5.59 - BVRP Software, Inc)
NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
OpenOffice 4.0.0 (HKLM-x32\...\{B28DBCBA-60F8-40ED-B35B-F510C327946C}) (Version: 4.00.9702 - Apache Software Foundation)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.3.2 - Frank Heindörfer, Philip Chinery)
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.3.0 - Prolific Technology INC)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.10 - Dell Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6312 - Realtek Semiconductor Corp.)
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio)
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) Hidden
Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version: - Silicon Laboratories)
Silicon Laboratories CP210x VCP Drivers for Windows XP/2003 Server/Vista/7 (HKLM-x32\...\{AF1B7DC7-D195-4167-AE91-58C1978995EF}) (Version: 6.5 - Silicon Laboratories, Inc.)
Silicon Laboratories CP210x VCP Drivers for Windows XP/2003 Server/Vista/7_2 (c:\SiLabs\MCU\CP210x\Windows_XP_S2K3_Vista_7_2) (HKLM-x32\...\{ED10DB3B-3AAC-4EFA-B065-12CF6B5F3E12}) (Version: 6.5 - Silicon Laboratories, Inc.)
Silicon Laboratories CP210x VCP Drivers for Windows XP/2003 Server/Vista/7_3 (c:\SiLabs\MCU\CP210x\Windows_XP_S2K3_Vista_7_3) (HKLM-x32\...\{ADC345D9-6FDB-4A6C-9435-15D5FB7BB88D}) (Version: 6.5 - Silicon Laboratories, Inc.)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
Speed-Link Vibration Joystick (HKLM-x32\...\Speed-Link Vibration Joystick) (Version: - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.6.0 - Synaptics Incorporated)
SyncUP (HKLM-x32\...\{D92C9CCE-E5F0-4125-977A-0590F3225B74}) (Version: 10.2.15400 - Nero AG)
SyncUP (x32 Version: 1.12.12400.17.102 - Nero AG) Hidden
t@x 2012 (HKLM-x32\...\{0E806605-5B82-4A4F-BC31-AA4FADA03C42}) (Version: 19.00.7303 - Buhl Data Service GmbH)
t@x 2013 (HKLM-x32\...\{6737F045-A91A-4177-9C8C-59460FC1C84D}) (Version: 20.00.8137 - Buhl Data Service GmbH)
t@x 2014 (HKLM-x32\...\{2547CF96-DBB7-4EDD-9327-0EFDD0D1FA8A}) (Version: 21.06.8612 - Buhl Data Service GmbH)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.4000.245 - TuneUp Software) Hidden
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Unity Web Player (HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\UnityWebPlayer) (Version: 4.5.3f3 - Unity Technologies ApS)
Vistanaut Light (HKLM-x32\...\{550B46D1-D16B-4F7E-B41A-03B1C9AF93B4}) (Version: 1.1.3 - TEAM GmbH)
WIB2 1.0.21 (HKLM-x32\...\WIB2_is1) (Version: - Moerer Schiffselektronik)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Media Center Add-in for Silverlight (HKLM-x32\...\{0EDBEB2B-7C8D-42E6-8312-0F84394A3223}) (Version: 4.7.3.0 - Microsoft Corporation)
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - FotoNation (CoachAud) MEDIA (03/10/2009 4.82.0.0) (HKLM\...\48257E35454F5466589A58300A9B72EE107D300A) (Version: 03/10/2009 4.82.0.0 - FotoNation)
Windows-Treiberpaket - FotoNation (CoachUsb) Image (03/10/2009 4.82.0.0) (HKLM\...\349B34C470B225396F552E2B50057E4C166C267E) (Version: 03/10/2009 4.82.0.0 - FotoNation)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
XMind 2012 (v3.3.1) (HKLM-x32\...\XMind_is1) (Version: 3.3.1.201212250029 - XMind Ltd.)
Xvid 1.2.2 final uninstall (HKLM-x32\...\Xvid_is1) (Version: 1.2 - Xvid team (Koepi))
Zinio Alert Messenger (HKLM-x32\...\ZinioAlertMessenger.9310D8F796442B71068C511E15D70529A702D19D.1) (Version: 4.0.2570 - Zinio LLC)
Zinio Alert Messenger (x32 Version: 4.0.2570 - Zinio LLC) Hidden
Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC)
Zinio Reader 4 (x32 Version: 4.2.4164 - Zinio LLC) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Jens name\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Jens name\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Jens name\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Jens name\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Jens name\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Jens name\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Jens name\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Jens name\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1320315719-3326968574-895728413-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
==================== Restore Points =========================
07-03-2015 15:55:00 Windows Update
11-03-2015 11:09:54 Windows Update
14-03-2015 13:45:31 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2012-06-18 21:42 - 00442922 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 www.100888290cs.com
127.0.0.1 100888290cs.com
127.0.0.1 100sexlinks.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 www.10sek.com
127.0.0.1 10sek.com
127.0.0.1 1-2005-search.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 www.123fporn.info
127.0.0.1 123fporn.info
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {06F96955-7060-4242-8A01-EF98E2FDE45A} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Dell\SupportAssist\uaclauncher.exe [2015-02-03] (PC-Doctor, Inc.)
Task: {0AEA19B2-CFB4-4E74-869E-AA3E8A0F5292} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {0C3BFEA5-2C7D-4079-8E29-6EED98EAEEA8} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {0EB27222-6041-4FC8-A84F-76EB0C646A35} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2014-12-31] ()
Task: {13F377A5-5137-45EE-B1D5-C5110B898FE7} - System32\Tasks\{6AA9EA43-ADAA-4A6C-A531-1ADBE5738653} => pcalua.exe -a "C:\Program Files (x86)\WIB2\unins000.exe"
Task: {19D888DF-2ED6-485C-BF5F-AC9F0B71C905} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-10] (Google Inc.)
Task: {1D63ED95-14C0-44FB-BB95-856CA5B856D8} - System32\Tasks\Steuer Aktuell => C:\Program Files (x86)\Buhl finance\tax Steuersoftware 2014\taxaktuell.exe [2015-01-19] ()
Task: {2A9938FA-2097-4952-A0FD-A540DCEBBD32} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1320315719-3326968574-895728413-1001Core => C:\Users\Jens name\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-22] (Google Inc.)
Task: {2C85BC06-3DEF-484F-9E74-9F90CE2EF4BC} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe [2015-02-19] (Microsoft)
Task: {2FF55AA8-F41E-47FE-9908-F5BEE6CD728B} - System32\Tasks\{EB127DA3-04CB-4CCE-B9D3-DA40813F4626} => C:\Program Files (x86)\Vistanaut\vistanaut.exe [2010-09-14] (Team GmbH)
Task: {354AA24F-A111-4DAD-9F43-BE8A179C1CEA} - System32\Tasks\{17D357F0-32D5-43B7-9171-DCF539F506F0} => pcalua.exe -a "C:\Users\Jens name\APP_IO_WXP_VSTA_W7_A02_Setup-7W7T4_ZPE.exe" -d "C:\Users\Jens name"
Task: {3B9B77FB-CBB4-46AD-A8CA-58F09F83ECD8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-02-19] (Piriform Ltd)
Task: {43A8EB77-754C-4685-A7D2-9BB7521F1379} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {45F03633-4B28-492D-B3EF-75AF6E02DF9F} - System32\Tasks\{87F9D63D-1D16-4A8E-9D96-11FE2760B454} => pcalua.exe -a "C:\Users\Jens name\AppData\Local\Temp\Temp1_sl-6630_31 (1).zip\setup--SL-6631 Cougar Pro\Setup.exe"
Task: {52910F80-BCC0-4D97-947A-BDD711B3BE74} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {6204ED5E-1BCE-46BF-AB38-87FBE5A194A3} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1320315719-3326968574-895728413-1001UA => C:\Users\Jens name\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-22] (Google Inc.)
Task: {6AA72CD1-8D02-4582-BD9F-0F13AFAB0D38} - System32\Tasks\{13624EE1-81B5-4CB4-AE7B-2C5FA948A924} => C:\Program Files (x86)\Vistanaut\vistanaut.exe [2010-09-14] (Team GmbH)
Task: {70C0136D-8590-4906-BDC2-EFA3E132420A} - \DigitalSite No Task File <==== ATTENTION
Task: {7B9CE3C2-9237-4950-A9C7-4ABD3A0D0FEB} - System32\Tasks\Google Updater and Installer => C:\Users\Jens name\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-22] (Google Inc.)
Task: {87C3CB91-F490-4B36-9805-B3843F2EF897} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-10] (Google Inc.)
Task: {8C57ACF2-B044-49C4-A1AA-CEBDD7589ABC} - System32\Tasks\{D36400A6-09E7-4889-AFB8-CE585599FD13} => pcalua.exe -a D:\Setup.exe -d D:\
Task: {93E0AE44-BEB9-4217-A59E-5007B735DE98} - System32\Tasks\{F080DE33-3210-4CD0-A4AF-48DA9E3A1148} => pcalua.exe -a "C:\Users\Jens name\AppData\Local\Temp\Temp2_steganog.zip\SteganoG.exe"
Task: {A33636FB-4B78-4690-985A-FECA712677F7} - System32\Tasks\Launch HTC Sync Loader => c:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-04-17] ()
Task: {B108236E-D5AA-4954-9AFE-B5147C04DCD9} - System32\Tasks\{7828C0C3-FD4C-4E6C-9398-C4A7DA2529A3} => pcalua.exe -a "C:\Users\Jens name\AppData\Local\Temp\Temp1_sl-6630_31.zip\setup--SL-6631 Cougar Pro\Setup.exe"
Task: {B20BA597-3386-4120-AECF-7A668518A2C5} - System32\Tasks\{B17BD33A-7B8D-4975-BE87-6E3C5E2AFBAB} => pcalua.exe -a D:\DirectXInstall\DXSETUP.exe -d D:\DirectXInstall
Task: {BB65913D-ECA7-4A4E-B49F-2EA583FD35BF} - System32\Tasks\{ACCC80B1-C8AE-458C-9A77-37D9CC65702F} => C:\Users\Jens name\Downloads\WindowsXP-KB822603-x86-DEU.exe
Task: {BFDC7423-C95C-4823-9644-E2EAED5D4D1D} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {C4D01B25-0188-44B4-BB69-9AE89E970653} - System32\Tasks\SuperEasyDriverUpdaterRunAtStartup => C:\Program Files (x86)\SuperEasy Software\Driver Updater\supereasydu.exe
Task: {C552D207-F5E9-4101-BD7C-B34BC6BF50E2} - System32\Tasks\{1DDB7DCC-736A-4326-9E1B-55C509D642AB} => pcalua.exe -a "C:\Program Files (x86)\ElsterFormular\bin\installationsverwaltung.exe" -d "C:\Program Files (x86)\ElsterFormular\bin" -c --zeigeDlg
Task: {DEEED048-5BEC-4FE3-85E0-22ED4AA48690} - System32\Tasks\{9CAF60D0-21F1-4EEB-9C82-7C9C326690BE} => pcalua.exe -a "C:\Users\Jens name\Downloads\MiracleOnTheHudson_Installer.exe" -d "C:\Users\Jens name\Downloads"
Task: {E5765246-CC29-422E-A3D8-A8BA02B1555E} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: {EF6E5D05-C29A-47FA-848C-6BC843CF9B31} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Dell\SupportAssist\sessionchecker.exe [2015-02-03] (PC-Doctor, Inc.)
Task: C:\Windows\Tasks\Dell SupportAssistAgent AutoUpdate.job => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1320315719-3326968574-895728413-1001Core.job => C:\Users\Jens name\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1320315719-3326968574-895728413-1001UA.job => C:\Users\Jens name\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) ==============
2011-12-27 15:29 - 2014-07-02 21:48 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2012-10-16 16:40 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-09-16 00:46 - 2011-09-16 00:46 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2011-12-27 15:28 - 2011-07-20 14:04 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-09-16 00:46 - 2011-09-16 00:46 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2011-08-08 17:26 - 2011-08-08 17:26 - 00475200 _____ () C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
2011-09-15 12:06 - 2011-09-15 12:06 - 00088576 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2011-12-27 14:37 - 2011-09-22 17:14 - 02751808 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
2011-08-08 17:26 - 2011-08-08 17:26 - 00891456 _____ () C:\Program Files (x86)\Dell\Stage Remote\DMR.exe
2015-02-11 12:21 - 2015-01-30 08:15 - 00107256 _____ () C:\Program Files\Dell\SupportAssist\libCSharpCommonCS.dll
2015-02-11 12:21 - 2015-01-30 08:15 - 00545528 _____ () C:\Program Files\Dell\SupportAssist\libAsapiCSharp.dll
2011-12-27 15:29 - 2014-07-02 21:48 - 00013272 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2010-02-12 13:53 - 2010-02-12 13:53 - 00058880 ____R () C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\MBMDebug.dll
2013-08-07 20:25 - 2013-08-07 20:25 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2015-03-04 23:08 - 2015-03-04 23:08 - 00750080 _____ () C:\Users\Jens name\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-03-14 22:00 - 2015-03-14 22:00 - 00043008 _____ () c:\Users\Jens name\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpl4nsoj.dll
2015-03-04 23:08 - 2015-03-04 23:08 - 00047616 _____ () C:\Users\Jens name\AppData\Roaming\Dropbox\bin\libEGL.dll
2015-03-04 23:08 - 2015-03-04 23:08 - 00865280 _____ () C:\Users\Jens name\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2015-03-04 23:07 - 2015-03-04 23:07 - 00200704 _____ () C:\Users\Jens name\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2013-10-19 08:42 - 2013-05-16 09:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-10-19 08:42 - 2013-05-16 09:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2015-03-11 17:59 - 2015-03-07 07:12 - 01174856 _____ () C:\Users\Jens name\AppData\Local\Google\Chrome\Application\41.0.2272.89\libglesv2.dll
2015-03-11 17:59 - 2015-03-07 07:12 - 00080200 _____ () C:\Users\Jens name\AppData\Local\Google\Chrome\Application\41.0.2272.89\libegl.dll
2015-03-11 17:59 - 2015-03-07 07:13 - 09279304 _____ () C:\Users\Jens name\AppData\Local\Google\Chrome\Application\41.0.2272.89\pdf.dll
2015-03-14 21:59 - 2015-03-14 21:59 - 00098816 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\win32api.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00110080 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\pywintypes27.dll
2015-03-14 21:59 - 2015-03-14 21:59 - 00364544 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\pythoncom27.dll
2015-03-14 21:59 - 2015-03-14 21:59 - 00045568 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\_socket.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 01161216 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\_ssl.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00320512 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\win32com.shell.shell.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00713216 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\_hashlib.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 01175040 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\wx._core_.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00805888 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\wx._gdi_.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00811008 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\wx._windows_.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 01062400 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\wx._controls_.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00735232 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\wx._misc_.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00682496 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\pysqlite2._sqlite.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00128512 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\_elementtree.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00127488 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\pyexpat.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00087552 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\_ctypes.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00119808 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\win32file.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00108544 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\win32security.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00007168 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\hashobjs_ext.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00167936 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\win32gui.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00018432 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\win32event.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00038912 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\win32inet.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00011264 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\win32crypt.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00070656 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\wx._html2.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00027136 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\_multiprocessing.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00020480 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\_yappi.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00035840 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\win32process.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00686080 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\unicodedata.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00122368 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\wx._wizard.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00024064 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\win32pipe.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00010240 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\select.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00025600 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\win32pdh.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00525640 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\windows._lib_cacheinvalidation.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00017408 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\win32profile.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00022528 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\win32ts.pyd
2015-03-14 21:59 - 2015-03-14 21:59 - 00078336 _____ () C:\Users\Jens name\AppData\Local\Temp\_MEI11442\wx._animate.pyd
2010-03-16 19:28 - 2010-03-16 19:28 - 01926144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll
2010-03-22 14:52 - 2010-03-22 14:52 - 06776832 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll
2010-03-16 19:28 - 2010-03-16 19:28 - 00635904 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll
2010-03-16 19:28 - 2010-03-16 19:28 - 00326144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll
2011-06-24 22:20 - 2011-06-24 22:20 - 00565968 _____ () C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll
2007-04-13 08:39 - 2007-04-13 08:39 - 00252672 _____ () C:\Program Files (x86)\Dell\Stage Remote\kgl.dll
2011-07-17 09:35 - 2011-07-17 09:35 - 00058944 _____ () C:\Program Files (x86)\Dell\Stage Remote\DataService.dll
2011-07-06 15:53 - 2011-07-06 15:53 - 00068160 _____ () C:\Program Files (x86)\Dell\Stage Remote\de-DE\UI\DMRUI.dll
2010-03-11 18:52 - 2010-03-11 18:52 - 00028160 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll
2010-03-05 14:07 - 2010-03-05 14:07 - 00031744 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll
2010-03-05 14:07 - 2010-03-05 14:07 - 00125952 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll
2010-03-11 18:52 - 2010-03-11 18:52 - 00225280 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll
2007-04-19 07:28 - 2007-04-19 07:28 - 00436992 _____ () C:\Program Files (x86)\Dell\Stage Remote\fpxlib.dll
2013-10-19 08:42 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2013-10-19 08:42 - 2013-05-16 09:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-10-19 08:42 - 2012-04-03 16:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-03-31 21:35 - 2014-03-31 21:35 - 00282304 _____ () C:\Program Files (x86)\Windows Live\Writer\de\WindowsLive.Writer.Localization.resources.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Lavasoft Ad-Aware Service => ""="Service"
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jens name\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^t@x aktuell.lnk => C:\Windows\pss\t@x aktuell.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Jens name^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Zinio Alert Messenger.lnk => C:\Windows\pss\Zinio Alert Messenger.lnk.Startup
==================== Accounts: =============================
Administrator (S-1-5-21-1320315719-3326968574-895728413-500 - Administrator - Disabled)
Gast (S-1-5-21-1320315719-3326968574-895728413-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1320315719-3326968574-895728413-1003 - Limited - Enabled)
Jens name (S-1-5-21-1320315719-3326968574-895728413-1001 - Administrator - Enabled) => C:\Users\Jens name
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (03/14/2015 10:01:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: StageRemote.exe, Version: 2.0.0.50, Zeitstempel: 0x4e3fb38b
Name des fehlerhaften Moduls: MP4Muxer.ax, Version: 1.0.0.87, Zeitstempel: 0x4e1bf1b1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00002a95
ID des fehlerhaften Prozesses: 0xb84
Startzeit der fehlerhaften Anwendung: 0xStageRemote.exe0
Pfad der fehlerhaften Anwendung: StageRemote.exe1
Pfad des fehlerhaften Moduls: StageRemote.exe2
Berichtskennung: StageRemote.exe3
Error: (03/14/2015 10:00:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/14/2015 03:35:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: StageRemote.exe, Version: 2.0.0.50, Zeitstempel: 0x4e3fb38b
Name des fehlerhaften Moduls: MP4Muxer.ax, Version: 1.0.0.87, Zeitstempel: 0x4e1bf1b1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00002a95
ID des fehlerhaften Prozesses: 0xb78
Startzeit der fehlerhaften Anwendung: 0xStageRemote.exe0
Pfad der fehlerhaften Anwendung: StageRemote.exe1
Pfad des fehlerhaften Moduls: StageRemote.exe2
Berichtskennung: StageRemote.exe3
Error: (03/14/2015 03:34:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/14/2015 03:33:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: RtkNGUI64.exe, Version: 1.0.0.99, Zeitstempel: 0x4d5e2400
Name des fehlerhaften Moduls: RtkNGUI64.exe, Version: 1.0.0.99, Zeitstempel: 0x4d5e2400
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000c7814
ID des fehlerhaften Prozesses: 0xa68
Startzeit der fehlerhaften Anwendung: 0xRtkNGUI64.exe0
Pfad der fehlerhaften Anwendung: RtkNGUI64.exe1
Pfad des fehlerhaften Moduls: RtkNGUI64.exe2
Berichtskennung: RtkNGUI64.exe3
Error: (03/14/2015 08:10:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: StageRemote.exe, Version: 2.0.0.50, Zeitstempel: 0x4e3fb38b
Name des fehlerhaften Moduls: MP4Muxer.ax, Version: 1.0.0.87, Zeitstempel: 0x4e1bf1b1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00002a95
ID des fehlerhaften Prozesses: 0xbac
Startzeit der fehlerhaften Anwendung: 0xStageRemote.exe0
Pfad der fehlerhaften Anwendung: StageRemote.exe1
Pfad des fehlerhaften Moduls: StageRemote.exe2
Berichtskennung: StageRemote.exe3
Error: (03/14/2015 08:09:41 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/13/2015 08:37:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: StageRemote.exe, Version: 2.0.0.50, Zeitstempel: 0x4e3fb38b
Name des fehlerhaften Moduls: MP4Muxer.ax, Version: 1.0.0.87, Zeitstempel: 0x4e1bf1b1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00002a95
ID des fehlerhaften Prozesses: 0xb7c
Startzeit der fehlerhaften Anwendung: 0xStageRemote.exe0
Pfad der fehlerhaften Anwendung: StageRemote.exe1
Pfad des fehlerhaften Moduls: StageRemote.exe2
Berichtskennung: StageRemote.exe3
Error: (03/13/2015 08:37:11 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/12/2015 11:57:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: StageRemote.exe, Version: 2.0.0.50, Zeitstempel: 0x4e3fb38b
Name des fehlerhaften Moduls: MP4Muxer.ax, Version: 1.0.0.87, Zeitstempel: 0x4e1bf1b1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00002a95
ID des fehlerhaften Prozesses: 0xbd4
Startzeit der fehlerhaften Anwendung: 0xStageRemote.exe0
Pfad der fehlerhaften Anwendung: StageRemote.exe1
Pfad des fehlerhaften Moduls: StageRemote.exe2
Berichtskennung: StageRemote.exe3
System errors:
=============
Error: (03/14/2015 10:11:28 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureCommand" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (03/14/2015 10:11:25 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (03/14/2015 10:01:49 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kaspersky Security Scan Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (03/14/2015 10:01:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot-S&D 2 Updating Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (03/14/2015 10:01:10 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Updating Service erreicht.
