Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: BKA-Trojaner, und keine Ahnung wie es läuft

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 10.09.2012, 14:31   #1
SvenK
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft



Hallo liebe Forenmitglieder und Helfer,

ich habe mir gestern abend dann auch diesen BKA Trojaner gefangen.
Leider muss ich gestehen, das ich reiner Anwender bin, und nicht viel Ahnung habe.

Soweit ich mich hier im Forum informiert habe, muss ich einen OTL Scan machen. Meine Frage wie funktioniert das?
Wenn ich den Rechner hochfahre kann ich nix mehr machen ausser Neustart oder Runterfahren.
Wie kann ich da nen OTL.exe downloaden?
Eine Kollegin sagte mir das es eventuell funktioniert wenn ich den Rechner im "abgesicherten Modus" starte.

Alternativ habe ich auch noch einen zweiten laptop, den ich natürlich auch noch ans Netz hängen kann. Weiß aber nicht ob das sinn macht.

Ich wäre euch für eure Hilfe sehr dankbar.

Viele Grüße

Sven

Alt 11.09.2012, 02:22   #2
t'john
/// Helfer-Team
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft





Von einem sauberen PC OTL.exe runterladen auf USB Stick.
Infizierten Rechner ohne Internet im abgesicherten Modus starten. OTL.exe auf Desktop kopieren und Log erstellen.

Systemscan mit OTL (bebilderte Anleitung)

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop ( falls noch nicht vorhanden)- Doppelklick auf die OTL.exe
- Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
- Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
- Unter Extra Registry, wähle bitte Use SafeList
- Klicke nun auf Run Scan links oben
- Wenn der Scan beendet wurde werden 2 Logfiles erstellt
- Poste die Logfiles hier in den Thread.
__________________

__________________

Alt 12.09.2012, 09:43   #3
SvenK
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft



Guten Morgen,

entschuldigung das ich erst jetzt dazu komme, war die letzten zwei Tage aber erst zu spät zu Hause.

So ich hoffe das funktioniert jetzt, Scan habe ich gemacht.OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 9/12/2012 9:21:22 AM - Run 1
OTL by OldTimer - Version 3.2.61.3     Folder = C:\Users\Sven\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7.91 Gb Total Physical Memory | 6.82 Gb Available Physical Memory | 86.23% Memory free
15.82 Gb Paging File | 14.76 Gb Available in Paging File | 93.28% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 230.00 Gb Total Space | 106.57 Gb Free Space | 46.34% Space Free | Partition Type: NTFS
Drive D: | 343.41 Gb Total Space | 315.61 Gb Free Space | 91.91% Space Free | Partition Type: NTFS
Drive E: | 336.68 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive F: | 3.76 Gb Total Space | 3.20 Gb Free Space | 85.18% Space Free | Partition Type: FAT32
 
Computer Name: ***** | User Name: ***** | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Sven\Desktop\OTL.exe (OldTimer Tools)
 
 
========== Modules (No Company Name) ==========
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - (btwdins) -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
SRV:64bit: - (TurboBoost) -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Intel(R) Corporation)
SRV:64bit: - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV:64bit: - (Samsung UPD Service) -- C:\Windows\SysNative\SUPDSvc.exe (Samsung Electronics CO., LTD.)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (TeamViewer7) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (Sony Ericsson PCCompanion) -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe (Avanquest Software)
SRV - (NIS) -- C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe (Symantec Corporation)
SRV - (BBSvc) -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (SeaPort) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (CLKMSVC10_38F51D56) -- C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe (CyberLink)
SRV - (NOBU) -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Symantec Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (YahooAUService) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (Fs_Rec) -- C:\windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (SymEvent) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (SymNetS) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnets.sys (Symantec Corporation)
DRV:64bit: - (SRTSP) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.sys (Symantec Corporation)
DRV:64bit: - (SRTSPX) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.sys (Symantec Corporation)
DRV:64bit: - (SymEFA) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa64.sys (Symantec Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (SymDS) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds64.sys (Symantec Corporation)
DRV:64bit: - (SymIRON) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\ironx64.sys (Symantec Corporation)
DRV:64bit: - (nvpciflt) -- C:\Windows\SysNative\drivers\nvpciflt.sys (NVIDIA Corporation)
DRV:64bit: - (nusb3xhc) -- C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation)
DRV:64bit: - (nusb3hub) -- C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (clwvd) -- C:\Windows\SysNative\drivers\clwvd.sys (CyberLink Corporation)
DRV:64bit: - (IntcDAud) -- C:\Windows\SysNative\drivers\IntcDAud.sys (Intel(R) Corporation)
DRV:64bit: - (TurboB) -- C:\Windows\SysNative\drivers\TurboB.sys (Intel(R) Corporation)
DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (BTWAMPFL) -- C:\Windows\SysNative\drivers\btwampfl.sys (Broadcom Corporation.)
DRV:64bit: - (btwavdt) -- C:\Windows\SysNative\drivers\btwavdt.sys (Broadcom Corporation.)
DRV:64bit: - (btwrchid) -- C:\Windows\SysNative\drivers\btwrchid.sys (Broadcom Corporation.)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (ETD) -- C:\Windows\SysNative\drivers\ETD.sys (ELAN Microelectronics Corp.)
DRV:64bit: - (btwaudio) -- C:\Windows\SysNative\drivers\btwaudio.sys (Broadcom Corporation.)
DRV:64bit: - (BCM43XX) -- C:\Windows\SysNative\drivers\BCMWL664.SYS (Broadcom Corporation)
DRV:64bit: - (btwl2cap) -- C:\Windows\SysNative\drivers\btwl2cap.sys (Broadcom Corporation.)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (StillCam) -- C:\Windows\SysNative\drivers\serscan.sys (Microsoft Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (SABI) -- C:\Windows\SysNative\drivers\SABI.sys (SAMSUNG ELECTRONICS)
DRV:64bit: - (KMWDFILTER) -- C:\Windows\SysNative\drivers\KMWDFILTER.sys (Windows (R) Codename Longhorn DDK provider)
DRV - (NAVEX15) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20110922.024\EX64.SYS (Symantec Corporation)
DRV - (eeCtrl) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (NAVENG) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20110922.024\ENG64.SYS (Symantec Corporation)
DRV - (IDSVia64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20110922.030\IDSviA64.sys (Symantec Corporation)
DRV - (BHDrvx64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20110909.001\BHDrvx64.sys (Symantec Corporation)
DRV - (rtport) -- C:\Windows\SysWOW64\drivers\rtport.sys (Windows (R) 2003 DDK 3790 provider)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://samsung.msn.com
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com
IE - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://samsung.msn.com
IE - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Sven\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPlgn\ [2011/10/01 09:12:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\coFFPlgn_2011_7_12_1 [2012/09/09 23:44:52 | 000,000,000 | ---D | M]
 