Error: (03/14/2015 10:00:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Dell SupportAssist Agent" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (03/14/2015 10:00:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Dell SupportAssist Agent erreicht.
Error: (03/14/2015 10:00:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (03/14/2015 10:00:02 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.
Error: (03/14/2015 09:59:20 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Garmin Core Update Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Microsoft Office Sessions:
=========================
Error: (03/14/2015 10:01:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: StageRemote.exe2.0.0.504e3fb38bMP4Muxer.ax1.0.0.874e1bf1b1c000000500002a95b8401d05e99b112197fC:\Program Files (x86)\Dell\Stage Remote\StageRemote.exeC:\Program Files (x86)\Dell\Stage Remote\Codec\MP4Muxer.ax4c935262-ca8d-11e4-9718-848f69bf851e
Error: (03/14/2015 10:00:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/14/2015 03:35:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: StageRemote.exe2.0.0.504e3fb38bMP4Muxer.ax1.0.0.874e1bf1b1c000000500002a95b7801d05e63ad78cdf3C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exeC:\Program Files (x86)\Dell\Stage Remote\Codec\MP4Muxer.ax4b4044d0-ca57-11e4-af1b-848f69bf851e
Error: (03/14/2015 03:34:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/14/2015 03:33:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: RtkNGUI64.exe1.0.0.994d5e2400RtkNGUI64.exe1.0.0.994d5e2400c000000500000000000c7814a6801d05e63ac37742eC:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exeC:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe0d77fa56-ca57-11e4-af1b-848f69bf851e
Error: (03/14/2015 08:10:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: StageRemote.exe2.0.0.504e3fb38bMP4Muxer.ax1.0.0.874e1bf1b1c000000500002a95bac01d05e2595a8ec54C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exeC:\Program Files (x86)\Dell\Stage Remote\Codec\MP4Muxer.ax3408b5ae-ca19-11e4-9403-848f69bf851e
Error: (03/14/2015 08:09:41 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/13/2015 08:37:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: StageRemote.exe2.0.0.504e3fb38bMP4Muxer.ax1.0.0.874e1bf1b1c000000500002a95b7c01d05d603ce9e335C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exeC:\Program Files (x86)\Dell\Stage Remote\Codec\MP4Muxer.axd184c3b8-c953-11e4-acf1-848f69bf851e
Error: (03/13/2015 08:37:11 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/12/2015 11:57:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: StageRemote.exe2.0.0.504e3fb38bMP4Muxer.ax1.0.0.874e1bf1b1c000000500002a95bd401d05cb2dfa267f7C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exeC:\Program Files (x86)\Dell\Stage Remote\Codec\MP4Muxer.ax93094e3f-c8a6-11e4-9b13-848f69bf851e
CodeIntegrity Errors:
===================================
Date: 2013-03-07 10:34:32.493
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-03-07 10:34:32.477
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-03-07 10:34:32.477
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-03-06 13:26:03.457
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-03-06 13:26:03.453
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-03-06 13:26:03.450
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-02-04 15:36:49.719
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-02-04 15:36:49.715
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-02-04 15:36:49.713
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-12-28 22:55:07.839
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\Common Files\mcafee\VSCore\mfeelamk.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz
Percentage of memory in use: 47%
Total physical RAM: 8086.17 MB
Available physical RAM: 4209.81 MB
Total Pagefile: 16170.52 MB
Available Pagefile: 11459.86 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:679 GB) (Free:533.38 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 698.6 GB) (Disk ID: 07F2837E)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Active) - (Size=19.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=679 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Danke für die Hilfe winnie |
|
16.03.2015, 10:57
| #7 |
| /// the machine /// TB-Ausbilder | Avira free antivirus meldet TR/Dropper.A.25752 hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
17.03.2015, 00:30
| #8 |
| | Avira free antivirus meldet TR/Dropper.A.25752 Hi Schrauber, anbei die combofix log Info, danke für deine Hilfe :-) Code:
ATTFilter ComboFix 15-03-14.03 - Jens name 16.03.2015 19:53:33.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8086.5074 [GMT 1:00]
ausgeführt von:: c:\users\Jens name\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials *Enabled/Updated* {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Microsoft Security Essentials *Enabled/Updated* {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
SP: Spybot - Search and Destroy *Enabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Beurer\Beurer*HealthManager\Beurer.DeviceCommunicator.BM70UsbLibrary.dll
c:\program files (x86)\Beurer\Beurer*HealthManager\Beurer.DeviceCommunicator.UsbSupportLib.dll
c:\programdata\PCDr\6584\AddOnDownloaded\6b56d7e1-5ac6-46da-8615-10fbe2919ac8.dll
c:\programdata\PCDr\6584\AddOnDownloaded\a7a4f473-8998-4029-be3e-f4280478bd6b.dll
c:\programdata\PCDr\6584\AddOnDownloaded\b4e7e391-8ff3-4363-bb72-f41a243749b1.dll
c:\programdata\PCDr\6584\AddOnDownloaded\c746a3b1-ed0c-4bff-941c-d5e6f0583ce7.dll
c:\programdata\Roaming
c:\users\Jens name\AppData\Local\assembly\tmp
c:\users\Jens name\AppData\Local\Temp\_MEI32842\_ctypes.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\_elementtree.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\_hashlib.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\_multiprocessing.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\_socket.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\_ssl.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\_yappi.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\hashobjs_ext.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\pyexpat.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\pysqlite2._sqlite.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\python27.dll
c:\users\Jens name\AppData\Local\Temp\_MEI32842\pythoncom27.dll
c:\users\Jens name\AppData\Local\Temp\_MEI32842\PyWinTypes27.dll
c:\users\Jens name\AppData\Local\Temp\_MEI32842\select.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\unicodedata.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\win32api.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\win32com.shell.shell.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\win32crypt.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\win32event.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\win32file.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\win32gui.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\win32inet.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\win32pdh.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\win32pipe.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\win32process.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\win32profile.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\win32security.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\win32ts.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\windows._lib_cacheinvalidation.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\wx._animate.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\wx._controls_.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\wx._core_.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\wx._gdi_.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\wx._html2.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\wx._misc_.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\wx._windows_.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\wx._wizard.pyd
c:\users\Jens name\AppData\Local\Temp\_MEI32842\wxbase294u_net_vc90.dll
c:\users\Jens name\AppData\Local\Temp\_MEI32842\wxbase294u_vc90.dll
c:\users\Jens name\AppData\Local\Temp\_MEI32842\wxmsw294u_adv_vc90.dll
c:\users\Jens name\AppData\Local\Temp\_MEI32842\wxmsw294u_core_vc90.dll
c:\users\Jens name\AppData\Local\Temp\_MEI32842\wxmsw294u_html_vc90.dll
c:\users\Jens name\AppData\Local\Temp\_MEI32842\wxmsw294u_webview_vc90.dll
c:\users\Jens name\L502X_A__06.exe
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\_ctypes.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\_elementtree.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\_hashlib.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\_multiprocessing.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\_socket.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\_ssl.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\_yappi.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\hashobjs_ext.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\pyexpat.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\pysqlite2._sqlite.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\python27.dll
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\pythoncom27.dll
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\PyWinTypes27.dll
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\select.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\unicodedata.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\win32api.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\win32com.shell.shell.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\win32crypt.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\win32event.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\win32file.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\win32gui.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\win32inet.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\win32pdh.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\win32pipe.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\win32process.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\win32profile.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\win32security.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\win32ts.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\windows._lib_cacheinvalidation.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\wx._animate.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\wx._controls_.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\wx._core_.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\wx._gdi_.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\wx._html2.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\wx._misc_.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\wx._windows_.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\wx._wizard.pyd
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\wxbase294u_net_vc90.dll
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\wxbase294u_vc90.dll
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\wxmsw294u_adv_vc90.dll
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\wxmsw294u_core_vc90.dll
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\wxmsw294u_html_vc90.dll
c:\users\JENSVA~1\AppData\Local\Temp\_MEI32842\wxmsw294u_webview_vc90.dll
c:\windows\IsUn0407.exe
c:\windows\tmp
c:\windows\tmp\dd_vcredist_x86_20140903125047.log
c:\windows\tmp\dd_vcredist_x86_20140903125047_0_vcRuntimeMinimum_x86.log
c:\windows\tmp\dd_vcredist_x86_20140903125047_1_vcRuntimeAdditional_x86.log
c:\windows\tmp\dd_vcredist_x86_20150206101810.log
c:\windows\tmp\dd_vcredistMSI1313.txt
c:\windows\tmp\dd_vcredistMSI2598.txt
c:\windows\tmp\dd_vcredistMSI494D.txt
c:\windows\tmp\dd_vcredistMSI573B.txt
c:\windows\tmp\dd_vcredistMSI5A16.txt
c:\windows\tmp\dd_vcredistMSI7F0E.txt
c:\windows\tmp\dd_vcredistUI1313.txt
c:\windows\tmp\dd_vcredistUI2598.txt
c:\windows\tmp\dd_vcredistUI494D.txt
c:\windows\tmp\dd_vcredistUI573B.txt
c:\windows\tmp\dd_vcredistUI5A16.txt
c:\windows\tmp\dd_vcredistUI7F0E.txt
c:\windows\tmp\fonts\fontdb
c:\windows\tmp\qtsingleapp-koboex-7d5-1-lockfile
.
.
((((((((((((((((((((((( Dateien erstellt von 2015-02-16 bis 2015-03-16 ))))))))))))))))))))))))))))))
.
.
2015-03-16 19:04 . 2015-03-16 19:04 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-03-15 06:43 . 2015-03-15 06:46 -------- d-----w- C:\FRST
2015-03-11 15:27 . 2015-03-11 15:27 -------- d-----w- c:\windows\system32\78QY3S1_SupportAssistClient_20150311162736
2015-03-11 07:07 . 2015-02-03 03:31 782848 ----a-w- c:\windows\system32\wmdrmsdk.dll
2015-03-11 07:06 . 2015-02-04 03:16 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2015-03-11 07:06 . 2015-02-04 02:54 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2015-02-26 19:16 . 2015-02-26 19:16 -------- d-----w- c:\program files (x86)\Beurer
2015-02-26 19:16 . 2015-02-26 19:16 -------- d-----w- c:\programdata\Beurer
2015-02-22 20:49 . 2015-01-09 03:14 91136 ----a-w- c:\windows\system32\wdi.dll
2015-02-22 20:49 . 2015-01-09 03:14 950272 ----a-w- c:\windows\system32\perftrack.dll
2015-02-22 20:49 . 2015-01-09 03:14 29696 ----a-w- c:\windows\system32\powertracker.dll
2015-02-22 20:49 . 2015-01-09 02:48 76800 ----a-w- c:\windows\SysWow64\wdi.dll
2015-02-17 18:34 . 2015-02-17 18:34 3209408 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE14\1031\MSOINTL.DLL
2015-02-15 19:16 . 2015-02-15 19:26 -------- d-----w- C:\Telefon Maren
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-15 06:44 . 2014-08-22 19:06 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-03-07 14:55 . 2011-12-30 14:29 122905848 ----a-w- c:\windows\system32\MRT.exe
2015-03-04 13:48 . 2013-05-09 17:41 44088 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2015-03-04 13:48 . 2013-03-30 17:52 132120 ----a-w- c:\windows\system32\drivers\avipbb.sys
2015-03-04 13:48 . 2013-03-30 17:52 128536 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2015-03-03 13:17 . 2010-11-21 03:27 295552 ------w- c:\windows\system32\MpSigStub.exe
2015-02-04 03:16 . 2015-02-11 09:33 609280 ----a-w- c:\windows\system32\generaltel.dll
2015-02-04 03:16 . 2015-02-11 09:33 762368 ----a-w- c:\windows\system32\invagent.dll
2015-02-04 03:16 . 2015-02-11 09:33 414720 ----a-w- c:\windows\system32\devinv.dll
2015-02-04 03:16 . 2015-02-11 09:33 894976 ----a-w- c:\windows\system32\appraiser.dll
2015-02-04 03:16 . 2015-02-11 09:33 227328 ----a-w- c:\windows\system32\aepdu.dll
2015-02-04 03:16 . 2015-02-11 09:33 192000 ----a-w- c:\windows\system32\aepic.dll
2015-02-04 03:13 . 2015-02-11 09:33 1098752 ----a-w- c:\windows\system32\aeinv.dll
2015-01-30 22:36 . 2015-01-30 22:36 23760 ----a-w- c:\windows\system32\drivers\DDDriver64Dcsa.sys
2015-01-30 22:36 . 2015-01-30 22:36 23312 ----a-w- c:\windows\system32\drivers\DellProf.sys
2015-01-29 09:07 . 2015-03-14 21:13 11910896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DD194CC2-969D-4D29-A36D-44DDABCE19EA}\mpengine.dll
2015-01-29 09:07 . 2015-03-13 20:19 11910896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-01-27 23:36 . 2015-02-11 09:33 1239720 ----a-w- c:\windows\system32\aitstatic.exe
2014-12-19 03:06 . 2015-01-14 06:17 210432 ----a-w- c:\windows\system32\profsvc.dll
2014-12-19 01:46 . 2015-01-14 06:17 141312 ----a-w- c:\windows\system32\drivers\mrxdav.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-11-16 17:33 233128 ----a-w- c:\users\Jens name\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-11-16 17:33 233128 ----a-w- c:\users\Jens name\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-11-16 17:33 233128 ----a-w- c:\users\Jens name\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Akamai NetSession Interface"="c:\users\Jens name\AppData\Local\Akamai\netsession_win.exe" [2014-10-29 4673432]
"WirelessManager"="c:\program files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe" [2010-07-28 194600]
"Spybot-S&D Cleaning"="c:\program files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" [2013-09-20 3666224]
"GoogleDriveSync"="c:\program files (x86)\Google\Drive\googledrivesync.exe" [2015-02-19 26232152]
"GoogleChromeAutoLaunch_4B47325B8DBA69C1C38307FCBA185332"="c:\users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe" [2015-03-07 809288]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2011-04-13 503942]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-11-25 240112]
"Desktop Disc Tool"="c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [2010-11-17 514544]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2015-03-04 703280]
"SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2013-07-25 5624784]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"GarminExpressTrayApp"="c:\program files (x86)\Garmin\Express Tray\ExpressTray.exe" [2014-12-31 688984]
.