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: hxxp://www.google.com/
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Sven\AppData\Local\Google\Chrome\Application\17.0.963.56\gcswf32.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Sven\AppData\Local\Google\Chrome\Application\17.0.963.56\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Sven\AppData\Local\Google\Chrome\Application\17.0.963.56\pdf.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll
CHR - plugin: WordCaptureX (Enabled) = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjdepfkicdcciagbigfcmdhknnoaaegf\1.1_0\npWCX.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Nexon Game Controller (Enabled) = C:\ProgramData\NexonEU\NGM\npNxGameeu.dll
CHR - plugin: Nexon Game Controller (Enabled) = C:\ProgramData\NexonUS\NGM\npNxGameUS.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\Sven\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.17_0\
CHR - Extension: Skype Click to Call = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\
CHR - Extension: Word CaptureX Extension = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjdepfkicdcciagbigfcmdhknnoaaegf\1.1_0\
CHR - Extension: Google Mail = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\IPS\IPSBHO.DLL (Symantec Corporation)
O2 - BHO: (Samsung BHO Class) - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [] C:\Users\Sven\AppData\Roaming\Wouqh\nyzym.exe ()
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [{4C998393-5696-6508-B037-E626C5D685F3}] C:\Users\Sven\AppData\Roaming\Overyn\ukzeup.exe ()
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [{B2E663E4-B92C-68B3-A965-E9D64E2F4C84}] C:\Users\Sven\AppData\Roaming\Wouqh\nyzym.exe ()
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [huapcfpuomvvpnj] C:\ProgramData\huapcfpu.exe ()
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [kbdapiserv] C:\Users\Sven\AppData\Local\kbdapiserv\eapPad32.dll ()
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [KPeerNexonEU] C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe (NEXON Inc.)
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet File not found
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [Sony Ericsson PC Companion] C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe (Sony Ericsson)
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [Userinit] C:\Users\Sven\AppData\Roaming\appconf32.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Samsung AnyWeb Print - {328ECD19-C167-40eb-A0C7-16FE7634105E} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Senden an Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Senden an &Bluetooth-Gerät... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in )
O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: sony.com ([]* in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E9708CBF-106F-4D1A-A98D-C33CB40DE433}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FC904E33-8639-4D89-824C-AC2E96468948}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - AppInit_DLLs: (C:\windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/03/13 20:39:10 | 000,000,061 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2011/12/16 17:48:12 | 000,000,101 | ---- | M] () - F:\Autorun.inf -- [ FAT32 ]
O33 - MountPoints2\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Einstiegsseite.exe -- [2009/12/10 17:43:32 | 001,569,744 | R--- | M] (HanseNet Telekommunikation GmbH)
O33 - MountPoints2\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\Shell - "" = AutoRun
O33 - MountPoints2\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\Shell\AutoRun\command - "" = F:\Startme.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012/09/12 09:20:15 | 000,600,064 | ---- | C] (OldTimer Tools) -- C:\Users\Sven\Desktop\OTL.exe
[2012/09/09 23:28:47 | 000,000,000 | ---D | C] -- C:\ProgramData\urkvkanuoxokarg
[2012/09/09 12:03:12 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{DBF127D1-DE80-4AC9-8036-5893E47EE261}
[2012/09/09 00:02:48 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{9F7901AD-AC8C-4FDC-8DBA-99A9729BAF5D}
[2012/09/08 09:15:51 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
[2012/09/08 09:14:55 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{4C064FCC-E223-4C9F-B694-83D009449D9B}
[2012/09/07 16:06:47 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{0BD85775-BDA6-4C06-95BD-CF41764C69DD}
[2012/09/07 12:21:10 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{EED70098-F0E8-4408-8D66-C2FD5C70C106}
[2012/09/07 07:07:50 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{5F59D1DF-A803-445F-86EE-4A6ABC806BC0}
[2012/09/06 17:31:15 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{5F4FF0DB-2EB8-4EBB-A80F-DE7141EC449D}
[2012/09/05 20:34:05 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{FBA21B49-767C-4771-81F3-989957411704}
[2012/09/04 22:45:36 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{F064D0C6-8B83-4818-A263-2C446D3E3372}
[2012/09/03 17:42:56 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{C23EADB2-757C-4AE7-B476-AF1166E461B3}
[2012/09/03 08:19:15 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{B9264354-A820-467C-AF6D-6EBB2A3CE227}
[2012/09/02 03:28:13 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{4E526F44-00BF-4AEC-A049-310661C00985}
[2012/09/01 12:29:35 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{7D88B79B-CC07-4DD0-855B-DAE8A41E8C38}
[2012/09/01 07:38:30 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\Mfc42loc.dll
[2012/09/01 07:38:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks
[2012/09/01 07:38:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bethesda Softworks
[2012/09/01 07:25:20 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{3F3921C4-ED9E-47DB-AE97-A9CBC100BB25}
[2012/08/31 17:39:30 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{32D0AF8B-0C08-4DF7-B737-0482CA912417}
[2012/08/30 17:53:32 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{99DFE1BD-2D82-4E91-BC53-7E4E831F7322}
[2012/08/28 18:40:53 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{6B6A0121-C931-4F43-850C-81A5A05CD330}
[2012/08/27 19:36:30 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{2B73406A-55E5-4CB8-AC60-3D2E30D2345D}
[2012/08/26 15:09:47 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{B3020C5C-BD05-497C-96FA-5A970B3E151C}
[2012/08/26 08:55:06 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{7F04B80D-97D8-429C-8E4A-4E0AD53B73F8}
[2012/08/25 23:07:40 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{BEE152AE-345F-4AEB-95A5-1518CE4F0123}
[2012/08/25 17:13:04 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Roaming\WildTangent
[2012/08/25 16:53:19 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\Microsoft Games
[2012/08/25 16:52:09 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{E12EA5E0-F099-4645-A0AD-FF64D4EB2001}