c:\users\Jens name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2015-3-4 42560368]
GM_DevUpdate.lnk - c:\program files (x86)\Speed-Link Vibration Joystick\GM_DevUpdate.exe [2012-4-5 45056]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableSecureUIAPath"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0lsdelete\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"AccuWeatherWidget"="c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
"HTC Sync Loader"="c:\program files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
"NeroLauncher"=c:\program files (x86)\Nero\SyncUP\NeroLauncher.exe 900
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Garmin Core Update Service;Garmin Core Update Service;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [x]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [x]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protokoll;c:\windows\system32\DRIVERS\amppal.sys;c:\windows\SYSNATIVE\DRIVERS\amppal.sys [x]
R3 CoachVid;CoachVid;c:\windows\system32\DRIVERS\CoachVid.sys;c:\windows\SYSNATIVE\DRIVERS\CoachVid.sys [x]
R3 GMFilter;GMFilter HID Filter Driver; [x]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys;c:\windows\SYSNATIVE\Drivers\ANDROIDUSB.sys [x]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys;c:\windows\SYSNATIVE\DRIVERS\htcnprot.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys;c:\windows\SYSNATIVE\drivers\Impcd.sys [x]
R3 InputFilter_Hid_FlexDef2b;Siliten HID Devices(FlexDef2b) Driver Service;c:\windows\system32\DRIVERS\InputFilter_FlexDef2b.sys;c:\windows\SYSNATIVE\DRIVERS\InputFilter_FlexDef2b.sys [x]
R3 IT9135BDA;IT9135 BDA Devices;c:\windows\system32\Drivers\IT9135BDA.sys;c:\windows\SYSNATIVE\Drivers\IT9135BDA.sys [x]
R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys;c:\windows\SYSNATIVE\DRIVERS\jmcr.sys [x]
R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys;c:\program files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\drivers\nvstusb.sys;c:\windows\SYSNATIVE\drivers\nvstusb.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [x]
R3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver;c:\windows\system32\DRIVERS\silabenm.sys;c:\windows\SYSNATIVE\DRIVERS\silabenm.sys [x]
R3 silabser;Silicon Labs CP210x USB to UART Bridge Driver;c:\windows\system32\DRIVERS\silabser.sys;c:\windows\SYSNATIVE\DRIVERS\silabser.sys [x]
R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys;c:\windows\SYSNATIVE\DRIVERS\SWDUMon.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys;c:\windows\SYSNATIVE\DRIVERS\Lbd.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdcfltn.sys;c:\windows\SYSNATIVE\DRIVERS\stdcfltn.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvkflt.sys [x]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 DellDataVault;Dell Data Vault;c:\program files\Dell\DellDataVault\DellDataVault.exe ;c:\program files\Dell\DellDataVault\DellDataVault.exe [x]
S2 DellDataVaultWiz;Dell Data Vault Wizard;c:\program files\Dell\DellDataVault\DellDataVaultWiz.exe;c:\program files\Dell\DellDataVault\DellDataVaultWiz.exe [x]
S2 KSS;Kaspersky Security Scan Service;c:\program files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe;c:\program files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [x]
S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
S2 NOBU;Dell DataSafe Online;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [x]
S2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]
S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 SupportAssistAgent;Dell SupportAssist Agent;c:\program files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe;c:\program files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Accelern.sys;c:\windows\SYSNATIVE\DRIVERS\Accelern.sys [x]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed - Virtueller Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys;c:\windows\SYSNATIVE\DRIVERS\AMPPAL.sys [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys;c:\windows\SYSNATIVE\DRIVERS\CtClsFlt.sys [x]
S3 DDDriver;DDDriver;c:\windows\system32\drivers\DDDriver64Dcsa.sys;c:\windows\SYSNATIVE\drivers\DDDriver64Dcsa.sys [x]
S3 DellProf;DellProf;c:\windows\system32\drivers\DellProf.sys;c:\windows\SYSNATIVE\drivers\DellProf.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 qicflt;upper Device Filter Driver;c:\windows\system32\DRIVERS\qicflt.sys;c:\windows\SYSNATIVE\DRIVERS\qicflt.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2015-03-15 c:\windows\Tasks\Dell SupportAssistAgent AutoUpdate.job
- c:\program files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe [2015-02-19 15:44]
.
2015-03-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-01-10 20:11]
.
2015-03-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-01-10 20:11]
.
2015-03-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1320315719-3326968574-895728413-1001Core.job
- c:\users\Jens name\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-31 18:39]
.
2015-03-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1320315719-3326968574-895728413-1001UA.job
- c:\users\Jens name\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-31 18:39]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-11-16 17:33 260776 ----a-w- c:\users\Jens name\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-11-16 17:33 260776 ----a-w- c:\users\Jens name\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-11-16 17:33 260776 ----a-w- c:\users\Jens name\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 185824 ----a-w- c:\users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 185824 ----a-w- c:\users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 185824 ----a-w- c:\users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 185824 ----a-w- c:\users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 185824 ----a-w- c:\users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 185824 ----a-w- c:\users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 185824 ----a-w- c:\users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 185824 ----a-w- c:\users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2015-02-19 13:24 774472 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2015-02-19 13:24 774472 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2015-02-19 13:24 774472 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2015-02-19 13:24 774472 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2015-02-19 13:24 774472 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2011-02-18 6611048]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-01-18 2188904]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-08-05 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-08-05 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-08-05 416024]
"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-09-16 1935120]
"IntelTBRunOnce"="wscript.exe" [2013-10-12 168960]
"Stage Remote"="c:\program files (x86)\Dell\Stage Remote\StageRemote.exe" [2011-08-08 2034752]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2015-01-30 1332296]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-07-25 2403104]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-07-25 1283136]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
Trusted Zone: dell.com
TCP: DhcpNameServer = 192.168.2.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Notify-SDWinLogon - SDWinLogon.dll
SafeBoot-Lavasoft Ad-Aware Service
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-S4Uninst - c:\windows\IsUn0407.exe
AddRemove-SLABCOMM&10C4&EA60 - c:\program files (x86)\Silabs\MCU\DriverUninstall\DriverUninstaller.exe VCP CP210x Cardinal\SLABCOMM&10C4&EA60
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
c:\program files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
c:\program files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-03-16 20:26:31 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2015-03-16 19:26
.
Vor Suchlauf: 19 Verzeichnis(se), 572.657.856.512 Bytes frei
Nach Suchlauf: 25 Verzeichnis(se), 571.859.914.752 Bytes frei
.
- - End Of File - - 8927059355E749BD62EFDB8C20E02112
Jens |
|
17.03.2015, 12:39
| #9 |
| /// the machine /// TB-Ausbilder | Avira free antivirus meldet TR/Dropper.A.25752 Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
17.03.2015, 16:34
| #10 |
| | Avira free antivirus meldet TR/Dropper.A.25752 Hallo Schrauber, vielen Dank! AUfgrund der vielen Zeichen mach ich 2 Antworten: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 17.03.2015 Suchlauf-Zeit: 15:46:19 Logdatei: Malwarebytes.txt Administrator: Ja Version: 2.00.4.1028 Malware Datenbank: v2015.03.17.04 Rootkit Datenbank: v2015.02.25.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Jens name Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 384089 Verstrichene Zeit: 17 Min, 24 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente erkannt) Module: 0 (Keine schädliche Elemente erkannt) Registrierungsschlüssel: 0 (Keine schädliche Elemente erkannt) Registrierungswerte: 0 (Keine schädliche Elemente erkannt) Registrierungsdaten: 0 (Keine schädliche Elemente erkannt) Ordner: 0 (Keine schädliche Elemente erkannt) Dateien: 0 (Keine schädliche Elemente erkannt) Physische Sektoren: 0 (Keine schädliche Elemente erkannt) (end) Code:
ATTFilter # AdwCleaner v3.008 - Bericht erstellt am 18/10/2013 um 20:38:53
# Updated 17/10/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Jens name - DELL-XPS502_JV
# Gestartet von : C:\Users\Jens name\Downloads\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\Program Files (x86)\BonanzaDeals
Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup
Ordner Gelöscht : C:\Users\Jens name\AppData\Roaming\digitalsite
Ordner Gelöscht : C:\Users\Jens name\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Users\Jens name\AppData\Roaming\Systweak
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Windows\Tasks\digitalsite.job
Datei Gelöscht : C:\Windows\System32\Tasks\digitalsite
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\92db8ce53de545
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\systweak
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16720
-\\ Google Chrome v
[ Datei : C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [2480 octets] - [18/10/2013 20:33:33]
AdwCleaner[S0].txt - [2129 octets] - [18/10/2013 20:38:53]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2189 octets] ##########
AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v4.112 - Bericht erstellt 17/03/2015 um 16:13:30
# Aktualisiert 09/03/2015 von Xplode
# Datenbank : 2015-03-15.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Jens name - DELL-XPS502_JV
# Gestarted von : C:\Users\Jens name\Downloads\AdwCleaner_4.112.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Users\Jens name\AppData\Local\NativeMessaging
Ordner Gelöscht : C:\Users\Jens name\AppData\Local\FileViewPro
Ordner Gelöscht : C:\Users\Jens name\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Jens name\AppData\Roaming\SuperEasy Software
***** [ Geplante Tasks ] *****
Task Gelöscht : DigitalSite
Task Gelöscht : LaunchSignup
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\Classes\pokki
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{065C1A21-97F8-45FB-A9F0-861B60FACEC8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3204358F-5904-46A6-841F-D6B5BE3EF4E3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3AE67737-0E3E-44AA-AA5E-46A68BF017FF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3EE5B726-044A-48D2-AA7B-049BD9A0F62A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{60FBBE03-57FF-49D8-B38E-053D3F489825}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6A5182F1-C0B8-42B8-96CC-7F329CD46913}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6C153418-8E4D-4FAF-AF27-5201E38463A7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A26A2F05-AC4D-4A1E-9531-9125F7309B78}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CC5D6240-7DF0-435D-9B9B-F8586A99DE86}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F343045E-E20A-46E1-82D8-9962C43EFC9E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FBB360DC-CB6C-4D6A-808A-2C773151BFFF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FFD7DDAC-EC28-42A5-8D39-917B9078604B}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\adawarebp
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17689
-\\ Google Chrome v
*************************
AdwCleaner[R0].txt - [5425 Bytes] - [18/10/2013 19:33:33]
AdwCleaner[S0].txt - [4981 Bytes] - [18/10/2013 19:38:53]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5040 Bytes] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.5 (03.17.2015:1)
OS: Windows 7 Home Premium x64
Ran by Jens name on 17.03.2015 at 16:20:51,16
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] C:\ProgramData\Alawar Stargaze
Successfully deleted: [Folder] "C:\ProgramData\ad-aware browsing protection"
Successfully deleted: [Folder] "C:\ProgramData\pcdr"
Successfully deleted: [Folder] "C:\Users\Jens name\AppData\Roaming\pcdr"
Successfully deleted: [Folder] "C:\Users\Jens name\appdata\local\cre"
Successfully deleted: [Folder] "C:\Users\Jens name\appdata\locallow\pcdr"
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0015BFA2-5E40-4CEE-87FC-C710248770D2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{00D3C04A-BD3B-40A7-AE97-B682E8ABC1D8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{01584C92-C7B9-4D15-AD0B-6A9D17F6055C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0201EAA5-79EC-49F6-A26A-CC40E354420C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{02654363-F859-477A-8B71-D531C1BCB176}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{04800401-6EE0-4CF5-A00E-A2022546645E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{04E5CAA3-AD28-4A2F-A6B7-8C3CDF58B436}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{053FBCD5-A9A8-4B52-8474-51584012E1B6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{05B37222-C528-4591-BC77-B1006F01062A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{05FCBC38-BEAB-47AA-81AF-7F0B743EB8E8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{06165CC3-C0EE-497F-86C7-2BF73270C2C4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0696C817-4406-4FA1-91D0-1F1CAD45909A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{06A4FE1B-E6C9-482B-95CD-8FFB6AD091DB}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{06DC445F-73DB-4489-8B49-D30B3886DD4A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{06EC68A5-29D5-4B6D-B754-2794E1C6BB95}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{07F29484-32C4-47C0-8108-CE6FAC07E629}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{07FA225B-F2A0-4AE0-A05C-7527E552D0F5}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0810C120-ADB8-45EC-BB80-96FEAFEE78C3}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0888E0ED-1773-418B-9E44-593B13E1D2C2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0911BE32-CB80-4676-8A8F-09B2B50384EA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{09D06451-2885-4ED5-B39D-3D4DFD1C6B55}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0A388D28-1517-4EA7-81F9-CD5F6B8C8D4E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0AF0B101-E649-46A9-8E7A-8D52DD2049F7}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0B35F374-E812-41AB-94D1-581D085D8143}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0B3E6F91-7BF3-46AB-A905-ADE19C4F7157}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0BD375FB-181C-4800-8853-C831B4E09F19}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0BD92A21-CEBC-4029-B97A-7EF2BB292A7E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0BE9C57E-E875-4145-B657-7D54EF09592A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0C21C60E-E478-425D-A790-A80E694B08FC}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0D0F6B6A-4FD1-46F0-A1E5-1A4C89BD3293}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0D950C09-129A-4D6E-93AE-0751D001E032}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0DE92529-8853-4FA2-B712-0DBA80142B38}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0E2A310C-E1C6-471E-B210-6DC1CDA8F9FD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0E5E207D-C03E-438A-9395-A7C8F3F277CD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0E898C63-E621-4DDD-A19F-F8AC4F6F0A12}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0EBBE1A2-4A2C-4240-8639-DDFD3329873F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0ED41FBE-68ED-41DC-95DB-2444B568AEBD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0F60F432-D7AC-4F3A-AFAC-6BEC8733EB28}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0FE70B38-6CF0-420E-9F5D-90EAE2639872}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{0FF84FC6-9CE6-407A-A07B-A28CA89F1F43}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{10003F4F-81A7-4F4E-80AA-9B48BC12FC59}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{10F1A934-83F1-4DB7-A846-B91C6523F293}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{111B6E48-6401-4635-A40F-5CDC3C0691D4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{116B8EE8-9ADE-4CE3-A3BD-92FEC091845C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{12DEEDE8-8429-4F94-BEF3-97065B469790}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{12E4AC7C-702C-406E-91C9-F7C1329C7F2C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{134D520D-C08B-4FD4-92D6-29D00E9F823F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{13A0EE10-69CE-4A17-B63D-8E2F152B697B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{1486256E-4CCE-4AD7-A022-FAF452E8402A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{157B2F7E-C478-4130-9C28-791956FD67D6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{15A3CD20-70A3-4CD8-8C20-F8352C5DB295}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{15C2A13E-D43B-44D3-A795-15839FB396D1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{16068F74-7ECB-4FD8-977F-8226AC2359DD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{1665C3DC-FF5B-4E24-B4AC-9270D1B75246}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{1718A6B1-CA99-428C-A92E-AF304B7BDC29}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{17336DC0-0A65-4918-8FD8-30A7F3EC4591}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{18A4B2DA-22B9-4DD4-821D-B610921B3A27}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{194B8DE5-31CC-4C95-B2E1-140E7FC0AEE7}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{19F7F3E7-354D-4CEF-84B1-E8FAEF28C3F1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{1A005183-9A1B-47BB-A845-7CDACB690C32}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{1B24FDC0-9FEB-4106-949E-E3865C622B73}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{1BA73AFA-F650-4147-9C5E-FFA10C7122F1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{1C62AB41-9AD1-4D9E-91CF-BC75A8D51F39}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{1CA249CB-B218-4D45-8E1C-6CA5BBDE64BF}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{1D412061-7749-4D24-A15A-32603BFC1153}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{1DF620F2-CFAA-4501-AE7F-E02EA062073B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{1EC43DEE-6E65-4234-A8D8-A99F10B08AD6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{1F585692-26C8-4711-AE5F-E9559932D0B1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2141ED4E-FA32-4A09-8B76-3EA1A22A521D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{21A9929C-39FF-4EEC-A221-8C75D2CEDEC8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2264F485-DB26-4037-ABEB-CF9E09C1B8FA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{227924C0-5A48-42D7-BB89-F417E8DE4E33}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2294C742-81F0-4800-BD37-1679CBB5A79A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2296C824-0992-4B7B-A4D0-07D5EAF6E1DD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{22C1EE70-9F2F-41BF-BF11-520EE82BC65F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2395CB9B-A181-4A97-B2B5-99C0A12D634E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{24276680-7164-42FC-A46F-3B8E4024D2CF}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{25517E34-7D33-4847-A4D8-48B952267E27}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{27F1A0EB-278D-4019-B233-ADD9E2098F5B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{28575C1D-4628-4917-9814-5204D119BF64}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{289D32D5-F1F5-4BA0-907C-3FD236BCE2A5}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{289D6C6C-FEA6-46E4-B1E3-F7F727FC4389}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{28DED5FC-F0B5-4FFB-AE33-DFAEAA5C8233}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{28E3AB16-B4CF-4F97-922D-19237AE239ED}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{29285F62-39FA-4F39-A7FF-D1617EEE2DFA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{298B6537-5784-42AC-B1ED-A9236AF1B0DD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2A45279B-B673-4AA5-9DB2-259A872B9676}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2ADCAF3B-3BB8-413B-931E-25101507842A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2AF963BB-6BBA-4070-A2BF-D6D49B6E2268}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2AFB77F6-AFBA-476D-918E-E87A503579FF}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2B480188-23B3-44E9-A4FE-B487B08566F1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2BC9A871-3C3B-4C9F-8297-C56F2A5C4B0C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2CB60D0C-3CFB-4B67-A97A-FD638EA3DDE7}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2D0FA03E-526E-4480-9D5D-1F000285C4F0}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2DA1912C-5EC8-4BF3-9B83-9D386EB861E2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2DE4363F-4584-4D28-BA42-4CB22D65A50B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2E629E61-B5D7-424D-982C-1877D31E6E6D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2E9BEB1C-3E05-4676-AB8E-3E5E82460DA9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2EA0BCB9-E302-41CD-BE4A-BE831C2D96DB}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2EA8BDEB-B718-4D3A-8494-B36789AC88FF}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2EBBD658-15FA-4E0E-B537-3E7A8E2A63CD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2ED80B65-B57A-420C-864E-5DC8F4944A6E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{2FAE4D85-A8AF-4D38-89A3-A4A53C8F1DBA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{30EA5F16-DF1B-4791-9D36-F3FCE9C046A8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{310D7905-5B21-489F-86CA-024BA0CE99C1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{319BBE06-AFAC-4A07-84C5-E0621B546832}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{31A9D8C0-5632-4527-BCE6-BC23FD58DF82}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{31F9EA58-6ED6-4A59-9231-759CD80CBE25}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{32842C15-446C-4D81-9EE3-DC2AB5331E9E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{32969ED5-4FDD-4A90-8709-C617D48A55B9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{338EAED1-5CB3-4B26-A227-28134F15696F