[2012/08/25 15:19:26 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{2FA54C86-2C32-4248-9D91-9BC301A51ED3}
[2012/08/25 14:57:10 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{CA936F18-DBC3-4193-A648-2F9D528EAF49}
[2012/08/25 12:55:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Black Isle
[2012/08/25 12:55:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Black Isle
[2012/08/25 12:38:53 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{1102379D-EF8F-462A-A27B-D196D515C034}
[2012/08/25 12:25:22 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\Sony
[2012/08/25 12:24:46 | 000,000,000 | ---D | C] -- C:\Users\Sven\Podcasts
[2012/08/25 12:24:46 | 000,000,000 | ---D | C] -- C:\Users\Sven\Documents\Media Go
[2012/08/25 12:24:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
[2012/08/25 12:24:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Sony Shared
[2012/08/25 12:24:22 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\Downloaded Installations
[2012/08/25 12:24:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Corporation
[2012/08/25 12:24:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony
[2012/08/25 12:24:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2012/08/25 12:23:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple
[2012/08/25 12:23:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2012/08/25 12:23:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2012/08/25 12:23:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2012/08/25 12:23:35 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\Apple
[2012/08/25 12:23:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2012/08/25 12:21:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony Media Go Install
[2012/08/25 12:20:59 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Roaming\Sony
[2012/08/25 12:19:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Ericsson
[2012/08/25 12:19:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony Ericsson
[2012/08/25 12:19:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony Ericsson
[2012/08/25 11:46:48 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{21874DB6-7A85-465C-96BB-38186F228419}
[2012/08/25 08:00:51 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{0AA2E4F4-7BFE-499D-9747-C19063EC675B}
[2012/08/24 18:53:04 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{A6C72AF9-4943-4AB9-BC11-78B5B62CA537}
[2012/08/23 18:35:30 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{DA3860EF-3CEB-4B5A-8B3D-43DB2F0ED6F0}
[2012/08/22 20:41:11 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{CB4DE8FD-8BA1-4244-A20F-D9513AC8B2D0}
[2012/08/21 16:51:11 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{6EAAD736-3CA7-4282-A589-DB83D1595FE0}
[2012/08/20 17:17:23 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{6F6AE82B-9B92-4EFB-802E-36569991F96F}
[2012/08/19 14:55:34 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{0CCCCCB5-BF84-443C-B565-D8A6C7751662}
[2012/08/19 06:34:38 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{F72F79EC-FE5D-458E-BE5A-B3C68C917EB6}
[2012/08/18 22:11:30 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{E9B0E67C-8553-4F8B-BD92-E2B0CA9B7824}
[2012/08/18 22:11:19 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{38621D50-6C9E-4685-95CF-AFE4A94F93C8}
[2012/08/18 20:09:43 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{C4825CA9-E4D7-42DA-8439-D246729E05EE}
[2012/08/18 20:09:32 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{E61F70A7-E9D9-45A1-A4D7-2551AEC560CC}
[2012/08/18 17:45:49 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{FB3D0793-C91D-404F-B426-AE3642ECE9CB}
[2012/08/18 17:45:37 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{F3D9409E-8C64-4A68-81F4-055AFFD87315}
[2012/08/18 09:13:23 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{F5237665-2AE5-4D83-B6A7-B4DE2D547201}
[2012/08/18 02:43:01 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{769B5498-5EC4-4350-BC1A-C18DAAC35010}
[2012/08/17 20:49:55 | 000,217,984 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\strmdll.dll
[2012/08/17 20:49:55 | 000,182,032 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\dxtmsft3.dll
[2012/08/17 20:49:55 | 000,155,408 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\LMRT.dll
[2012/08/17 20:49:55 | 000,140,800 | ---- | C] (The Duck Corporation) -- C:\windows\SysWow64\tm20dec.ax
[2012/08/17 20:49:55 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\unam4ie.exe
[2012/08/17 20:49:55 | 000,038,160 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\LMRTREND.dll
[2012/08/17 20:49:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call To Power 2
[2012/08/17 20:49:53 | 001,088,272 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\danim.dll
[2012/08/17 20:49:53 | 000,194,320 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\qcut.dll
[2012/08/17 20:49:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mciqtz.drv
[2012/08/17 20:49:53 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\w95inf32.dll
[2012/08/17 20:49:53 | 000,002,272 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\w95inf16.dll
[2012/08/17 20:46:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Activision
[2012/08/17 20:38:59 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{417BE153-BBD7-4F79-8BE4-8BD33FBB81C9}
[2012/08/17 18:45:05 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{6F117DCE-BF8E-40A6-A88B-174A075AD19E}
[2012/08/16 19:43:24 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{A559B2B4-B4DA-41CB-BE67-886A230239FC}
[2012/08/16 19:43:10 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{750BEFC2-886A-4108-B122-FFD89D1978D1}
[2012/08/15 23:24:53 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll
[2012/08/15 23:24:53 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll
[2012/08/15 23:24:52 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\url.dll
[2012/08/15 23:24:52 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\url.dll
[2012/08/15 23:24:52 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll
[2012/08/15 23:24:51 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll
[2012/08/15 23:24:51 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl
[2012/08/15 23:24:51 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl
[2012/08/15 23:24:51 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll
[2012/08/15 23:24:51 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieUnatt.exe
[2012/08/15 23:24:51 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieUnatt.exe
[2012/08/15 23:24:50 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript.dll
[2012/08/15 23:24:50 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript.dll
[2012/08/15 16:56:04 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\srcore.dll
[2012/08/15 16:55:37 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\win32spl.dll
[2012/08/15 16:55:36 | 000,492,032 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\win32spl.dll