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{33AECFA9-F0AC-462D-BA73-B3CE1299749C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{33D91929-6C7F-46D7-8CB0-8B68622F670C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{345812D3-1EFE-4E2C-B1B9-5027762F655E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{346EB918-AEED-4B4D-8684-396066D191C5}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{34AB5084-C890-4658-92F1-A94ED25B1101}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{34D4352E-3986-45A1-A6BA-5A3E7EDA5298}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3709611F-2C48-4C53-963A-0AB63E77D610}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{37497AC2-B6A6-4C07-ADCC-D269554C834C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{377AE870-AE6E-4844-BF3B-A69C1D1F4D8E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{37940F4E-0E59-4F16-A8D0-CBD21D5B09EE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{38A64E86-679E-4006-B692-CCAE2A1A0A2C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{38E82BCA-5AEF-4DE3-948A-A91855B64EA6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3A82FBAD-1D6F-49FB-9B28-512384E407A7}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3B4A078D-65F1-4DF4-80F4-EBED2D3C7F9E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3BB559D3-8ABA-4075-9877-7CB14077D288}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3BCB2926-3399-4E7B-B685-566C9899EAC1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3BE18A5F-669C-4F62-B9C4-0E8DFF1744AD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3C9DE576-0F73-42FC-940A-BF4F1532433E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3CE642BF-7566-4DD0-A3E4-DFD8553D2994}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3E2F0380-C0B0-4126-8AEE-50E63EF72F7E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3E4179A7-0EDA-4775-8ADB-BC37BDF33913}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3E636600-A738-4EF9-A7C9-D8D358D1995D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3E7894F1-7987-4781-8131-ED3454818731}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3F52895E-E66C-4FDC-91E6-55F0ADCA3B37}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3FBBCD4C-3571-4E81-B888-1D794416174A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3FEFB19E-AE0B-4666-B2AA-665515B6AFEA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{3FFFBAE7-BFA4-4FD2-81C6-2EE18962AD76}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{40033B44-9884-4BF5-A399-7ECFCFF02456}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{40412D21-FBAD-416C-9D14-58E1BF877E9E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{412AA6A5-E95E-4140-AA43-48088C14FBAE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{41565F1E-A1C2-40A6-8573-0807F83EA91D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{41E407AE-206D-4DE4-BA58-88536E284776}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{422A2E6E-C63B-4CEF-8566-DC90B5A5CC57}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{43A0D204-57D7-4D60-B1C9-92DA0B39524C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{43DBED69-06A8-4D0E-9F52-95393BCD541A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{44707793-248A-43CA-840F-26635D529616}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{451EE6D1-4CDF-4B68-BC51-CEBA93B8A5CA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{45287849-0587-41E5-B9EF-CF9AC18AA01B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{4531E156-3ADF-4845-8779-CC45DA71EF60}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{45884BAB-6570-41C1-9B43-9EEEEAD721A5}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{463E9B52-3E05-496C-9C88-4ACA82C09C5D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{46EF0397-056D-4A21-B76E-6F561197B575}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{470F8F79-D90C-443C-96DE-6CA5ED029066}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{4760B591-A86B-425B-A4F4-C23A073EC697}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{4788A05A-71A0-4D16-B89E-7B40C644DCF9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{47D6A26F-42B6-443C-8CEF-3FEDC67DDF2C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{47EE5B4E-6D03-4448-8E92-CB593141AEE8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{47F6FAB9-935D-4593-9B70-294DE3579102}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{48BBDFFC-B944-4372-BD7B-575213DB61EE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{492D7B22-DCB7-43FA-874D-F9270519E828}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{493DC8C6-674D-4122-8730-188E4CD5528F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{4A4ABCC8-D866-4B01-910D-A1B969E1D22E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{4AB8582B-9709-410F-8823-EB802C6F25D2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{4BDC793A-B911-44E7-844E-626915B4667F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{4CCD12DC-AB6B-44F3-A60D-C29D4ADD236C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{4D76FE14-31BC-4BBE-8B0D-539E00B42B76}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{4DBFB9BA-8DF2-4AB2-BA51-0B43F7358D54}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{4DDCD943-D5AC-41B4-B7DC-C3B97B02380F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{4DEB8240-F035-4211-8B4F-5E93D7AB1EFF}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{4EA5A074-94B6-4928-AD27-228B89E08703}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{502F78D6-2B74-4716-89B2-078AE5287DA0}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{514C787A-E947-4537-B91E-303D9FC19EB9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{521DE6AF-BBD8-44DC-A674-2F4E73641F08}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{523B16A5-FF70-4CFF-9682-8AF1B6C6C8DD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{523F6F7A-44C0-4961-B109-4D7096B8FAD2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{52552F40-C236-4A07-B218-B937F448C65B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5360F617-6491-4997-899A-A00F23AA7FFB}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{53A100E2-323B-4C6D-B1DC-7A73FB9B4D58}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{54458C4B-3804-4F82-9F60-5BC0CBA02EFC}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{547C201B-A8C3-4AE2-A038-02B1CB787112}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{548F117C-919C-4258-8995-DDD4E74F0BEB}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5490EB81-FAB1-4FC9-9EA3-012D3BF07070}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5494F2AC-B51E-4961-B87D-103EED17EF4B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{54A4142D-9573-4479-8166-8706CA3B2AA9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{54C0D361-A111-4B26-8407-34CC4021D0FD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{54D55030-3DAA-4A4F-A947-7C295D5B9E91}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{54E6EC00-3E1A-4CDF-9535-88D5B18AC359}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{54F1874B-30F2-4665-8314-605FA852638B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5615B24F-4E44-4745-BADA-0768492BE1D7}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{566D0564-F83E-4FF6-9C6F-DE47BA623C9B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5691BBB1-4040-4B76-810D-8E5441B57FCC}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{573155F2-844A-4FDA-8B2C-9330191951AD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{57409ABB-4BB1-4750-9276-C2B6B425A4FB}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{575967A2-C016-4680-8978-BEE376318796}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{577BD9AB-CE25-4AC4-A128-AF515E395454}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{57A36E50-BF81-43FE-9AEE-D0D1CE583899}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{57AA2FEB-6869-497D-941E-5B202A91B3E4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{58143FAD-7E03-4848-A0DD-C02919605564}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5875FA06-3602-41CC-A16C-431956F3FA90}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{58BBA005-10FA-43AE-93C2-F440A9F2A595}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{592BC7D9-5C90-4D49-B413-977F2CC3145F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{596D7D9B-EE0B-4100-A830-FBF847DBA36D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{59D6744E-1935-458C-9C16-F737B2B93731}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{59ECECEA-2C76-4B46-A77F-1B90F83A3DE6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5A38C3A1-3E5E-4823-83DA-DFE83D8668D3}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5A4408E2-57FF-47ED-AC7B-4D83349538D8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5A4F67FB-9129-4DC4-B163-6ACD68CC4962}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5A5D6006-DBFB-4EEB-8E48-9DBCDE1DC680}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5A693B9F-62C7-4223-BA73-38CD54693A8D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5A8BC374-D013-4FF7-9225-1FB36C205234}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5AFD4C8B-D3AA-44BC-BA50-A71A04F1576D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5B05C45D-07E3-430B-867F-29728031D495}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5B87DEB0-B827-4ACE-94C3-4195F33A64C1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5C4AB90A-5A41-4F78-A558-E5C0470392D8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5C4CA301-82D3-40C7-A4BA-A837485EC5CB}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5CF96254-3579-4C87-A94C-301AAA8C37E1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5D599660-7D73-4ED2-B117-20F669FF8067}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5D720001-41AD-4C61-BCA1-AF6F523AFB06}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5D98A356-F950-49C1-B794-4C1477CDCE16}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5E227E9C-7D3A-4441-9606-9463301BD073}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5E868A9E-B552-489B-A4AD-C252C8AA6B57}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5EA51719-57C6-4F82-B397-F5F7CBC81EC8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5F2A2938-AF90-4CC2-8077-A058519D77E1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5F4B1DF6-AE72-4166-8906-4150E8DA066E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5F91771B-75EA-4178-8B4F-BD565FFD26F9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{5F9B6776-F17A-4220-8EDD-1A185C91DEBC}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{604A6BF1-D9B5-4453-BC52-021240AC3B0C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{60502176-246B-4924-8FAF-1A60A953F0D7}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{60994759-F844-4EAA-9DAD-2ABA91F53C31}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{620A52F2-3513-4FF6-A7C2-1A39C1D91A20}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6225E4CE-06F5-47D7-BB71-BB839E76E64C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{62538237-84B5-4B63-826D-BB8291E4287F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6258E7EE-8D88-43B9-82E3-859C0974BF8C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{62B0464B-5D73-48AC-9B30-B4E7FCE8632F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{62BE31C7-AC55-4B7D-B46E-590A0CDF9B4C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{62F8FB6E-7C7E-42AB-ABD1-CE7B7365FB76}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{635B81E8-41B9-4B91-B9B6-4A9F6EE11787}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{63F8C969-2CEE-4E7A-86A7-72694FA633A2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{64FE2AB3-DE5C-4C27-B9B8-8AC5496B8246}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6506E740-59B5-4195-B5CF-7F9A920ADDCC}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{65C14D3A-3B2F-4585-B9AA-B7A62A2DACF7}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{65D5E054-95FD-4FEC-9EC9-3C958FFC04D9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{65DF75CF-D894-441B-B025-8406DEDAED26}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6719430D-5E7A-47AE-A977-20C93FF23D86}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{674AFA18-2016-4964-8D98-BB39F77DC93D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{67CEB4C3-0F2F-4DDC-B2EF-6F3644E6C89A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{67F4C76D-0CB7-44E3-9A80-658BFFC1F4AC}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{68A892C0-52B7-4EA3-B741-61EC82DA9EB7}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{68DA7A97-A3D4-4F82-A001-23DBBB9D13AD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6956C903-E790-4CD6-BD03-E11FDD269B87}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6A561BAE-3F1A-479B-9E36-2F835CC0E7E0}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6A6520D4-A055-4EE7-82D9-AEFABEDDDEAF}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6A9C9F48-19C3-4EB9-BCFB-FD110879E5AE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6AD7C6E4-559C-4344-9A37-5E6EB14C64A5}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6B2F3C15-DABC-4F95-8517-842CEE9E733F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6B60D582-89B7-474A-8D1A-32B864208A9F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6BBECDEB-BF10-428A-B43B-F80818A79D37}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6C07C46F-C59D-44AB-834C-A4D4726A5127}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6C6AAA94-9ABC-495B-AE2F-E2DA26A72260}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6C7321FF-8E8A-4A2E-A4F5-D3D688093467}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6CAEAD25-6C5A-4926-A531-032200CD5EE6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6CDB1FE1-98F5-411C-A38D-045750ABB5A2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6CFED9CD-E1B8-4922-8C2B-DD3739E0C839}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6E4C878B-FBC7-4AAB-8260-76396B2968C6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6EBBCCAC-347E-4230-BD8A-A22254FDEDD9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6ECD5607-F9C8-4AC2-ACDE-57E1BFA1FBD5}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{6EF6D7FE-ED5A-41A3-922C-856D35B13836}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{70DC658F-EE1F-4CA2-B296-B02C7C5BB49D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{70E65D00-748F-4205-945C-2E15FA6C3B30}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{713BD8EF-85B8-4E02-AEAA-26532927CB3A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7156DC58-FC37-41D9-86A9-1A41EFADFC05}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7210921E-B6DF-46F7-8D6F-BEF4DEA3A860}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{72B126BA-9E3E-43ED-B48D-2DB514E757BD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{73510E95-FEA7-4579-BB4D-B221EE9E5AA8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{73866A18-51E1-45A9-901A-B6D7D10D7634}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{742C9EE9-43D6-4BC0-B100-2FFFAEE4A6E3}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{74D9BE45-24E2-48A3-A0F0-9DDB27D659D5}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{754C539A-7092-4141-A141-E283CF38AB37}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{75A0E678-3D55-4829-BB92-DBE83F02A563}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{75BC740C-2A59-4188-9E10-63DF43D12DF2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{767A9954-1427-48EE-A898-2C9D729FDD58}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{770FD349-F6DA-486C-9C58-67D78C8C5AC2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{773BBE57-7588-4B8D-A25C-9AAE5FE35A7E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{77A78EC5-C0AB-4D89-AD90-AD31641FAB0E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{79E24BF5-74CB-402F-AF27-66089F80E482}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7A3A84C7-F551-4379-B2E1-58B2A7559406}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7A4CF27A-DC1D-42D7-88B2-0384EBC247E2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7AB63C09-6644-43F3-831B-F5719637D8A6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7AD64B8A-EE05-4F77-AC61-407D02FC3306}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7B4DF4B6-D62C-4861-9B27-9004C11516A2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7B59C0ED-C970-4C1D-B8F3-3670ED9ACC8C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7B96A3FF-5F1F-4072-881C-275F2A50D327}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7C612C0A-65C3-4EFF-9DD9-F0A2538BA0F9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7CE79489-86DF-43D7-A1BA-EADDBD95CF11}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7DA7621C-FDE8-4973-9880-BE3F88E6F800}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7E0EBAFD-D201-4E4F-B9D5-E9E1BD1F71FF}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7ED1CE1A-8819-4C6A-9AEB-0137DAFDAD22}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7F3B5E9D-EA8A-4A25-8146-59876F62A241}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7F640958-72E3-4366-8E89-DB09CD929336}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7F74E800-4157-4ED6-88BB-FFC2A0AEEDE4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{7F8677D1-B698-4EC7-B2C3-A601CD5C8498}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8043DEBC-D2A7-4801-A65F-A22C50E883A8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{806A6BB3-F850-401B-B0EA-8183EDABA81C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{80A3D04F-1631-4893-8B1E-8360F8060F59}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{80D096CA-B8D5-4A20-8709-BDD8E402AF9D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{816519C4-142E-439C-8E5D-FE78EEB53FD1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{81F1B261-4D24-4737-A870-45BB81A03335}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{82D059C5-B5DA-4693-94B8-4D9E65A291C3}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{831E8536-70F4-41D2-9368-243CABA6B1C5}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{837405A9-4FE9-4B08-8A31-DF9E4B81EE2E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{837A95ED-807E-47DB-8D43-092A3C5A91D0}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{83ABD8FA-ACEA-4FD3-AB0F-F0FE03B2EA6A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{83B0B3A4-26E8-42B4-92A2-3AB2D0FB41E2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{83DFB411-F5DE-4669-9C05-BE6386043CD8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8415AFE9-6B61-47A1-89A9-F174745B1F85}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{84BC603E-2D52-41A7-A268-BD5DC81DB041}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{84E83B9A-2025-44DD-9BA2-206BDC7E8360}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{853F0B49-08F1-49D8-B503-946D2CCDA2CD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{85A2BC2A-7E27-4B42-900A-69FEB43E91E3}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{86117531-E9D3-4A71-8EA8-107CCB30B52E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{86651DFD-17FE-45BB-A450-D36F340FB09A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{870A50A3-E1D0-40AC-BB73-D87AD67F7B93}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{87339296-9E40-4ED2-BA6B-5099267F5509}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{873DF34F-297A-4888-87F2-AF3B9D0046FF}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8784D0FD-E8BE-4EB5-8130-F0D8F6310D02}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8789F008-2389-40EB-8FCA-960BF1C3F14E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{89326670-10A9-4490-BC95-EBF17A3AF4C0}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8952A930-B41D-4CC8-AD27-E8FAEFC45B8E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8961CB6D-FCC4-4ECB-8FB5-011AD59F17A0}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8A241102-5018-4733-A664-071ACDF59628}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8A6B24B0-9937-48FC-805F-42A2199BE60F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8A841EC7-D232-4781-A113-A672B2A2D9BF}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8B265AAF-E140-4129-85FA-5BAC516241F6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8B432FDC-EAC0-4AEC-9D33-5B0B8DEED56B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8B654CD0-643A-4F1C-93FF-21AD03BD2A54}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8BA45859-8BAE-45B8-B7BD-55DBD2CDDB13}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8BA5ADE5-9711-43FD-8AF4-298A079FFDCA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8BBD2EC8-AE95-4FA8-B2E9-0902D8B8C619}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8BBFF5BE-9AA0-4197-918B-9710555C5C7A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8BE200D5-AFB9-4C75-B639-624F71E0F9B3}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8C3BB832-5507-44A6-8989-8027B7924181}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8DAE3CC8-7827-418A-8307-C12EE5426EFE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8DFE1E8D-C31C-4108-9977-0BD6E18A7633}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8E28EEF4-0213-4652-A731-AF384E631F7B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8E3E0AB6-90C6-4365-B014-998F2AB5715F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8E917BEC-2482-44BA-B379-D904DAED5E53}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8F273A58-5E77-47BC-A47F-4EFB3467ADB3}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8F4858FE-7B74-490A-ACBB-3A6863819B6C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{8F5F772C-DDE2-470B-BF83-E52BCBEE61A3}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9048EB5D-C93E-43AE-A906-A5AB491169DE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9141D924-6F77-4001-B86F-0FC7FC0345FB}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9149518C-E115-47EB-A73A-0F8617020F39}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{91809335-B7D8-4CAB-A5A9-E92E72441587}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{91DCEB9E-48D8-4BF1-BBB2-135889CF264B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{91EE6426-F61C-43AF-B3D0-9849A0F6D53E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9248209E-1672-4DD5-94A9-0A86D0E542AF}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{92E6B3F8-2019-4D66-BC33-AD33FB7B34D5}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{943CA3CE-509B-42C4-BB9D-AF455C759916}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{943E7363-D524-4E3F-A2E4-88E1637DF1E7}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{94CC0E3F-4CCA-4887-AAD2-280205284D18}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{955FC9A3-0BE3-4594-A863-84FF1B6699E7}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{95A9F1FB-5A4D-4EE3-B617-4E80B6F0FE72}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{960FBD41-6196-4F65-811F-603953FDB8EC}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{964F3A48-3B13-4677-AE8F-24A0F5F3133B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{968E9B2C-3C4C-459E-8DA4-D8388DC9AB95}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{969A0425-8ABA-40E6-8723-95A44A52C793}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{96E7DF04-83E3-4661-9776-5C31A191FF3C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9795AB38-2085-4B1A-94EC-D96C296C7636}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{97A2388E-8FFD-4138-B4F7-B94303838157}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{97D454EB-1F37-49D2-9901-49CE85E48AA4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{982FB4B3-D2E8-41FB-B8E7-25BA6A3155F7}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{986B0F9A-D019-4261-8AAA-998636770184}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{98890CC6-8196-48AF-8F3C-F9A1EB36FD96}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9912F4F1-9ABC-492D-A432-9DE96DC1D4D6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{99557E88-7C96-4E87-9F25-EB8DE6B36338}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9977C5EF-E1FC-4991-A5E0-852E17356B07}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9A451C56-B5B1-4F05-8D1C-B5755F7FFD4A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9A761248-2EC9-45C8-B77E-0D76E7B70828}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9ACF189C-C588-4312-B62D-6350B37D024B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9C2857E1-5AEC-450D-998F-5C44892CD798}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9C7ABB1F-3C14-43FD-9BCD-F80551B471D4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9C963539-2A81-49EF-AD01-2CDDBB04FFED}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9CA00834-17CB-4B95-B25C-4C6FB17116EE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9D260084-1ABE-4D0C-A7CC-FE0C03E62C91}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9D58B2CB-2087-4DA2-AAEC-2D9B1B126E21}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9DB332DB-4687-442B-840A-A0F5745D4249}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9EA77B5B-EE14-4EA3-A954-B205F4AF3803}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9EE802EE-A03D-4466-8ECD-09D08223713F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9EE9AA1E-F6F4-405C-87A2-93CD782ADAE6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{9FA019B3-5570-48BF-9826-894526E005B3}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A03528D9-1CB8-4475-8598-6115C369C379}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A1042DF9-ABF7-4D6B-B12D-59A15338CC85}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A19E8215-537D-4289-B79C-5DA2FC4EA7AD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A1B7EC40-1F46-4B0E-A2AC-D0FEF4F8AFDA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A1E9E599-B98F-4FE2-A111-91D345F792FE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A212FDF7-F3AA-4ADE-B24B-378B38D55E5C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A253D121-ABF0-41F1-A363-E938CB532077}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A2A9E259-61FA-423B-8447-F7589F83001B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A2FEACE1-1710-4775-9DC0-7633B24A583B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A380A9F6-A6CC-4DCD-B5B0-6A25BB1842CD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A3CE142D-3063-4B27-8DCD-9745E224C4B1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A42AE5DA-42E5-438A-B738-5E0C73C4BA38}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A4CF631E-3081-4B8D-8D50-6D7A9C5F9C6E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A4E03205-9272-46A8-A838-CA1C927ED862}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A546D32C-EE95-493D-953C-9FA7FCE6AF3C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A56016AD-B853-44CE-BA6E-2630B04D6017}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A5B779F9-B0FA-40F7-8C0E-640E1BA17169}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A5D2611D-D435-46E3-9699-C9E28C8CF16E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A60C013D-0BBE-45C4-9B31-C28F90D4994B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A616612D-E729-430E-8DAE-46A2447775CE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A61E2909-A8AC-4BA5-832A-3785F921F174}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A63B78BA-4C7A-4E41-98AD-0DCBAE13B961}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A66D4AE4-2EB2-4D9F-A45E-5027D2C0DB7B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A6AB0B8F-1A51-41D2-9DCD-566F1F898DB4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A7280E8F-B765-447F-BF2C-4E7829D96BEE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A729C811-3491-46D0-AEBB-48EEA5EE88A2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A7C24C13-88F7-4146-BD0D-4994E0DE78EF}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A8005ED9-A038-41A1-88E1-0C1A4035E088}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A81E48A7-81B7-4C0F-8390-286A2610D260}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{A9D5D8E4-54F8-4EE8-880A-03A68F2859C9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AA1B27F7-713F-4565-B838-8319C9194C07}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AA2E63F6-509D-409F-AD6C-008EE3AC11D8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AA802E06-44C7-4A50-99AF-5BC07FC0B26B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AB01A737-40F7-4B8F-BCA5-32489B8ADB36}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AB168C8E-2704-462D-9C3A-09B7B6A96029}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{ABA77A46-B5AA-44CE-B5FC-F55112285EEB}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{ABFFDF32-9CA8-4BC9-B28A-69215B662162}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AC543EBE-0C88-4207-904E-2E342134E166}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AD3BB8E4-96AF-4104-85C2-38A0B235688D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AD9264D1-5B5F-44A4-8181-0AADDD4EC7BE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AD9951B6-695A-4044-A309-125A0282DCC7}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AE2DEC2D-59C8-49E6-9B8F-599AB0A62FFE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AECCD5A7-E793-4F52-9B14-B0A63E45B469}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AEED5716-A874-48F5-94AF-CE4FF410A0E9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AF09754C-2ADD-4056-9459-20B4E3F85F95}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AF88538C-3500-4FAC-BBFA-91328214C8AA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{AFFE4818-6B8C-4BA3-BFAB-D90BE7BD4AAC}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B0AA1400-DF0C-41F1-87F3-4DB1A83AF506}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B0F8A3E5-BFB7-4C60-8CD7-208EDEF6139A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B1291052-100F-45AD-B89D-22101D39A578}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B1492E89-E0FB-455B-8759-C46DA2CBB17F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B173239D-EBBA-4483-AB06-C30C2029B690}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B1ED4153-95CE-4A76-9278-1FE2CF8CB4BC}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B23AC4C4-91C3-49E5-8778-F695A18782C3}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B34FDA5F-D7F9-4D91-966D-017771A2EBCD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B3910386-CEAE-40CF-A068-8EDA7209FDC2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B3C49547-1008-4FF9-9954-1A7C92A67DFF}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B3D48ACE-CE43-4428-8F21-73906B0FE591}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B450AEB5-9BBF-4CFB-A15E-B6699A9C050A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B4A3DF18-9C65-4AC2-9C45-0CD79A8E0982}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B4EC3571-A0C0-424A-A1B7-7D6118A98962}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B4F6730D-58DD-499A-A4DD-2AEF29AEE67B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B562D4C5-689B-455C-8EC9-91D867009FB4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B5F8E3F7-7954-40E1-903F-29CB79B1660B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B65E4A69-72D2-4A51-9AC8-78DFA0FE8192}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B667B8B0-CC2A-4884-A921-6C2A26D80AB6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B68A2D20-1562-4D67-BA1F-DA47052931D4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B6BFD9BC-18F7-480D-9B8D-0FC76F793E52}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B74ADCF8-BA63-49FA-9E98-7BEF0321E0E6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B76E1229-7F2D-4FE7-9F8C-1E11BC869939}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B7B80CC5-600D-49F1-BE1B-C6CA4C4D1992}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B8C019FC-9B3F-4C21-91F0-90FCAA561CBD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{B97ADE75-A01B-4B82-92F1-7A4A9BE75A87}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{BA5D2C40-2205-44EF-BA70-0C9C715E0231}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{BB8473D7-F614-4CA3-83F7-9D223C4EC51D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{BB9D2074-B533-4234-8B6C-7A22477CAA1C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{BC71C884-B138-463B-83C9-F62AD6F9E699}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{BCC95A43-FA44-40AA-B58C-3E9CC94947FC}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{BCF132E4-955C-49A9-A800-881FD197A36A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{BDF62644-EB4B-4CA0-A634-DFAF815AF5CE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{BE4E414D-EA66-4E30-9A45-3081555BC072}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{BF9B3B58-64EE-4BD9-973A-65C9D069F190}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{BFAFE2D6-E8E7-4CC1-BAFB-3A24586D35E0}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{BFC58AE2-F2B3-40A3-BAF0-DD118BBBE2A4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C0AE8272-640E-4FD0-8B15-3EFF069ED3E3}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C27F6924-BE2D-403F-BAE3-B62236295D52}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C355295F-5DF9-47C9-B788-29C0717381A5}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C36A7FEE-36AE-4918-B135-82F9700B729E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C3D952F6-42B0-4FBD-AC5A-8333E363378A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C4691E7C-645D-4626-A58F-A50109AB174B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C5139991-C1FC-4956-BB29-3E3D1EF9FB82}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C5A94EA2-C445-4D57-9015-B74D26F363B4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C6160DE9-9191-4C2C-AFC4-B88C63DE99AE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C620B71C-A7EB-4430-881B-49FDF35C89FB}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C651B1E6-9BB4-4586-B832-9071C8475885}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C6603F02-3939-430B-AC61-0ABF466FED59}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C70DC712-EBA7-4A9F-B6A6-48D4D0403A13}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C7608FA8-0BED-4187-A64A-B2CB3987C9BF}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C7846983-A20B-4A13-AF01-AE9B3A26B9D9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C8175FE2-BE30-41AD-8453-E1E09D0363AD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C858E7DC-D55C-4A00-BCBB-627342DA1864}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C886247B-75D1-4D4D-B835-7745013B45CA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C96BB7E7-7A8F-4B63-ADF8-717EA578E9F1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{C9AB170C-0B96-4E9C-BC79-A64B5C3ED5E8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{CA6F54D7-4F0F-4B96-ADD6-1B4CD42AC863}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{CAB678B0-A3A6-4C03-9DBD-6101C0F97A04}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{CB09A96B-B2AC-4021-B799-C137B2F48380}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{CBBAEE35-544C-4465-BBEF-F0282E076F4D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{CDC293F9-2C24-456C-90D8-86C009EC5B28}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{CDD50AD4-8670-44A5-B048-ECB2C2B82091}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{CE5C59FB-4610-42FE-BDE2-32A3A6D7C402}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{CEDE9EF1-7BAA-44C8-951A-0EF69D176936}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{CEE1C714-E556-465B-AEA1-C09DAA44833B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{CFCD5779-6D94-4F39-B310-386C4937C9F4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{CFEB3774-19FA-4874-9627-D02353C469BD}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D0D2A3FA-21E2-4FE0-BCB6-24FD4E675308}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D1B527AC-DB0A-491A-8FCB-A76FA0B7C74B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D25AE2AB-7D5B-4E62-B411-933EADC35646}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D2B67E33-22C2-4F8A-BAA5-E9C9FB4DBF2F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D2E6B914-2CD0-4C5C-85C0-EFD88CED0CCA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D2FCCE3B-531F-4B11-B601-7C7C1846B585}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D34DFC73-40B6-4733-99CB-459BC0BBF74E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D376E011-EB56-41D5-95A2-F7D210A39FF1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D3FC7AC5-9A24-4135-8EBC-6B9131E6E412}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D4293902-B1E2-4D23-8555-5E10ECB6C351}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D4F25361-C3A7-4302-B7B8-CED51552EC83}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D5113107-C48A-4D0D-832E-2094DD413931}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D650310B-F32D-4BBD-A307-7292AA70CE85}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D66930C7-A6F2-431D-9C52-2CE2FAEE9A61}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D7584042-2086-416B-8A2A-F293CE30A3F8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D76F8210-8D71-454C-93E0-6B99542A7A46}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D884DD3E-4687-4421-A3E8-877E3919846B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D98C6620-C94B-4E3E-BFFA-31C4C1882BC9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{D9C52B63-9099-4F7B-BC65-E56210057D55}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DA20CFDA-9CC3-432D-86EC-72D256AE09B1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DA8D90EA-4700-44CF-933E-3A25FE651E2D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DBDEDA86-0D77-4AA5-A598-F97E95AED6E9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DBE08BA0-7FFA-40C6-B8FA-50A8588ED4BB}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DC009DF2-ABFE-4F54-8F12-5A734944EE60}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DC313EB9-0968-4397-896F-3768C3F75B56}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DC96DD43-F9C2-4252-8220-7EECD7D8E364}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DC975A7C-496A-4044-83A0-8EAE953835A5}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DDD819EC-7831-4749-8E52-EC8C934D8A89}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DE0E5142-4DE1-4287-8F59-30DFEE994EAA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DE1A88D1-26E8-4436-A7ED-6621BBE8D7CB}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DE68A77B-4528-4A0A-BC69-1CAAE97583F7}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DEE220B8-7D69-4D49-BA2E-001E192E4FF3}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DF06E5D8-D93E-47FC-9485-8D248A806579}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{DF951C03-28A1-4F9C-B49F-B95F2B4F1336}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{E1AAAD7B-3D5A-4E22-9CC8-CFB74AB9428F}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{E2550111-AA21-494C-ADE6-DFC9E85F6A81}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{E32334B4-7E33-48B2-B333-BA0730A120B1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{E4D40B07-9C09-425D-9A94-95BF9B628851}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{E5965190-91BC-4B53-A995-47ADF5C02335}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{E5CEE503-F19D-4D69-AE4F-4A0F100773AC}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{E5E0A899-5690-49B0-9D4F-2AD908B57FF1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{E64F9DE2-895E-4402-9BF1-C00B08057A9A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{E765E072-BF34-4DB5-B3BE-50461DC37650}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{E7C323E6-6355-4F96-83E4-BD3784731987}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{E888E074-3AB6-432F-B73E-A2E5F7D508F2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{E8ECFC50-9086-4FFA-B1E7-B4F8550884D5}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{E970DA67-723C-4B34-8EAE-D9BA7AB164D5}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EAA66B7F-4DF9-4763-9957-720A3EDEE811}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EAB3E637-ADE0-46F3-A39F-C014BCED1CD9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EAEF998C-0554-4AD2-BE88-EAE4AAF9065B}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EB2A378E-B503-4CEC-BE1C-7335E4F6AED4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EB56CB9A-66D8-463C-B1E2-D125E2C30EB1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EB707367-F3F8-4DEA-A84C-75085AD093C2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EBDED5A6-8A73-4139-8E46-16F1B9E6A8F4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EBF04FB4-88B7-49A0-B0F1-2EC86E4E437C}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EBF521B7-3AE6-4898-BA19-9AA352DB1DD1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EC9A5A88-642C-49AE-B2B1-CC08CE04F15D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{ED15C9A4-3D2A-4D91-A472-6A978DC59028}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{ED813E39-D0DA-43A9-8232-A5F8D25A4E6E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EDD21EEA-0165-4F29-8310-09836210ED2D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EE350B5E-084E-479E-AE4F-CA64B9B44205}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EE417820-F00C-4F01-9E15-27537CEBF96A}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EE5141F8-8669-481B-9C64-1AD33D2EF4FA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EF48EEC6-E5EB-469D-AC16-68FA36CB36D3}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EF4CF07D-109D-4B32-A695-0A72B379FEE4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{EFC11192-FA25-4E92-AD99-943C97E371EB}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F034DA7E-E6EC-4444-BD92-6E4B2379F4A6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F05F6222-D6C1-42FB-962D-D537E0CE106D}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F071C932-1F56-48ED-9BD1-88F75AB497DF}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F0A86844-0BF2-4D1A-AE4B-C58ED87CB7C6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F0F77375-AF14-4AFD-988F-8E7BFCF3E6FA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F10D384D-61F1-46E0-8ABC-911847AB3106}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F18FE30C-9570-46F1-B356-1A9D889FBF00}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F1D8A7AC-D901-4541-B20B-7E3F20C5F0AA}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F248B0EA-20D3-4F7C-8588-C25B973D1CA3}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F332F593-832C-4632-8AA4-004A28330B54}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F3884B79-CAA8-4772-82FA-D40A5C945FCE}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F399B39A-EA7A-45E3-89BB-C12DDF29C921}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F7202CBD-658D-4612-AEC4-1151B390DDEC}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F739945B-D77C-4EB7-9ABF-07F7166AD8F1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F7BC7813-BFB3-4227-A788-8066BF3712C6}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F807C507-D964-46DB-BFCB-8DCB9699F95E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F84C91B2-072B-4056-9C27-B7B8A82D86F8}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F875EE9D-0C77-4E32-B3B0-0F49A9AFB12E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F89B6E7E-443E-4826-9D93-12E95E140CC1}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{F8C6BECA-A1B2-453B-AB59-9F8AE516B3E2}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{FA4F8FA5-5F0A-40E4-8849-7B52426B1C15}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{FA5A4472-D876-4992-B879-4674BCC421B9}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{FA7835EB-F43B-46F2-AAAE-6BF808170276}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{FAA674A6-6DEC-4083-9FDE-59B26FB61759}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{FC17A134-2342-434C-97A8-2D3D8CF52B26}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{FC4F517E-DC05-470E-913A-BD15A46B4CA4}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{FCB9A500-B6DD-4473-A1B9-A69AC1B5E532}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{FCCB46FF-ABF9-4507-8EC9-B42EE0AA796E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{FD801121-6222-45D9-92DE-3E42E737BF9E}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{FE5D4403-8962-414B-B89A-71BA8BD1AC58}
Successfully deleted: [Empty Folder] C:\Users\Jens name\appdata\local\{FF4B1F47-71F9-4E93-A5DA-F0CD7FFAAB10}
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 17.03.2015 at 16:25:47,43
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Jens |
|
17.03.2015, 16:35
| #11 |
| | Avira free antivirus meldet TR/Dropper.A.25752 ...und noch FRST :-) FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Jens name (administrator) on DELL-XPS502_JV on 17-03-2015 16:27:16
Running from C:\Users\Jens name\Downloads
Loaded Profiles: Jens name (Available profiles: Jens name)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Akamai Technologies, Inc.) C:\Users\Jens name\AppData\Local\Akamai\netsession_win.exe
(Ericsson AB) C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Dropbox, Inc.) C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Akamai Technologies, Inc.) C:\Users\Jens name\AppData\Local\Akamai\netsession_win.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
() C:\Program Files (x86)\Dell\Stage Remote\DMR.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2531624 2010-12-17] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6611048 2011-02-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2188904 2011-01-18] (Realtek Semiconductor)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-09-16] (Intel(R) Corporation)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2034752 2011-08-08] ()
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [RoxWatchTray] => C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] => C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703280 2015-03-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Jens name\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [WirelessManager] => C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe [194600 2010-07-28] (Ericsson AB)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3666224 2013-09-20] (Safer-Networking Ltd.)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [26232152 2015-02-19] (Google)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [GoogleChromeAutoLaunch_4B47325B8DBA69C1C38307FCBA185332] => C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe [809288 2015-03-07] (Google Inc.)