[2012/08/15 16:55:36 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\windows\splwow64.exe
[2012/08/15 16:50:28 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\netapi32.dll
[2012/08/15 16:50:28 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\browcli.dll
[2012/08/15 16:50:28 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\browcli.dll
[2012/08/15 16:50:14 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\localspl.dll
[2012/08/15 16:32:50 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{E9576017-9020-445A-8BB3-F9AC917EA871}
[2012/08/15 16:32:35 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{F6537DA0-27F1-4334-9263-2E26F7F6D9AA}
[2012/08/15 14:06:55 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{8EE2F7A6-0F9F-451C-AF19-D2943BBEA76E}
[2012/08/15 14:06:43 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{F2B88BB9-FFD6-4C16-9F5B-1F170E84FAE2}
[2012/08/15 10:54:35 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{61F725DA-BDB9-4975-9724-70DB26AB52DC}
[2012/08/15 10:54:21 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{BBEC2F38-4BCD-4E2E-9CD2-48B5ECDE22CE}
[2012/08/15 06:40:47 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{88455F34-53CE-4268-9D17-D9630DFC879C}
[2012/08/14 22:21:50 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{8338CE03-EFA7-405C-8417-A00D1747474F}
[2012/08/14 22:20:41 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{945D24C1-579B-4F4F-B6AF-9CA0A606508E}
[2011/12/23 14:12:29 | 000,351,184 | ---- | C] (Adobe Systems, Incorporated) -- C:\Users\Sven\AppData\Roaming\AcroIEHelpe068.dll
[1 C:\Users\Sven\AppData\Roaming\*.tmp files -> C:\Users\Sven\AppData\Roaming\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012/09/12 09:19:08 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2012/09/12 09:18:57 | 4201,766,911 | -HS- | M] () -- C:\hiberfil.sys
[2012/09/11 09:44:30 | 000,600,064 | ---- | M] (OldTimer Tools) -- C:\Users\Sven\Desktop\OTL.exe
[2012/09/09 23:50:51 | 000,020,992 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/09/09 23:50:51 | 000,020,992 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/09/09 23:28:47 | 000,000,051 | ---- | M] () -- C:\ProgramData\bdccfjlrwixtvuw
[2012/09/09 23:28:32 | 000,054,272 | ---- | M] () -- C:\Users\Sven\ms.exe
[2012/09/09 23:28:32 | 000,054,272 | ---- | M] () -- C:\ProgramData\huapcfpu.exe
[2012/09/08 09:15:51 | 000,001,968 | ---- | M] () -- C:\Users\Sven\Desktop\Drakensang Online.lnk
[2012/09/01 07:43:30 | 000,001,960 | ---- | M] () -- C:\Users\Public\Desktop\The Elder Scrolls Construction Set.lnk
[2012/09/01 07:38:27 | 000,001,038 | ---- | M] () -- C:\Users\Public\Desktop\Morrowind.lnk
[2012/08/25 12:24:36 | 000,001,885 | ---- | M] () -- C:\Users\Public\Desktop\Media Go.lnk
[2012/08/25 12:24:02 | 000,001,845 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2012/08/25 12:19:06 | 000,002,264 | ---- | M] () -- C:\Users\Public\Desktop\Sony Ericsson PC Companion 2.0.lnk
[2012/08/25 12:17:52 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012/08/17 20:49:53 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\w95inf32.dll
[2012/08/17 20:49:53 | 000,002,272 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\w95inf16.dll
[2012/08/16 19:42:21 | 000,276,240 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
[1 C:\Users\Sven\AppData\Roaming\*.tmp files -> C:\Users\Sven\AppData\Roaming\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012/09/09 23:28:47 | 000,054,272 | ---- | C] () -- C:\ProgramData\huapcfpu.exe
[2012/09/09 23:28:34 | 000,000,051 | ---- | C] () -- C:\ProgramData\bdccfjlrwixtvuw
[2012/09/09 23:28:32 | 000,054,272 | ---- | C] () -- C:\Users\Sven\ms.exe
[2012/09/01 07:43:30 | 000,001,960 | ---- | C] () -- C:\Users\Public\Desktop\The Elder Scrolls Construction Set.lnk
[2012/09/01 07:38:27 | 000,001,038 | ---- | C] () -- C:\Users\Public\Desktop\Morrowind.lnk
[2012/08/25 12:24:36 | 000,001,885 | ---- | C] () -- C:\Users\Public\Desktop\Media Go.lnk
[2012/08/25 12:24:02 | 000,001,845 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2012/08/25 12:23:35 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2012/08/25 12:19:06 | 000,002,264 | ---- | C] () -- C:\Users\Public\Desktop\Sony Ericsson PC Companion 2.0.lnk
[2012/08/25 12:17:52 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012/08/17 20:49:53 | 000,010,240 | ---- | C] () -- C:\windows\SysWow64\vidx16.dll
[2012/08/17 20:49:53 | 000,005,672 | ---- | C] () -- C:\windows\SysWow64\quartz.vxd
[2012/05/29 11:21:15 | 000,000,013 | ---- | C] () -- C:\Users\Sven\AppData\Roaming\urhtps.dat
[2012/04/10 00:40:15 | 000,073,703 | ---- | C] () -- C:\Users\Sven\geometry.jpg
[2012/04/10 00:40:15 | 000,053,859 | ---- | C] () -- C:\Users\Sven\malb.jpg
[2012/04/10 00:40:15 | 000,039,497 | ---- | C] () -- C:\Users\Sven\dracula.jpg
[2012/04/10 00:40:15 | 000,035,585 | ---- | C] () -- C:\Users\Sven\christ,dress.jpg
[2012/04/10 00:40:15 | 000,033,041 | ---- | C] () -- C:\Users\Sven\malb6.jpg
[2012/04/10 00:40:15 | 000,028,377 | ---- | C] () -- C:\Users\Sven\DC17560.jpg
[2012/04/10 00:40:15 | 000,013,255 | ---- | C] () -- C:\Users\Sven\DC20737.jpg
[2012/04/10 00:39:30 | 000,095,038 | ---- | C] () -- C:\Users\Sven\pentalfa.jpg
[2012/04/10 00:39:30 | 000,058,381 | ---- | C] () -- C:\Users\Sven\my paint ball gun =).jpg
[2012/04/10 00:39:30 | 000,045,500 | ---- | C] () -- C:\Users\Sven\promotion.jpg
[2012/04/10 00:39:30 | 000,042,322 | ---- | C] () -- C:\Users\Sven\petalouditsa!.jpg
[2012/04/10 00:39:30 | 000,033,854 | ---- | C] () -- C:\Users\Sven\myworld.jpg
[2012/04/10 00:38:53 | 000,040,596 | ---- | C] () -- C:\Users\Sven\theatro skala.jpg
[2012/04/10 00:38:53 | 000,038,317 | ---- | C] () -- C:\Users\Sven\tina n me.jpg
[2012/04/10 00:38:53 | 000,019,108 | ---- | C] () -- C:\Users\Sven\watcher.jpg
[2012/04/10 00:38:16 | 000,049,785 | ---- | C] () -- C:\Users\Sven\004.jpg
[2012/04/10 00:38:16 | 000,043,459 | ---- | C] () -- C:\Users\Sven\003.jpg
[2012/04/10 00:38:16 | 000,042,907 | ---- | C] () -- C:\Users\Sven\005.jpg
[2012/04/10 00:38:16 | 000,038,537 | ---- | C] () -- C:\Users\Sven\03.jpg
[2011/04/09 02:30:10 | 000,258,864 | ---- | C] () -- C:\windows\SUPDRun.exe
[2011/04/09 02:25:12 | 000,960,940 | ---- | C] () -- C:\windows\SysWow64\igkrng600.bin
[2011/04/09 02:25:11 | 000,206,952 | ---- | C] () -- C:\windows\SysWow64\igfcg600m.bin
[2011/04/09 02:25:11 | 000,145,804 | ---- | C] () -- C:\windows\SysWow64\igcompkrng600.bin
[2011/04/08 12:25:06 | 000,307,200 | ---- | C] () -- C:\windows\SetDisplayResolution.exe
[2011/04/08 11:50:29 | 000,000,258 | ---- | C] () -- C:\windows\HotFixList.ini
[2011/04/08 11:49:36 | 000,142,128 | ---- | C] () -- C:\windows\wiainst64.exe
[2011/04/08 11:17:49 | 000,008,192 | ---- | C] () -- C:\windows\SysWow64\drivers\IntelMEFWVer.dll
[2008/12/09 17:23:13 | 000,051,536 | RHS- | C] () -- C:\Users\Sven\AppData\Roaming\appconf32.exe
 