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [688984 2014-12-31] (Garmin Ltd or its subsidiaries)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [166568 2014-07-02] (NVIDIA Corporation)
AppInit_DLLs: ,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [166568 2014-07-02] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [146480 2014-07-02] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [146480 2014-07-02] (NVIDIA Corporation)
Startup: C:\Users\Jens name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Jens name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GM_DevUpdate.lnk
ShortcutTarget: GM_DevUpdate.lnk -> C:\Program Files (x86)\Speed-Link Vibration Joystick\GM_DevUpdate.exe ()
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
BootExecute: autocheck autochk * lsdeletesdnclean64.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> {EC89F7B2-2E2F-48A0-9FF9-18C677BA5109} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {EC89F7B2-2E2F-48A0-9FF9-18C677BA5109} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1320315719-3326968574-895728413-1001 -> {0E2CC663-24F1-4779-A6BD-FF67D6F88CA8} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1320315719-3326968574-895728413-1001 -> {EC89F7B2-2E2F-48A0-9FF9-18C677BA5109} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-20] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-20] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-20] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-20] (Oracle Corporation)
DPF: HKLM {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2013-10-09] (GARMIN Corp.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-10-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-10-20] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll [2014-12-11] ( Microsoft Corporation)
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2013-10-09] (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-10-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-10-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll [2014-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1320315719-3326968574-895728413-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Jens name\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin HKU\S-1-5-21-1320315719-3326968574-895728413-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Jens name\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin HKU\S-1-5-21-1320315719-3326968574-895728413-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Jens name\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-08-08] (Unity Technologies ApS)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
Chrome:
=======
CHR HomePage: Profile 1 -> hxxp://www.google.de/
CHR StartupUrls: Profile 1 -> "hxxp://www.google.de/"
CHR DefaultSuggestURL: Profile 1 -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (BILD Online) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\akelcgelcacijekkjghmpikldlfpjpho [2015-01-29]
CHR Extension: (Angry Birds) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2015-01-29]
CHR Extension: (Google Docs) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-29]
CHR Extension: (Google Drive) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-29]
CHR Extension: (YouTube) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-29]
CHR Extension: (GCVote) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\boingbkmoapffongfpcancmephhnmehp [2015-01-29]
CHR Extension: (Google Search) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-29]
CHR Extension: (AdBlock) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-01-29]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-11]
CHR Extension: (Google Wallet) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-29]
CHR Extension: (Gmail) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-29]
CHR HKU\S-1-5-21-1320315719-3326968574-895728413-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\JENSVA~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-01-31]
CHR HKU\S-1-5-21-1320315719-3326968574-895728413-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-03-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-03-04] (Avira Operations GmbH & Co. KG)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2552528 2015-01-30] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201424 2015-01-30] (Dell Inc.)
S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [451416 2014-12-31] (Garmin Ltd or its subsidiaries)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202080 2014-06-15] (Kaspersky Lab ZAO)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [88576 2011-09-15] () [File not signed]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [19288 2015-02-19] (Dell Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132120 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-14] (Avira Operations GmbH & Co. KG)
S3 CoachUsb; C:\Windows\System32\DRIVERS\CoachUsb.sys [78472 2009-05-06] (FotoNation Inc.)
S3 CoachVid; C:\Windows\System32\DRIVERS\CoachVid.sys [72968 2009-05-06] (FotoNation Inc.)
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2015-01-30] (Dell Computer Corporation)
S3 GMFilter; C:\Windows\SysWow64\Drivers\GMFilter.sys [19840 2004-12-30] () [File not signed]
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [113280 2010-02-03] (ITE )
R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69376 2011-10-28] (Lavasoft AB)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [299352 2014-07-02] (NVIDIA Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-09-11] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 Lavasoft Kernexplorer; \??\C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-17 16:25 - 2015-03-17 16:25 - 00069804 _____ () C:\Users\Jens name\Desktop\JRT.txt
2015-03-17 15:47 - 2015-03-17 15:47 - 01388672 _____ (Thisisu) C:\Users\Jens name\Downloads\JRT.exe
2015-03-17 15:46 - 2015-03-17 15:46 - 02171392 _____ () C:\Users\Jens name\Downloads\AdwCleaner_4.112.exe
2015-03-16 20:26 - 2015-03-16 20:26 - 00036836 _____ () C:\ComboFix.txt
2015-03-16 20:06 - 2015-03-16 20:06 - 00000540 _____ () C:\Windows\PFRO.log
2015-03-16 19:51 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-03-16 19:51 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-03-16 19:51 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-03-16 19:51 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-03-16 19:51 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-03-16 19:51 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2015-03-16 19:51 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2015-03-16 19:51 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2015-03-16 19:48 - 2015-03-16 20:27 - 00000000 ____D () C:\Qoobox
2015-03-16 19:48 - 2015-03-16 20:21 - 00000000 ____D () C:\Windows\erdnt
2015-03-16 19:43 - 2015-03-16 19:44 - 05615380 ____R (Swearware) C:\Users\Jens name\Desktop\ComboFix.exe
2015-03-15 08:05 - 2015-03-15 08:05 - 00380416 _____ () C:\Users\Jens name\Downloads\Gmer-19357.exe
2015-03-15 07:45 - 2015-03-15 07:46 - 00059166 _____ () C:\Users\Jens name\Downloads\Addition.txt
2015-03-15 07:43 - 2015-03-17 16:27 - 00026537 _____ () C:\Users\Jens name\Downloads\FRST.txt
2015-03-15 07:43 - 2015-03-17 16:27 - 00000000 ____D () C:\FRST
2015-03-15 07:43 - 2015-03-17 16:26 - 00000000 ____D () C:\Users\Jens name\Desktop\tb
2015-03-15 07:43 - 2015-03-15 07:43 - 02095616 _____ (Farbar) C:\Users\Jens name\Downloads\FRST64.exe
2015-03-15 07:41 - 2015-03-15 07:41 - 00000488 _____ () C:\Users\Jens name\Downloads\defogger_disable.log
2015-03-15 07:41 - 2015-03-15 07:41 - 00000000 _____ () C:\Users\Jens name\defogger_reenable
2015-03-15 07:40 - 2015-03-15 07:41 - 01135104 _____ (Farbar) C:\Users\Jens name\Downloads\FRST.exe
2015-03-15 07:40 - 2015-03-15 07:40 - 00050477 _____ () C:\Users\Jens name\Downloads\Defogger.exe
2015-03-15 01:00 - 2015-03-17 16:16 - 00001008 _____ () C:\Windows\setupact.log
2015-03-15 01:00 - 2015-03-15 01:00 - 00000000 _____ () C:\Windows\setuperr.log
2015-03-12 21:32 - 2015-03-12 21:32 - 05325696 _____ (Piriform Ltd) C:\Users\Jens name\Downloads\ccsetup503.exe
2015-03-11 16:27 - 2015-03-11 16:27 - 00000000 ____D () C:\Windows\system32\78QY3S1_SupportAssistClient_20150311162736
2015-03-11 08:08 - 2015-02-20 05:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 08:08 - 2015-02-20 05:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 08:08 - 2015-02-20 05:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 08:08 - 2015-02-20 05:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 08:08 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 08:08 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 08:08 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 08:08 - 2015-02-20 05:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 08:08 - 2015-02-20 04:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 08:08 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 08:08 - 2015-02-03 04:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 08:08 - 2015-02-03 04:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 08:08 - 2015-02-03 04:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 08:08 - 2015-02-03 04:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 08:08 - 2015-02-03 04:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 08:08 - 2015-02-03 04:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 08:08 - 2015-02-03 04:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 08:08 - 2015-02-03 04:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 08:08 - 2015-02-03 04:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 08:08 - 2015-02-03 04:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 08:08 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 08:08 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 08:08 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 08:08 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 08:08 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 08:08 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 08:08 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 08:08 - 2014-10-31 23:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 08:07 - 2015-03-06 06:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 08:07 - 2015-03-06 06:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 08:07 - 2015-03-06 06:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 08:07 - 2015-03-06 06:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 08:07 - 2015-03-06 06:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 08:07 - 2015-03-06 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 08:07 - 2015-03-06 06:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 08:07 - 2015-03-06 06:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 08:07 - 2015-03-06 06:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 08:07 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 08:07 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 08:07 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 08:07 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 08:07 - 2015-02-26 04:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 08:07 - 2015-02-24 04:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 08:07 - 2015-02-24 03:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 08:07 - 2015-02-21 02:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 08:07 - 2015-02-21 01:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 08:07 - 2015-02-21 01:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 08:07 - 2015-02-21 01:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 08:07 - 2015-02-21 01:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 08:07 - 2015-02-21 00:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 08:07 - 2015-02-21 00:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 08:07 - 2015-02-20 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 08:07 - 2015-02-20 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 08:07 - 2015-02-20 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 08:07 - 2015-02-20 03:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 08:07 - 2015-02-20 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 08:07 - 2015-02-20 03:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 08:07 - 2015-02-20 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 08:07 - 2015-02-20 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 08:07 - 2015-02-20 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 08:07 - 2015-02-20 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 08:07 - 2015-02-20 03:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 08:07 - 2015-02-20 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 08:07 - 2015-02-20 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 08:07 - 2015-02-20 03:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 08:07 - 2015-02-20 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 08:07 - 2015-02-20 03:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 08:07 - 2015-02-20 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 08:07 - 2015-02-20 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 08:07 - 2015-02-20 03:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 08:07 - 2015-02-20 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 08:07 - 2015-02-20 03:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 08:07 - 2015-02-20 03:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 08:07 - 2015-02-20 03:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 08:07 - 2015-02-20 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 08:07 - 2015-02-20 03:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 08:07 - 2015-02-20 03:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 08:07 - 2015-02-20 03:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 08:07 - 2015-02-20 02:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 08:07 - 2015-02-20 02:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 08:07 - 2015-02-20 02:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-03-11 08:07 - 2015-02-20 02:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 08:07 - 2015-02-20 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 08:07 - 2015-02-20 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 08:07 - 2015-02-20 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 08:07 - 2015-02-20 02:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 08:07 - 2015-02-20 02:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 08:07 - 2015-02-20 02:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 08:07 - 2015-02-20 02:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 08:07 - 2015-02-20 02:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 08:07 - 2015-02-20 02:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 08:07 - 2015-02-20 02:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 08:07 - 2015-02-20 02:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-11 08:07 - 2015-02-20 02:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 08:07 - 2015-02-20 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-11 08:07 - 2015-02-20 02:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 08:07 - 2015-02-20 01:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 08:07 - 2015-02-20 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-11 08:07 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 08:07 - 2015-02-13 06:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 08:07 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 08:07 - 2015-02-03 04:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 08:07 - 2015-02-03 04:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 08:07 - 2015-02-03 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 08:07 - 2015-02-03 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 08:07 - 2015-02-03 04:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 08:07 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 08:07 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 08:07 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 08:07 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 08:07 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 08:07 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 08:07 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 08:07 - 2015-02-03 03:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 08:07 - 2015-01-31 04:48 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-03-11 08:07 - 2015-01-31 04:48 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-11 08:07 - 2015-01-31 00:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 08:07 - 2015-01-31 00:56 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-03-11 08:07 - 2015-01-17 03:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 08:07 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 08:06 - 2015-02-04 04:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 08:06 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-10 13:16 - 2015-03-10 13:16 - 00001518 _____ () C:\Users\Jens name\Downloads\URLLink (7).acsm
2015-03-10 13:16 - 2015-03-10 13:16 - 00001478 _____ () C:\Users\Jens name\Downloads\URLLink (8).acsm
2015-03-10 13:15 - 2015-03-10 13:16 - 00001487 _____ () C:\Users\Jens name\Downloads\URLLink (6).acsm
2015-03-05 07:51 - 2015-03-05 07:51 - 00032912 _____ () C:\Users\Jens name\Desktop\mitgl-tel+mail-feb2015.xlsx
2015-03-03 21:31 - 2015-03-03 21:31 - 01250304 _____ () C:\Users\Jens name\Downloads\flugpersonal.ppt
2015-03-03 21:31 - 2015-03-03 21:31 - 01250304 _____ () C:\Users\Jens name\Downloads\flugpersonal (1).ppt
2015-02-26 20:16 - 2015-02-26 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Beurer
2015-02-26 20:16 - 2015-02-26 20:16 - 00000000 ____D () C:\ProgramData\Beurer
2015-02-26 20:16 - 2015-02-26 20:16 - 00000000 ____D () C:\Program Files (x86)\Beurer
2015-02-26 20:00 - 2015-02-26 20:04 - 98110248 _____ (Beurer Health And Well-Being) C:\Users\Jens name\Downloads\setup.exe
2015-02-26 00:03 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-26 00:03 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-25 14:30 - 2015-02-25 14:30 - 00001457 _____ () C:\Users\Jens name\Downloads\URLLink (5).acsm
2015-02-25 14:25 - 2015-02-25 14:25 - 00001485 _____ () C:\Users\Jens name\Downloads\URLLink (4).acsm
2015-02-25 14:25 - 2015-02-25 14:25 - 00001457 _____ () C:\Users\Jens name\Downloads\URLLink (3).acsm
2015-02-25 13:20 - 2015-02-25 13:21 - 26069441 _____ () C:\Users\Jens name\Downloads\com.samsung.android.app.watchmanager_1.7.031004 (1).apk
2015-02-25 12:59 - 2015-02-25 12:59 - 09670357 _____ () C:\Users\Jens name\Downloads\apk-install-7278911.apk
2015-02-25 12:28 - 2015-02-25 12:28 - 00000000 ____D () C:\Users\Jens name\Downloads\Neuer Ordner
2015-02-25 12:28 - 2015-02-25 12:28 - 00000000 ____D () C:\Users\Jens name\Downloads\gf
2015-02-25 12:25 - 2015-02-25 12:25 - 01182190 _____ () C:\Users\Jens name\Downloads\7z938.exe
2015-02-25 12:11 - 2015-02-25 12:11 - 00971547 _____ () C:\Users\Jens name\Downloads\GR.GearManagerStub.apk
2015-02-25 11:53 - 2015-02-25 11:54 - 26069441 _____ () C:\Users\Jens name\Downloads\com.samsung.android.app.watchmanager_1.7.031004.apk
2015-02-22 21:49 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-22 21:49 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-22 21:49 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-22 21:49 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-19 11:10 - 2015-02-19 11:10 - 00186177 _____ () C:\Users\Jens name\Downloads\PB_Umsatzauskunft_KtoNr0631085201_19-02-2015_1106.xml
2015-02-19 11:10 - 2015-02-19 11:10 - 00186177 _____ () C:\Users\Jens name\Downloads\PB_Umsatzauskunft_KtoNr0631085201_19-02-2015_1106 (1).xml
2015-02-15 20:16 - 2015-02-15 20:26 - 00000000 ____D () C:\Telefon Maren
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-17 16:25 - 2009-07-14 05:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-17 16:25 - 2009-07-14 05:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-17 16:22 - 2011-12-27 07:03 - 01595705 _____ () C:\Windows\WindowsUpdate.log
2015-03-17 16:22 - 2010-11-21 07:50 - 00700118 _____ () C:\Windows\system32\perfh007.dat
2015-03-17 16:22 - 2010-11-21 07:50 - 00149968 _____ () C:\Windows\system32\perfc007.dat
2015-03-17 16:22 - 2009-07-14 06:13 - 01622228 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-17 16:20 - 2013-10-23 05:42 - 00000000 ____D () C:\ProgramData\boost_interprocess
2015-03-17 16:20 - 2011-12-27 14:55 - 00000000 ____D () C:\ProgramData\Sonic
2015-03-17 16:18 - 2014-08-31 19:48 - 00000000 ___RD () C:\Users\Jens name\Dropbox
2015-03-17 16:18 - 2014-08-31 19:14 - 00000000 ____D () C:\Users\Jens name\AppData\Roaming\Dropbox
2015-03-17 16:17 - 2011-12-27 14:40 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2015-03-17 16:17 - 2011-12-27 14:40 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2015-03-17 16:17 - 2011-12-27 14:36 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2015-03-17 16:16 - 2013-12-01 11:06 - 00000000 ___RD () C:\Users\Jens name\Google Drive
2015-03-17 16:15 - 2013-01-10 21:11 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-17 16:15 - 2011-12-27 07:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-17 16:15 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-17 16:14 - 2012-03-10 12:16 - 00623612 _____ () C:\aaw7boot.log
2015-03-17 16:13 - 2013-10-18 19:22 - 00000000 ____D () C:\AdwCleaner
2015-03-17 16:05 - 2014-08-22 20:06 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-17 15:47 - 2013-01-10 21:11 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-17 00:52 - 2012-07-12 17:23 - 00003986 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{D3F2ED7F-9929-48CA-A472-7EC179DE8884}
2015-03-17 00:38 - 2011-12-31 11:07 - 00001152 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1320315719-3326968574-895728413-1001UA.job
2015-03-16 20:27 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2015-03-16 20:09 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2015-03-16 20:00 - 2011-12-30 15:16 - 00000000 ____D () C:\Users\Jens name
2015-03-15 16:28 - 2015-02-12 19:39 - 00000426 _____ () C:\Windows\Tasks\Dell SupportAssistAgent AutoUpdate.job
2015-03-15 16:26 - 2015-02-11 12:22 - 00003484 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask
2015-03-15 16:21 - 2011-12-31 11:07 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1320315719-3326968574-895728413-1001Core.job
2015-03-12 21:33 - 2014-03-19 08:54 - 00000784 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-03-12 21:33 - 2012-10-24 15:41 - 00000000 ____D () C:\Program Files\CCleaner
2015-03-12 20:50 - 2012-03-10 12:16 - 00000000 ____D () C:\Windows\Minidump
2015-03-12 13:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-03-12 07:14 - 2014-08-31 19:48 - 00001051 _____ () C:\Users\Jens name\Desktop\Dropbox.lnk
2015-03-12 07:14 - 2014-08-31 19:15 - 00000000 ____D () C:\Users\Jens name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-03-11 16:32 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-11 16:25 - 2009-07-14 05:45 - 00362408 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-11 16:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-11 16:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-10 17:48 - 2013-12-01 11:04 - 00002044 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2015-03-10 17:48 - 2013-12-01 11:04 - 00002042 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2015-03-10 17:48 - 2013-12-01 11:04 - 00002032 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2015-03-10 17:48 - 2013-12-01 11:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-03-10 13:16 - 2013-08-01 21:45 - 00000000 ____D () C:\Users\Jens name\Documents\My Digital Editions
2015-03-07 16:01 - 2013-08-01 16:59 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-07 15:55 - 2011-12-30 15:29 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-05 23:20 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-05 18:23 - 2012-01-05 22:23 - 00000000 ____D () C:\Users\Jens name\AppData\Roaming\SoftGrid Client
2015-03-05 11:27 - 2014-03-01 09:47 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-05 11:27 - 2012-10-27 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-03-05 11:27 - 2012-10-27 21:37 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-03-04 14:48 - 2013-05-09 18:41 - 00044088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-03-04 14:48 - 2013-03-30 18:52 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-03-04 14:48 - 2013-03-30 18:52 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-03-03 14:17 - 2010-11-21 04:27 - 00295552 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-26 20:16 - 2014-09-26 08:12 - 00002107 _____ () C:\Users\Public\Desktop\Beurer*HealthManager.lnk
2015-02-26 20:15 - 2014-09-26 08:09 - 00000000 ____D () C:\Users\Jens name\AppData\Roaming\Beurer HealthManager
2015-02-26 16:24 - 2011-02-11 18:12 - 00000000 ____D () C:\DELL
2015-02-22 22:17 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-22 21:51 - 2011-02-11 11:22 - 01596508 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-02-21 12:01 - 2014-03-01 10:21 - 00003556 _____ () C:\Windows\System32\Tasks\GarminUpdaterTask
2015-02-21 12:01 - 2014-03-01 10:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2015-02-21 12:01 - 2014-03-01 09:47 - 00001890 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2015-02-21 12:01 - 2014-03-01 09:47 - 00000000 ____D () C:\ProgramData\Garmin
2015-02-21 12:01 - 2014-02-27 07:13 - 00000000 ____D () C:\Program Files (x86)\Garmin
2015-02-19 10:50 - 2012-02-27 17:31 - 00000826 _____ () C:\Windows\wiso.ini
2015-02-19 10:50 - 2012-02-27 17:27 - 00000000 ____D () C:\ProgramData\Buhl Data Service GmbH
==================== Files in the root of some directories =======
2014-11-22 16:58 - 2014-11-22 16:58 - 0000854 _____ () C:\Users\Jens name\AppData\Local\recently-used.xbel
Files to move or delete:
====================
C:\Users\Jens name\APP_IO_WXP_VSTA_W7_A02_Setup-7W7T4_ZPE.exe
C:\Users\Jens name\CONEXANT_D400-USB-MODEM_DPP14_A00_SETUP_ZPE.exe
C:\Users\Jens name\CONEXANT_D400-USB-MODEM_J6N4K_A02_SETUP_ZPE.exe
C:\Users\Jens name\CW1394A0.exe
C:\Users\Jens name\DELL_MOBILE-BROADBAND-MANAGE_A08_R291705.exe
C:\Users\Jens name\DELL_WIRELESS-5540-HSPA-MINI_A11_R287094.exe
C:\Users\Jens name\DELL_WIRELESS-5550-HSPA-MINI_A03_R298995.exe
C:\Users\Jens name\DELL_WIRELESS-5550-HSPA-MINI_A03_R298998.exe
C:\Users\Jens name\DELL_WIRELESS-5620-EVDO-HSPA_A09_R292028.exe
C:\Users\Jens name\R261284.exe
C:\Users\Jens name\R293038.exe
C:\Users\Jens name\R296901.exe
C:\Users\Jens name\R304505.exe
C:\Users\Jens name\R304507.exe
Some content of TEMP:
====================
C:\Users\Jens name\AppData\Local\Temp\avgnt.exe
C:\Users\Jens name\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmptsfplm.dll
C:\Users\Jens name\AppData\Local\Temp\Quarantine.exe
C:\Users\Jens name\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-03-16 20:44
==================== End Of Log ============================
|
|
18.03.2015, 08:15
| #12 |
| /// the machine /// TB-Ausbilder | Avira free antivirus meldet TR/Dropper.A.25752ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
18.03.2015, 18:18
| #13 |
| | Avira free antivirus meldet TR/Dropper.A.25752 Hi Schrauber, danke für deine Hilfe...hab nun einen zusätzlichen Fund bei Eset Code:
ATTFilter Results of screen317's Security Check version 0.99.97
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Avira Desktop
Microsoft Security Essentials
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Spybot - Search & Destroy
TuneUp Utilities Language Pack (de-DE)
JavaFX 2.1.1
Java 7 Update 45
Java version 32-bit out of Date!
Java 64-bit 8 Update 31
Adobe Reader 10.1.13 Adobe Reader out of Date!
Google Chrome (40.0.2214.115)
Google Chrome (41.0.2272.89)
````````Process Check: objlist.exe by Laurent````````
Microsoft Security Essentials MSMpEng.exe
Microsoft Security Essentials msseces.exe
Spybot Teatimer.exe is disabled!
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
ESET ESET Online Scanner OnlineScannerApp.exe
ESET ESET Online Scanner OnlineCmdLineScanner.exe
Kaspersky Lab Kaspersky Security Scan 2.0 kss.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=3c5e2eac98e7ab49b5d37a05e942bfcd
# engine=22962
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-03-18 04:59:15
# local_time=2015-03-18 05:59:15 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 2976283 49678349 0 0
# scanned=333979
# found=1
# cleaned=0
# scan_time=21196
sh=1DA7E55B7B8609994368D0C56A7B76474F882B6A ft=1 fh=6342ba6251261b43 vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir"
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Jens name (administrator) on DELL-XPS502_JV on 18-03-2015 18:14:38
Running from C:\Users\Jens name\Downloads
Loaded Profiles: Jens name (Available profiles: Jens name)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Akamai Technologies, Inc.) C:\Users\Jens name\AppData\Local\Akamai\netsession_win.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Ericsson AB) C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
(Dropbox, Inc.) C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Akamai Technologies, Inc.) C:\Users\Jens name\AppData\Local\Akamai\netsession_win.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Google Inc.) C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Google Inc.) C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\Dell\Stage Remote\DMR.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
(ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
(PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssist\imstrayicon.exe
(Google Inc.) C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2531624 2010-12-17] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6611048 2011-02-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2188904 2011-01-18] (Realtek Semiconductor)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-09-16] (Intel(R) Corporation)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2034752 2011-08-08] ()
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [RoxWatchTray] => C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] => C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703280 2015-03-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Jens name\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [WirelessManager] => C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe [194600 2010-07-28] (Ericsson AB)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3666224 2013-09-20] (Safer-Networking Ltd.)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [26232152 2015-02-19] (Google)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\...\Run: [GoogleChromeAutoLaunch_4B47325B8DBA69C1C38307FCBA185332] => C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe [809288 2015-03-07] (Google Inc.)
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [688984 2014-12-31] (Garmin Ltd or its subsidiaries)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [166568 2014-07-02] (NVIDIA Corporation)
AppInit_DLLs: ,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [166568 2014-07-02] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [146480 2014-07-02] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [146480 2014-07-02] (NVIDIA Corporation)
Startup: C:\Users\Jens name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Jens name\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Jens name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GM_DevUpdate.lnk
ShortcutTarget: GM_DevUpdate.lnk -> C:\Program Files (x86)\Speed-Link Vibration Joystick\GM_DevUpdate.exe ()
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jens name\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
BootExecute: autocheck autochk * lsdeletesdnclean64.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1320315719-3326968574-895728413-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> {EC89F7B2-2E2F-48A0-9FF9-18C677BA5109} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {EC89F7B2-2E2F-48A0-9FF9-18C677BA5109} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1320315719-3326968574-895728413-1001 -> {0E2CC663-24F1-4779-A6BD-FF67D6F88CA8} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1320315719-3326968574-895728413-1001 -> {EC89F7B2-2E2F-48A0-9FF9-18C677BA5109} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-20] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-20] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-20] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-20] (Oracle Corporation)
DPF: HKLM {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2013-10-09] (GARMIN Corp.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-10-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-10-20] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll [2014-12-11] ( Microsoft Corporation)
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2013-10-09] (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-10-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-10-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll [2014-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1320315719-3326968574-895728413-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Jens name\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin HKU\S-1-5-21-1320315719-3326968574-895728413-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Jens name\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin HKU\S-1-5-21-1320315719-3326968574-895728413-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Jens name\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-08-08] (Unity Technologies ApS)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
Chrome:
=======
CHR HomePage: Profile 1 -> hxxp://www.google.de/
CHR StartupUrls: Profile 1 -> "hxxp://www.google.de/"
CHR DefaultSuggestURL: Profile 1 -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (BILD Online) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\akelcgelcacijekkjghmpikldlfpjpho [2015-01-29]
CHR Extension: (Angry Birds) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2015-01-29]
CHR Extension: (Google Docs) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-29]
CHR Extension: (Google Drive) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-29]
CHR Extension: (YouTube) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-29]
CHR Extension: (GCVote) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\boingbkmoapffongfpcancmephhnmehp [2015-01-29]
CHR Extension: (Google Search) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-29]
CHR Extension: (AdBlock) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-01-29]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-11]
CHR Extension: (Google Wallet) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-29]
CHR Extension: (Gmail) - C:\Users\Jens name\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-29]
CHR HKU\S-1-5-21-1320315719-3326968574-895728413-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\JENSVA~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-01-31]
CHR HKU\S-1-5-21-1320315719-3326968574-895728413-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Users\Jens name\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-03-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-03-04] (Avira Operations GmbH & Co. KG)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2552528 2015-01-30] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201424 2015-01-30] (Dell Inc.)
S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [451416 2014-12-31] (Garmin Ltd or its subsidiaries)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202080 2014-06-15] (Kaspersky Lab ZAO)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [88576 2011-09-15] () [File not signed]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [19288 2015-02-19] (Dell Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132120 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-14] (Avira Operations GmbH & Co. KG)
S3 CoachUsb; C:\Windows\System32\DRIVERS\CoachUsb.sys [78472 2009-05-06] (FotoNation Inc.)
S3 CoachVid; C:\Windows\System32\DRIVERS\CoachVid.sys [72968 2009-05-06] (FotoNation Inc.)
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2015-01-30] (Dell Computer Corporation)
S3 GMFilter; C:\Windows\SysWow64\Drivers\GMFilter.sys [19840 2004-12-30] () [File not signed]
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [113280 2010-02-03] (ITE )
R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69376 2011-10-28] (Lavasoft AB)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [299352 2014-07-02] (NVIDIA Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-09-11] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 Lavasoft Kernexplorer; \??\C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-18 15:55 - 2015-03-18 15:57 - 00000000 ____D () C:\Users\Jens name\AppData\Roaming\PCDr
2015-03-18 15:53 - 2015-03-18 15:53 - 00000000 ____D () C:\ProgramData\PCDr
2015-03-18 13:56 - 2015-03-18 13:56 - 00852604 _____ () C:\Users\Jens name\Downloads\SecurityCheck.exe
2015-03-18 12:04 - 2015-03-18 12:04 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-03-18 12:03 - 2015-03-18 12:03 - 02347384 _____ (ESET) C:\Users\Jens name\Downloads\esetsmartinstaller_deu.exe
2015-03-17 16:25 - 2015-03-17 16:25 - 00069804 _____ () C:\Users\Jens name\Desktop\JRT.txt
2015-03-17 15:47 - 2015-03-17 15:47 - 01388672 _____ (Thisisu) C:\Users\Jens name\Downloads\JRT.exe
2015-03-17 15:46 - 2015-03-17 15:46 - 02171392 _____ () C:\Users\Jens name\Downloads\AdwCleaner_4.112.exe
2015-03-16 20:26 - 2015-03-16 20:26 - 00036836 _____ () C:\ComboFix.txt
2015-03-16 20:06 - 2015-03-16 20:06 - 00000540 _____ () C:\Windows\PFRO.log
2015-03-16 19:51 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-03-16 19:51 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-03-16 19:51 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-03-16 19:51 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-03-16 19:51 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-03-16 19:51 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2015-03-16 19:51 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2015-03-16 19:51 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2015-03-16 19:48 - 2015-03-16 20:27 - 00000000 ____D () C:\Qoobox
2015-03-16 19:48 - 2015-03-16 20:21 - 00000000 ____D () C:\Windows\erdnt
2015-03-16 19:43 - 2015-03-16 19:44 - 05615380 ____R (Swearware) C:\Users\Jens name\Desktop\ComboFix.exe
2015-03-15 08:05 - 2015-03-15 08:05 - 00380416 _____ () C:\Users\Jens name\Downloads\Gmer-19357.exe
2015-03-15 07:45 - 2015-03-15 07:46 - 00059166 _____ () C:\Users\Jens name\Downloads\Addition.txt
2015-03-15 07:43 - 2015-03-18 18:14 - 00027523 _____ () C:\Users\Jens name\Downloads\FRST.txt
2015-03-15 07:43 - 2015-03-18 18:14 - 00000000 ____D () C:\FRST
2015-03-15 07:43 - 2015-03-18 14:35 - 00000000 ____D () C:\Users\Jens name\Desktop\tb
2015-03-15 07:43 - 2015-03-15 07:43 - 02095616 _____ (Farbar) C:\Users\Jens name\Downloads\FRST64.exe
2015-03-15 07:41 - 2015-03-15 07:41 - 00000488 _____ () C:\Users\Jens name\Downloads\defogger_disable.log
2015-03-15 07:41 - 2015-03-15 07:41 - 00000000 _____ () C:\Users\Jens name\defogger_reenable
2015-03-15 07:40 - 2015-03-15 07:41 - 01135104 _____ (Farbar) C:\Users\Jens name\Downloads\FRST.exe
2015-03-15 07:40 - 2015-03-15 07:40 - 00050477 _____ () C:\Users\Jens name\Downloads\Defogger.exe
2015-03-15 01:00 - 2015-03-18 11:23 - 00001512 _____ () C:\Windows\setupact.log
2015-03-15 01:00 - 2015-03-15 01:00 - 00000000 _____ () C:\Windows\setuperr.log
2015-03-12 21:32 - 2015-03-12 21:32 - 05325696 _____ (Piriform Ltd) C:\Users\Jens name\Downloads\ccsetup503.exe
2015-03-11 16:27 - 2015-03-11 16:27 - 00000000 ____D () C:\Windows\system32\78QY3S1_SupportAssistClient_20150311162736