========== LOP Check ==========
 
[2012/03/15 19:25:50 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Aqehx
[2012/06/19 18:29:09 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Aqteer
[2012/02/29 20:30:05 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Atalo
[2012/05/12 18:05:07 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Baqeh
[2012/02/29 20:20:00 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Byoh
[2012/06/17 16:51:41 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ciewe
[2012/05/21 17:33:08 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Cuin
[2012/02/29 19:39:38 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Daok
[2012/02/29 19:39:38 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Dees
[2012/02/29 19:19:28 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Dili
[2012/02/29 19:29:33 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Dyna
[2012/03/21 19:28:32 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ecwi
[2012/02/29 20:09:55 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Eknee
[2012/05/11 18:14:35 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ekoneg
[2012/05/12 18:05:07 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ekqo
[2012/03/15 19:25:50 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Eqanan
[2012/05/21 17:33:08 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Fuwowi
[2012/02/29 20:40:10 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Gefe
[2012/02/29 20:20:00 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Geus
[2012/02/29 20:09:55 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Giwev
[2012/05/15 07:24:52 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Giyhly
[2012/06/12 17:32:13 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Guxyw
[2012/05/20 08:56:55 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Gyixo
[2012/06/19 18:29:09 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Hiep
[2012/02/29 20:30:05 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Hyqyta
[2012/05/28 19:10:48 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Init
[2012/06/25 06:26:14 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Inoz
[2012/05/29 16:06:26 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ivvu
[2012/06/17 06:51:13 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ixlib
[2012/05/29 16:06:26 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Kacet
[2012/06/17 06:51:13 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Kaox
[2011/12/16 23:02:14 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\kock
[2012/01/30 18:56:32 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\LolClient
[2012/06/06 08:25:10 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\LolClient2
[2012/05/21 07:33:06 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Losa
[2012/03/15 19:25:50 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Loyrke
[2012/05/29 06:05:33 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Meykg
[2012/02/29 19:19:28 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Minis
[2012/02/29 19:19:28 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Muadsy
[2012/05/28 19:10:48 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Naewur
[2012/05/29 16:06:26 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Nega
[2012/05/20 08:56:55 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Nuex
[2012/06/12 17:32:13 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Okvuo
[2012/03/21 19:28:32 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Omutew
[2012/02/29 20:20:00 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Oqecp
[2012/02/29 19:29:33 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Otdi
[2012/01/29 10:46:55 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Overyn
[2012/06/17 16:51:41 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Oxhuby
[2012/05/18 09:48:36 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Oxurt
[2012/06/12 17:32:13 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ozegi
[2012/08/23 18:35:18 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ozurl
[2012/02/29 19:39:38 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ozyk
[2012/05/21 07:33:06 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Qoakaf
[2012/05/31 07:31:03 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Quoc
[2012/02/29 19:49:44 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Raaw
[2012/05/31 07:31:03 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Rucou
[2012/05/31 07:31:03 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ruko
[2012/05/20 08:56:55 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Siciyv
[2012/08/25 12:24:45 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Sony
[2012/02/29 19:49:44 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Sybeys
[2012/06/25 06:26:14 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Taygva
[2012/05/25 11:18:26 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\TeamViewer
[2012/06/17 16:51:41 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Tosy
[2012/09/08 01:44:49 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\UAs
[2012/02/29 20:40:10 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ubif
[2012/02/19 23:19:47 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Uceqvas
[2012/05/21 17:33:08 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Uhxema
[2012/02/29 19:49:44 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Umosda
[2012/02/13 10:36:09 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Unity
[2012/06/19 18:29:09 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Upipuf
[2012/05/15 07:24:52 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Upluib
[2012/05/28 19:10:48 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Urbu
[2012/06/17 06:51:13 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Urxu
[2012/06/25 06:26:14 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Usudi
[2012/05/12 18:05:07 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Uvexid
[2012/02/29 20:40:10 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Uzdoym
[2012/05/21 07:33:06 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Vagi
[2012/02/29 20:30:05 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Vuvo
[2012/08/25 17:13:04 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\WildTangent
[2012/02/29 20:09:55 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Wily
[2012/02/17 20:46:05 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Wouqh
[2012/02/29 19:59:49 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Xinypi
[2012/09/08 01:45:43 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\xmldm
[2012/05/15 07:24:52 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Yfomig
[2012/05/18 09:48:36 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Yhxuh
[2012/03/21 19:28:32 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ylib
[2012/02/29 19:29:33 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Yqfa
[2012/05/18 09:48:36 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ytgoh
[2012/05/29 06:05:33 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Yxutc
[2012/02/29 19:59:49 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Zeaqb
[2012/02/29 19:59:49 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Zeyvyx
[2012/05/29 06:05:33 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Zuraut
[2012/08/05 17:45:44 | 000,032,632 | ---- | M] () -- C:\windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >
         
--- --- ---
__________________

Alt 12.09.2012, 09:45   #4
SvenK
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft



Die Extras wollte er nicht mitnehmen

Hier noch die ExtraOTL EXTRAS Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 9/12/2012 9:21:22 AM - Run 1
OTL by OldTimer - Version 3.2.61.3     Folder = C:\Users\Sven\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7.91 Gb Total Physical Memory | 6.82 Gb Available Physical Memory | 86.23% Memory free
15.82 Gb Paging File | 14.76 Gb Available in Paging File | 93.28% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 230.00 Gb Total Space | 106.57 Gb Free Space | 46.34% Space Free | Partition Type: NTFS
Drive D: | 343.41 Gb Total Space | 315.61 Gb Free Space | 91.91% Space Free | Partition Type: NTFS
Drive E: | 336.68 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive F: | 3.76 Gb Total Space | 3.20 Gb Free Space | 85.18% Space Free | Partition Type: FAT32
 
Computer Name: **** | User Name: **** | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0BBD7962-AF7E-4A1D-8CFA-2972E01AC42C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{1644E397-863A-4AA2-ABC5-86F486D5752D}" = rport=138 | protocol=17 | dir=out | app=system | 
"{16C8E120-D866-44A8-B0C0-AE6933F85787}" = rport=139 | protocol=6 | dir=out | app=system | 
"{1F359B1F-1DB0-42B3-B8DA-82A1B7722390}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{31262D21-7305-4B5F-AC09-E06F0B715DC0}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{408FB8BB-BA31-4B74-90E9-4172E7D061FC}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{43CAAE23-DE5C-4634-944B-CE026F430A78}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{4BA6F4DD-4A75-42B0-A06B-E72F3367A332}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{533A7D08-9B62-4837-ABC3-43FFD966CE44}" = lport=137 | protocol=17 | dir=in | app=system | 
"{60FC7B97-0478-4894-B468-8397EABB1295}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{6852951F-C6E5-4508-9C3E-834194413ED2}" = lport=139 | protocol=6 | dir=in | app=system | 
"{6F19E15C-1405-4935-B979-05ABB128249D}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{78ACBAA9-7162-4710-8E44-E35391029AAC}" = lport=138 | protocol=17 | dir=in | app=system | 
"{7AC0A53C-E1D6-412C-885A-F5B057D401D5}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{9236F596-C724-467A-AC50-DE3E0C26A377}" = lport=445 | protocol=6 | dir=in | app=system | 
"{9D9A98EA-33CE-4072-8A5A-E8DF8E80B5CB}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{AAE19A23-56F6-4759-A720-A072AD8DA9E6}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{AB9D47C7-DA52-4940-9B3F-2F0213F0BFF0}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{BD6EE134-B7DF-48CA-BB3A-E6F913348EA5}" = rport=137 | protocol=17 | dir=out | app=system | 
"{D1AC7F2B-3CAB-40D0-BB63-841A778818E5}" = rport=445 | protocol=6 | dir=out | app=system | 
"{D214CE66-E9E5-4FF2-96B6-5DEC6F7BE6C8}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{E0720B51-6E88-4DBA-97BC-46E6AB2AB0CA}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{EF192547-EA27-4917-BC54-F9838AB83E4C}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{007246D7-31BA-45E0-AE2D-A9532557F00B}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{00AED4C5-F862-4931-88AA-6603AC6F597D}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{02FB5898-08B5-4F02-AA12-7A8EE3B126DC}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{09071670-D8C0-49AD-AFD7-4E40A3D49284}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{0C08350E-5613-4E0F-848E-F11BBB20B9DD}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{11398CE5-E3DE-49D9-9BB1-6C3947ECE9A9}" = protocol=6 | dir=in | app=c:\nexon\vindictus\en-us\nmservice.exe | 
"{14D2E43F-8CB7-49EB-8FA6-7D190CB7A7AD}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\samsung universal scan driver\iccupdater.exe | 
"{1B499585-614F-47A8-87B7-6DC8D5C2F8C3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{20791422-F8CB-4F43-9512-5366D4A7FCC8}" = protocol=6 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe | 
"{22FC8870-6958-4F22-9DCB-02B47191A76E}" = protocol=6 | dir=in | app=c:\users\sven\appdata\local\temp\dsoclient\dlcache\app.n3app | 
"{3248F1F1-7A9F-457E-B47F-E955BAD06324}" = protocol=17 | dir=in | app=c:\nexon\combat arms eu\nmservice.exe | 
"{34F1E861-34F8-4FA8-A203-5D02BC131031}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{39FC6378-6BD1-4D7B-A8DD-F6CCF97C56AB}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe | 
"{4BF1537E-F4EA-40BE-86FA-7FAC5DE40D63}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | 
"{52A16A12-5597-4C99-A961-6EC284181B04}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{58306080-2EEA-4D8C-AFEA-E75F242A7676}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{620421FD-19A1-440C-8369-6A1775CD6B10}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe | 
"{628C7CB0-802B-43EE-861E-0D6CF78028C3}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{6B106F9F-B366-49F0-85BD-9638ABDD3167}" = protocol=17 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe | 
"{73C088DE-832E-4A66-8C7C-B007127CD02C}" = protocol=17 | dir=in | app=c:\nexon\vindictus\en-us\nmservice.exe | 
"{755574E5-CFA4-49C2-ADD0-77426A67BCBD}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{775D6631-409A-4C1D-9B3D-C8D434EAF3A3}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe | 
"{7E9CC218-3CB0-4BA9-86BB-7B13091DFC8B}" = protocol=6 | dir=out | app=system | 
"{840C3685-4E4B-445C-BDA1-ED4F94CDE0A5}" = protocol=6 | dir=in | app=c:\windows\system32\supdsvc.exe | 
"{8515E6C5-5517-44B9-BD36-2EEAA9CF5678}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{86E82A95-31D4-4EFC-90D1-0DF06F0B0D2B}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{878869A1-CCFD-4FC0-BC83-997626CACE04}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\samsung universal scan driver\usdagent.exe | 
"{8FCD5B57-E4F7-4198-964E-D62B6BE09975}" = protocol=17 | dir=in | app=c:\users\sven\appdata\local\temp\dsoclient\dlcache\app.n3app | 
"{9DAF8D96-1190-4290-A101-F5FA967F59D1}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{A089324C-3BC5-4986-94C3-6A7EAEBFF65F}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{AA1A25CA-6242-4B46-8111-F8912A689503}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{AF475CAC-8444-4B92-B3C8-B2A1A097C109}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\samsung universal scan driver\usdagent.exe | 