2015-03-11 08:08 - 2015-02-20 05:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 08:08 - 2015-02-20 05:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 08:08 - 2015-02-20 05:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 08:08 - 2015-02-20 05:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 08:08 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 08:08 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 08:08 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 08:08 - 2015-02-20 05:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 08:08 - 2015-02-20 04:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 08:08 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 08:08 - 2015-02-03 04:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 08:08 - 2015-02-03 04:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 08:08 - 2015-02-03 04:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 08:08 - 2015-02-03 04:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 08:08 - 2015-02-03 04:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 08:08 - 2015-02-03 04:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 08:08 - 2015-02-03 04:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 08:08 - 2015-02-03 04:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 08:08 - 2015-02-03 04:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 08:08 - 2015-02-03 04:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 08:08 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 08:08 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 08:08 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 08:08 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 08:08 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 08:08 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 08:08 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 08:08 - 2014-10-31 23:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 08:07 - 2015-03-06 06:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 08:07 - 2015-03-06 06:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 08:07 - 2015-03-06 06:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 08:07 - 2015-03-06 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 08:07 - 2015-03-06 06:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 08:07 - 2015-03-06 06:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 08:07 - 2015-03-06 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 08:07 - 2015-03-06 06:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 08:07 - 2015-03-06 06:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 08:07 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 08:07 - 2015-03-06 06:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 08:07 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 08:07 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 08:07 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 08:07 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 08:07 - 2015-02-26 04:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 08:07 - 2015-02-24 04:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 08:07 - 2015-02-24 03:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 08:07 - 2015-02-21 02:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 08:07 - 2015-02-21 01:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 08:07 - 2015-02-21 01:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 08:07 - 2015-02-21 01:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 08:07 - 2015-02-21 01:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 08:07 - 2015-02-21 00:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 08:07 - 2015-02-21 00:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 08:07 - 2015-02-20 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 08:07 - 2015-02-20 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 08:07 - 2015-02-20 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 08:07 - 2015-02-20 03:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 08:07 - 2015-02-20 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 08:07 - 2015-02-20 03:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 08:07 - 2015-02-20 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 08:07 - 2015-02-20 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 08:07 - 2015-02-20 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 08:07 - 2015-02-20 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 08:07 - 2015-02-20 03:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 08:07 - 2015-02-20 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 08:07 - 2015-02-20 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 08:07 - 2015-02-20 03:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 08:07 - 2015-02-20 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 08:07 - 2015-02-20 03:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 08:07 - 2015-02-20 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 08:07 - 2015-02-20 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 08:07 - 2015-02-20 03:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 08:07 - 2015-02-20 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 08:07 - 2015-02-20 03:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 08:07 - 2015-02-20 03:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 08:07 - 2015-02-20 03:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 08:07 - 2015-02-20 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 08:07 - 2015-02-20 03:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 08:07 - 2015-02-20 03:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 08:07 - 2015-02-20 03:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 08:07 - 2015-02-20 02:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 08:07 - 2015-02-20 02:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 08:07 - 2015-02-20 02:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-03-11 08:07 - 2015-02-20 02:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 08:07 - 2015-02-20 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 08:07 - 2015-02-20 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 08:07 - 2015-02-20 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 08:07 - 2015-02-20 02:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 08:07 - 2015-02-20 02:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 08:07 - 2015-02-20 02:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 08:07 - 2015-02-20 02:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 08:07 - 2015-02-20 02:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 08:07 - 2015-02-20 02:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 08:07 - 2015-02-20 02:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 08:07 - 2015-02-20 02:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-11 08:07 - 2015-02-20 02:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 08:07 - 2015-02-20 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-11 08:07 - 2015-02-20 02:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 08:07 - 2015-02-20 01:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 08:07 - 2015-02-20 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-11 08:07 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 08:07 - 2015-02-13 06:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 08:07 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 08:07 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 08:07 - 2015-02-03 04:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 08:07 - 2015-02-03 04:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 08:07 - 2015-02-03 04:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 08:07 - 2015-02-03 04:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 08:07 - 2015-02-03 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 08:07 - 2015-02-03 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 08:07 - 2015-02-03 04:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 08:07 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 08:07 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 08:07 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 08:07 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 08:07 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 08:07 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 08:07 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 08:07 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 08:07 - 2015-02-03 03:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 08:07 - 2015-01-31 04:48 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-03-11 08:07 - 2015-01-31 04:48 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-11 08:07 - 2015-01-31 00:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 08:07 - 2015-01-31 00:56 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-03-11 08:07 - 2015-01-17 03:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 08:07 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 08:06 - 2015-02-04 04:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 08:06 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-10 13:16 - 2015-03-10 13:16 - 00001518 _____ () C:\Users\Jens name\Downloads\URLLink (7).acsm
2015-03-10 13:16 - 2015-03-10 13:16 - 00001478 _____ () C:\Users\Jens name\Downloads\URLLink (8).acsm
2015-03-10 13:15 - 2015-03-10 13:16 - 00001487 _____ () C:\Users\Jens name\Downloads\URLLink (6).acsm
2015-03-05 07:51 - 2015-03-05 07:51 - 00032912 _____ () C:\Users\Jens name\Desktop\mitgl-tel+mail-feb2015.xlsx
2015-03-03 21:31 - 2015-03-03 21:31 - 01250304 _____ () C:\Users\Jens name\Downloads\flugpersonal.ppt
2015-03-03 21:31 - 2015-03-03 21:31 - 01250304 _____ () C:\Users\Jens name\Downloads\flugpersonal (1).ppt
2015-02-26 20:16 - 2015-02-26 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Beurer
2015-02-26 20:16 - 2015-02-26 20:16 - 00000000 ____D () C:\ProgramData\Beurer
2015-02-26 20:16 - 2015-02-26 20:16 - 00000000 ____D () C:\Program Files (x86)\Beurer
2015-02-26 20:00 - 2015-02-26 20:04 - 98110248 _____ (Beurer Health And Well-Being) C:\Users\Jens name\Downloads\setup.exe
2015-02-26 00:03 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-26 00:03 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-25 14:30 - 2015-02-25 14:30 - 00001457 _____ () C:\Users\Jens name\Downloads\URLLink (5).acsm
2015-02-25 14:25 - 2015-02-25 14:25 - 00001485 _____ () C:\Users\Jens name\Downloads\URLLink (4).acsm
2015-02-25 14:25 - 2015-02-25 14:25 - 00001457 _____ () C:\Users\Jens name\Downloads\URLLink (3).acsm
2015-02-25 13:20 - 2015-02-25 13:21 - 26069441 _____ () C:\Users\Jens name\Downloads\com.samsung.android.app.watchmanager_1.7.031004 (1).apk
2015-02-25 12:59 - 2015-02-25 12:59 - 09670357 _____ () C:\Users\Jens name\Downloads\apk-install-7278911.apk
2015-02-25 12:28 - 2015-02-25 12:28 - 00000000 ____D () C:\Users\Jens name\Downloads\Neuer Ordner
2015-02-25 12:28 - 2015-02-25 12:28 - 00000000 ____D () C:\Users\Jens name\Downloads\gf
2015-02-25 12:25 - 2015-02-25 12:25 - 01182190 _____ () C:\Users\Jens name\Downloads\7z938.exe
2015-02-25 12:11 - 2015-02-25 12:11 - 00971547 _____ () C:\Users\Jens name\Downloads\GR.GearManagerStub.apk
2015-02-25 11:53 - 2015-02-25 11:54 - 26069441 _____ () C:\Users\Jens name\Downloads\com.samsung.android.app.watchmanager_1.7.031004.apk
2015-02-22 21:49 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-22 21:49 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-22 21:49 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-22 21:49 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-19 11:10 - 2015-02-19 11:10 - 00186177 _____ () C:\Users\Jens name\Downloads\PB_Umsatzauskunft_KtoNr0631085201_19-02-2015_1106.xml
2015-02-19 11:10 - 2015-02-19 11:10 - 00186177 _____ () C:\Users\Jens name\Downloads\PB_Umsatzauskunft_KtoNr0631085201_19-02-2015_1106 (1).xml
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-18 17:48 - 2013-01-10 21:11 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-18 17:40 - 2011-12-27 07:03 - 01654595 _____ () C:\Windows\WindowsUpdate.log
2015-03-18 17:39 - 2011-12-31 11:07 - 00001152 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1320315719-3326968574-895728413-1001UA.job
2015-03-18 15:58 - 2015-02-12 19:39 - 00000426 _____ () C:\Windows\Tasks\Dell SupportAssistAgent AutoUpdate.job
2015-03-18 15:54 - 2015-02-11 12:22 - 00003484 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask
2015-03-18 13:38 - 2011-12-31 11:07 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1320315719-3326968574-895728413-1001Core.job
2015-03-18 11:57 - 2010-11-21 07:50 - 00700118 _____ () C:\Windows\system32\perfh007.dat
2015-03-18 11:57 - 2010-11-21 07:50 - 00149968 _____ () C:\Windows\system32\perfc007.dat
2015-03-18 11:57 - 2009-07-14 06:13 - 01622228 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-18 11:33 - 2009-07-14 05:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-18 11:33 - 2009-07-14 05:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-18 11:28 - 2013-10-23 05:42 - 00000000 ____D () C:\ProgramData\boost_interprocess
2015-03-18 11:26 - 2014-08-31 19:48 - 00000000 ___RD () C:\Users\Jens name\Dropbox
2015-03-18 11:26 - 2014-08-31 19:14 - 00000000 ____D () C:\Users\Jens name\AppData\Roaming\Dropbox
2015-03-18 11:24 - 2013-12-01 11:06 - 00000000 ___RD () C:\Users\Jens name\Google Drive
2015-03-18 11:24 - 2011-12-27 14:40 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2015-03-18 11:24 - 2011-12-27 14:40 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2015-03-18 11:24 - 2011-12-27 14:36 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2015-03-18 11:23 - 2013-01-10 21:11 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-18 11:23 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-18 11:22 - 2012-03-10 12:16 - 00624284 _____ () C:\aaw7boot.log
2015-03-18 11:22 - 2011-12-27 07:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-17 22:50 - 2012-07-12 17:23 - 00003986 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{D3F2ED7F-9929-48CA-A472-7EC179DE8884}
2015-03-17 16:32 - 2011-12-27 14:55 - 00000000 ____D () C:\ProgramData\Sonic
2015-03-17 16:13 - 2013-10-18 19:22 - 00000000 ____D () C:\AdwCleaner
2015-03-17 16:05 - 2014-08-22 20:06 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-16 20:27 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2015-03-16 20:09 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2015-03-16 20:00 - 2011-12-30 15:16 - 00000000 ____D () C:\Users\Jens name
2015-03-12 21:33 - 2014-03-19 08:54 - 00000784 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-03-12 21:33 - 2012-10-24 15:41 - 00000000 ____D () C:\Program Files\CCleaner
2015-03-12 20:50 - 2012-03-10 12:16 - 00000000 ____D () C:\Windows\Minidump
2015-03-12 13:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-03-12 07:14 - 2014-08-31 19:48 - 00001051 _____ () C:\Users\Jens name\Desktop\Dropbox.lnk
2015-03-12 07:14 - 2014-08-31 19:15 - 00000000 ____D () C:\Users\Jens name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-03-11 16:32 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-11 16:25 - 2009-07-14 05:45 - 00362408 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-11 16:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-11 16:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-10 17:48 - 2013-12-01 11:04 - 00002044 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2015-03-10 17:48 - 2013-12-01 11:04 - 00002042 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2015-03-10 17:48 - 2013-12-01 11:04 - 00002032 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2015-03-10 17:48 - 2013-12-01 11:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-03-10 13:16 - 2013-08-01 21:45 - 00000000 ____D () C:\Users\Jens name\Documents\My Digital Editions
2015-03-07 16:01 - 2013-08-01 16:59 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-07 15:55 - 2011-12-30 15:29 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-05 23:20 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-05 18:23 - 2012-01-05 22:23 - 00000000 ____D () C:\Users\Jens name\AppData\Roaming\SoftGrid Client
2015-03-05 11:27 - 2014-03-01 09:47 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-05 11:27 - 2012-10-27 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-03-05 11:27 - 2012-10-27 21:37 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-03-04 14:48 - 2013-05-09 18:41 - 00044088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-03-04 14:48 - 2013-03-30 18:52 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-03-04 14:48 - 2013-03-30 18:52 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-03-03 14:17 - 2010-11-21 04:27 - 00295552 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-26 20:16 - 2014-09-26 08:12 - 00002107 _____ () C:\Users\Public\Desktop\Beurer*HealthManager.lnk
2015-02-26 20:15 - 2014-09-26 08:09 - 00000000 ____D () C:\Users\Jens name\AppData\Roaming\Beurer HealthManager
2015-02-26 16:24 - 2011-02-11 18:12 - 00000000 ____D () C:\DELL
2015-02-22 22:17 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-22 21:51 - 2011-02-11 11:22 - 01596508 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-02-21 12:01 - 2014-03-01 10:21 - 00003556 _____ () C:\Windows\System32\Tasks\GarminUpdaterTask
2015-02-21 12:01 - 2014-03-01 10:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2015-02-21 12:01 - 2014-03-01 09:47 - 00001890 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2015-02-21 12:01 - 2014-03-01 09:47 - 00000000 ____D () C:\ProgramData\Garmin
2015-02-21 12:01 - 2014-02-27 07:13 - 00000000 ____D () C:\Program Files (x86)\Garmin
2015-02-19 10:50 - 2012-02-27 17:31 - 00000826 _____ () C:\Windows\wiso.ini
2015-02-19 10:50 - 2012-02-27 17:27 - 00000000 ____D () C:\ProgramData\Buhl Data Service GmbH
==================== Files in the root of some directories =======
2014-11-22 16:58 - 2014-11-22 16:58 - 0000854 _____ () C:\Users\Jens name\AppData\Local\recently-used.xbel
Files to move or delete:
====================
C:\Users\Jens name\APP_IO_WXP_VSTA_W7_A02_Setup-7W7T4_ZPE.exe
C:\Users\Jens name\CONEXANT_D400-USB-MODEM_DPP14_A00_SETUP_ZPE.exe
C:\Users\Jens name\CONEXANT_D400-USB-MODEM_J6N4K_A02_SETUP_ZPE.exe
C:\Users\Jens name\CW1394A0.exe
C:\Users\Jens name\DELL_MOBILE-BROADBAND-MANAGE_A08_R291705.exe
C:\Users\Jens name\DELL_WIRELESS-5540-HSPA-MINI_A11_R287094.exe
C:\Users\Jens name\DELL_WIRELESS-5550-HSPA-MINI_A03_R298995.exe
C:\Users\Jens name\DELL_WIRELESS-5550-HSPA-MINI_A03_R298998.exe
C:\Users\Jens name\DELL_WIRELESS-5620-EVDO-HSPA_A09_R292028.exe
C:\Users\Jens name\R261284.exe
C:\Users\Jens name\R293038.exe
C:\Users\Jens name\R296901.exe
C:\Users\Jens name\R304505.exe
C:\Users\Jens name\R304507.exe
Some content of TEMP:
====================
C:\Users\Jens name\AppData\Local\Temp\avgnt.exe
C:\Users\Jens name\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplmzmny.dll
C:\Users\Jens name\AppData\Local\Temp\Quarantine.exe
C:\Users\Jens name\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-03-16 20:44
==================== End Of Log ============================
Viele Grüße winnie |
|
19.03.2015, 09:36
| #14 |
| /// the machine /// TB-Ausbilder | Avira free antivirus meldet TR/Dropper.A.25752 Java und Adobe updaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter BootExecute: autocheck autochk * lsdeletesdnclean64.exe
C:\Users\Jens name\APP_IO_WXP_VSTA_W7_A02_Setup-7W7T4_ZPE.exe
C:\Users\Jens name\CONEXANT_D400-USB-MODEM_DPP14_A00_SETUP_ZPE.exe
C:\Users\Jens name\CONEXANT_D400-USB-MODEM_J6N4K_A02_SETUP_ZPE.exe
C:\Users\Jens name\CW1394A0.exe
C:\Users\Jens name\DELL_MOBILE-BROADBAND-MANAGE_A08_R291705.exe
C:\Users\Jens name\DELL_WIRELESS-5540-HSPA-MINI_A11_R287094.exe
C:\Users\Jens name\DELL_WIRELESS-5550-HSPA-MINI_A03_R298995.exe
C:\Users\Jens name\DELL_WIRELESS-5550-HSPA-MINI_A03_R298998.exe
C:\Users\Jens name\DELL_WIRELESS-5620-EVDO-HSPA_A09_R292028.exe
C:\Users\Jens name\R261284.exe
C:\Users\Jens name\R293038.exe
C:\Users\Jens name\R296901.exe
C:\Users\Jens name\R304505.exe
C:\Users\Jens name\R304507.exe
Emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
19.03.2015, 11:12
| #15 |
| | Avira free antivirus meldet TR/Dropper.A.25752 Hallo Schrauber, vielen Dank :-) Hier nun der Log: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by Jens name at 2015-03-19 11:06:41 Run:1
Running from C:\Users\Jens name\Downloads
Loaded Profiles: Jens name (Available profiles: Jens name)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
BootExecute: autocheck autochk * lsdeletesdnclean64.exe
C:\Users\Jens name\APP_IO_WXP_VSTA_W7_A02_Setup-7W7T4_ZPE.exe
C:\Users\Jens name\CONEXANT_D400-USB-MODEM_DPP14_A00_SETUP_ZPE.exe
C:\Users\Jens name\CONEXANT_D400-USB-MODEM_J6N4K_A02_SETUP_ZPE.exe
C:\Users\Jens name\CW1394A0.exe
C:\Users\Jens name\DELL_MOBILE-BROADBAND-MANAGE_A08_R291705.exe
C:\Users\Jens name\DELL_WIRELESS-5540-HSPA-MINI_A11_R287094.exe
C:\Users\Jens name\DELL_WIRELESS-5550-HSPA-MINI_A03_R298995.exe
C:\Users\Jens name\DELL_WIRELESS-5550-HSPA-MINI_A03_R298998.exe
C:\Users\Jens name\DELL_WIRELESS-5620-EVDO-HSPA_A09_R292028.exe
C:\Users\Jens name\R261284.exe
C:\Users\Jens name\R293038.exe
C:\Users\Jens name\R296901.exe
C:\Users\Jens name\R304505.exe
C:\Users\Jens name\R304507.exe
Emptytemp:
*****************
HKLM\System\CurrentControlSet\Control\Session Manager\\BootExecute => Value was restored successfully.
C:\Users\Jens name\APP_IO_WXP_VSTA_W7_A02_Setup-7W7T4_ZPE.exe => Moved successfully.
C:\Users\Jens name\CONEXANT_D400-USB-MODEM_DPP14_A00_SETUP_ZPE.exe => Moved successfully.
C:\Users\Jens name\CONEXANT_D400-USB-MODEM_J6N4K_A02_SETUP_ZPE.exe => Moved successfully.
C:\Users\Jens name\CW1394A0.exe => Moved successfully.
C:\Users\Jens name\DELL_MOBILE-BROADBAND-MANAGE_A08_R291705.exe => Moved successfully.
C:\Users\Jens name\DELL_WIRELESS-5540-HSPA-MINI_A11_R287094.exe => Moved successfully.
C:\Users\Jens name\DELL_WIRELESS-5550-HSPA-MINI_A03_R298995.exe => Moved successfully.
C:\Users\Jens name\DELL_WIRELESS-5550-HSPA-MINI_A03_R298998.exe => Moved successfully.
C:\Users\Jens name\DELL_WIRELESS-5620-EVDO-HSPA_A09_R292028.exe => Moved successfully.
C:\Users\Jens name\R261284.exe => Moved successfully.
C:\Users\Jens name\R293038.exe => Moved successfully.
C:\Users\Jens name\R296901.exe => Moved successfully.
C:\Users\Jens name\R304505.exe => Moved successfully.
C:\Users\Jens name\R304507.exe => Moved successfully.
EmptyTemp: => Removed 561.2 MB temporary data.
The system needed a reboot.
==== End of Fixlog 11:07:17 ====
Grüße Jens |
|
| Themen zu Avira free antivirus meldet TR/Dropper.A.25752 |
| .html, antivirus, autostart, avira, code, defogger, disable, files, free, gefunde, melde, meldet, scan, super, zusammen |
Linear-Darstellung