"{B814D340-446A-401F-AB39-27C0D704B7F1}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{BDB38178-BF33-457F-A795-556FBC8735D1}" = protocol=17 | dir=in | app=c:\windows\system32\supdsvc.exe | 
"{C55AD6C2-B43A-472B-BD68-2A3CF5D8CC58}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{CBAA696F-15B5-4466-890B-E9E860911A11}" = protocol=6 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe | 
"{CC1A6000-FD09-49CE-8455-FF9C64BAB5DF}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe | 
"{D4016FE6-751C-457E-B803-73526454EEEA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{D595F6F8-C7EF-48DA-A426-82E45DD5A084}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd10\powerdvd9.exe | 
"{D5C7581B-98C6-41EC-B09A-917F139642F0}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{DFEA2439-5C9D-4F3F-B585-E21B46384779}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{E274F8E9-0178-445F-85FD-A3AF3977CE30}" = protocol=17 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe | 
"{E3791715-B065-4FC0-8DB3-E647773B94F8}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\samsung universal scan driver\iccupdater.exe | 
"{EDACF116-4E41-4933-9994-6B6ED9D787C7}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector\pdr8.exe | 
"{F3A63BDB-FF1B-412E-8E40-DEA8581D5369}" = protocol=6 | dir=in | app=c:\nexon\combat arms eu\nmservice.exe | 
"{F5163597-F70F-4DB8-973C-5671DA120EDF}" = protocol=17 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe | 
"{F59151EB-6D18-498A-B91B-1F0EB47827A4}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{FA3AF611-9DA0-47E8-AA1D-CBC909F829C6}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe | 
"{FB2E446A-F9F4-4EEC-8249-00B095FBF473}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{FC55BF59-C81D-4559-8357-EAFE0FE99198}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | 
"{FE0C3C0F-941A-4FF6-8783-A3510E1C7771}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{FF75AE40-2A64-49B4-A22E-A33F047640E0}" = protocol=6 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe | 
"TCP Query User{53579848-346C-489C-8D58-9B2F74DFD6C2}C:\users\sven\appdata\roaming\wouqh\nyzym.exe" = protocol=6 | dir=in | app=c:\users\sven\appdata\roaming\wouqh\nyzym.exe | 
"TCP Query User{606FC957-3C76-4CD5-A57E-C25DA65847A9}C:\users\sven\appdata\roaming\overyn\ukzeup.exe" = protocol=6 | dir=in | app=c:\users\sven\appdata\roaming\overyn\ukzeup.exe | 
"TCP Query User{7611CC06-3600-4250-9BEB-B218A93E85E2}C:\users\sven\appdata\roaming\overyn\ukzeup.exe" = protocol=6 | dir=in | app=c:\users\sven\appdata\roaming\overyn\ukzeup.exe | 
"TCP Query User{B0352A48-D3A0-43C3-9B76-32A88BDA77B0}C:\nexon\vindictus\en-us\vindictus.exe" = protocol=6 | dir=in | app=c:\nexon\vindictus\en-us\vindictus.exe | 
"TCP Query User{B03A3FF3-0425-4C72-BDB2-08073F0F1E55}C:\users\sven\appdata\roaming\wouqh\nyzym.exe" = protocol=6 | dir=in | app=c:\users\sven\appdata\roaming\wouqh\nyzym.exe | 
"TCP Query User{D441C019-8ACB-49A6-94EB-3FFE630FAE03}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=6 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe | 
"TCP Query User{EBD6C08D-0834-48F0-B039-98D03AECE524}C:\nexon\combat arms eu\engine.exe" = protocol=6 | dir=in | app=c:\nexon\combat arms eu\engine.exe | 
"TCP Query User{EFF4CB3B-34A2-4847-B973-57FA3D030BC1}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=6 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe | 
"TCP Query User{F3D186F2-6F0D-485D-BFF5-E3A2C124007A}C:\users\sven\appdata\local\microsoft\windows\temporary internet files\content.ie5\9ub1e7z7\gunblade-dlm.exe" = protocol=6 | dir=in | app=c:\users\sven\appdata\local\microsoft\windows\temporary internet files\content.ie5\9ub1e7z7\gunblade-dlm.exe | 
"UDP Query User{1129C5ED-DC42-4AFE-9A3A-2CF3CC5E20A0}C:\users\sven\appdata\local\microsoft\windows\temporary internet files\content.ie5\9ub1e7z7\gunblade-dlm.exe" = protocol=17 | dir=in | app=c:\users\sven\appdata\local\microsoft\windows\temporary internet files\content.ie5\9ub1e7z7\gunblade-dlm.exe | 
"UDP Query User{17AFA276-8066-4BAD-B9FE-51D755D1EA05}C:\users\sven\appdata\roaming\overyn\ukzeup.exe" = protocol=17 | dir=in | app=c:\users\sven\appdata\roaming\overyn\ukzeup.exe | 
"UDP Query User{4C3563D3-0816-4E21-B087-BC43FFD01C6F}C:\nexon\vindictus\en-us\vindictus.exe" = protocol=17 | dir=in | app=c:\nexon\vindictus\en-us\vindictus.exe | 
"UDP Query User{646A1F60-DB02-4E0D-B0E2-73055A22560F}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=17 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe | 
"UDP Query User{880BED04-4102-404C-ACD4-28BFFEBAB58D}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=17 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe | 
"UDP Query User{9C2D20AE-1C00-4933-AE6D-C94A62F70438}C:\users\sven\appdata\roaming\overyn\ukzeup.exe" = protocol=17 | dir=in | app=c:\users\sven\appdata\roaming\overyn\ukzeup.exe | 
"UDP Query User{E874128D-DE68-4F56-A978-C37E0ED5F829}C:\users\sven\appdata\roaming\wouqh\nyzym.exe" = protocol=17 | dir=in | app=c:\users\sven\appdata\roaming\wouqh\nyzym.exe | 
"UDP Query User{ECA4A891-4AEC-4059-9DAA-F5EABE80BA51}C:\nexon\combat arms eu\engine.exe" = protocol=17 | dir=in | app=c:\nexon\combat arms eu\engine.exe | 
"UDP Query User{EFF8C38A-D7A2-43E9-86A1-A3280E96B800}C:\users\sven\appdata\roaming\wouqh\nyzym.exe" = protocol=17 | dir=in | app=c:\users\sven\appdata\roaming\wouqh\nyzym.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{02A5BD31-16AC-45DF-BE9F-A3167BC4AFB2}" = Windows Live Family Safety
"{02E5BCCA-317C-418F-9E06-42526E050829}" = Windows Live Family Safety
"{0919C44F-F18A-4E3B-A737-03685272CE72}" = Windows Live Remote Service Resources
"{0D87AE67-14EB-4C10-88A5-DA6C3181EB18}" = Windows Live Family Safety
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1685AE50-97ED-485B-80F6-145071EE14B0}" = Windows Live Remote Service Resources
"{17A4FD95-A507-43F1-BC92-D8572AF8340A}" = Windows Live Remote Service Resources
"{19F09425-3C20-4730-9E2A-FC2E17C9F362}" = Windows Live Remote Service Resources
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{1BF5ECDD-47AC-411B-9BC5-96F01346CD7C}" = Windows Live Family Safety
"{1D2596F8-5EDD-4F8A-BA88-734E5549DD72}" = Windows Live Family Safety
"{1EB2CFC3-E1C5-4FC4-B1F8-549DD6242C67}" = Windows Live Remote Service Resources
"{206BD2C5-DE08-4577-A0D7-D441A79D5A3A}" = Windows Live Remote Client Resources
"{2128559D-BBCD-4744-87F0-7C0CD5CFB464}" = Windows Live Family Safety
"{22AB5CFD-B3DB-414E-9F99-4D024CCF1DA6}" = Windows Live Remote Client Resources
"{2426E29F-9E8C-4C0B-97FC-0DB690C1ED98}" = Windows Live Remote Client Resources
"{24A534BC-AC8B-44A8-A417-135F28F8E9EE}" = Windows Live Family Safety
"{27B3E5AA-5B75-414A-AC37-F5ADDFA68BDB}" = Windows Live Family Safety
"{27F3F8DE-AC95-4E10-90A6-EBA999DDBCAF}" = Windows Live Remote Service Resources
"{287134AD-092F-4BD0-A6F4-911B0B351E87}" = Windows Live Family Safety
"{2998191E-A35E-47E2-BE38-7702C731D722}" = SRS Premium Sound Control Panel
"{29CFD07F-4971-41B0-B14D-621ACCC264AC}" = Windows Live Remote Service Resources
"{2C1A6191-9804-4FDC-AB01-6F9183C91A13}" = Windows Live Remote Client Resources
"{2F304EF4-0C31-47F4-8557-0641AAE4197C}" = Windows Live Remote Client Resources
"{34384A2A-2CA2-4446-AB0E-1F360BA2AAC5}" = Windows Live Remote Service Resources
"{350FD0E7-175A-4F86-84EF-05B77FCD7161}" = Windows Live Remote Service Resources
"{3921492E-82D2-4180-8124-E347AD2F2DB4}" = Windows Live Remote Client Resources
"{3F2A8756-C008-43D7-8E1D-7300AA394549}" = Windows Live Family Safety
"{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}" = WIDCOMM Bluetooth Software
"{456FB9B5-AFBC-4761-BBDC-BA6BAFBB818F}" = Windows Live Remote Client Resources
"{464F7B5E-80BB-4F34-A602-384F0702674A}" = Windows Live Family Safety
"{46CCB0D4-A98F-4009-B5A5-DE38A667D068}" = Windows Live Family Safety
"{480F28F0-8BCE-404A-A52E-0DBB7D1CE2EF}" = Windows Live Remote Service Resources
"{48491B19-3759-428B-9560-7AE4697B8FFF}" = Windows Live Family Safety
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4BB3027E-7ABE-43EA-BA1B-9521EF69B530}" = Windows Live Family Safety
"{4C2E49C0-9276-4324-841D-774CCCE5DB48}" = Windows Live Remote Client Resources
"{4C9845D5-9FAD-4C52-B389-CAEF0F216215}" = Windows Live Remote Client Resources
"{5141AA6E-5FAC-4473-BFFB-BEE69DDC7F2B}" = Windows Live Remote Service Resources
"{5151E2DB-0748-4FD1-86A2-72E2F94F8BE7}" = Windows Live Remote Service Resources
"{57F2BD1C-14A3-4785-8E48-2075B96EB2DF}" = Windows Live Remote Service Resources
"{5E2CD4FB-4538-4831-8176-05D653C3E6D4}" = Windows Live Remote Service Resources
"{5ECA80C9-7D7A-49AC-B487-52F1CF47ECEE}" = Windows Live Family Safety
"{5F44A3A1-5D24-4708-8776-66B42B174C64}" = Windows Live Remote Client Resources
"{5FCD6EFE-C2E7-4D77-8212-4BA223D8DF8E}" = Windows Live Remote Client Resources
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{5FEAD3E5-A158-4B66-B92B-0C959D7CF838}" = Windows Live Remote Service Resources
"{61407251-7F7D-4303-810D-226A04D5CFF3}" = Windows Live Remote Service Resources
"{641B32DB-8226-4250-86C9-34671162F5D5}" = Windows Live Remote Client Resources
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{692CCE55-9EAE-4F57-A834-092882E7FE0B}" = Windows Live Remote Client Resources
"{698EAE05-09DE-47D0-9586-29E41A0934DD}" = Windows Live Family Safety
"{6A2482BC-733A-404A-939A-2D5BC636E6F9}" = Windows Live Remote Service Resources
"{6C9D3F1D-DBBE-46F9-96A0-726CC72935AF}" = Windows Live Remote Service Resources
"{6CBFDC3C-CF21-4C02-A6DC-A5A2707FAF55}" = Windows Live Remote Service Resources
"{74AC7ECE-87E1-41F7-ABA2-5ED9B13CECFA}" = Windows Live Family Safety
"{78654366-5889-4A70-90D9-04B00709EEE0}" = Windows Live Remote Client Resources
"{7AD6F7FC-9C8A-4413-860C-E0668B7A8E15}" = Windows Live Family Safety
"{7AEC844D-448A-455E-A34E-E1032196BBCD}" = Windows Live Remote Service Resources
"{811D5159-D798-491F-B9C6-9BDBF6B02D06}" = Windows Live Remote Service Resources
"{825C7D3F-D0B3-49D5-A42B-CBB0FBE85E99}" = Windows Live Remote Client Resources
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{850B8072-2EA7-4EDC-B930-7FE569495E76}" = Windows Live Remote Client Resources
"{8832CAA2-4934-4916-A8BF-A9A51C6B58B3}" = Windows Live Family Safety
"{8970AE69-40BE-4058-9916-0ACB1B974A3D}" = Windows Live Remote Client Resources
"{8EB588BD-D398-40D0-ADF7-BE1CEEF7C116}" = Windows Live Remote Client Resources
"{944E73EF-857E-4F71-9DC4-CD059D7ADDEF}" = Windows Live Family Safety
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{97A295A7-8840-4B35-BB61-27A8F4512CA3}" = Windows Live Remote Service Resources
"{9E9C960F-7F47-46D5-A95D-950B354DE2B8}" = Windows Live Remote Service Resources
"{A060182D-CDBE-4AD6-B9B4-860B435D6CBD}" = Windows Live Remote Client Resources
"{A0CC1C12-528A-42A3-B9A3-10C4F9E65C9E}" = Windows Live Family Safety
"{A508D5A2-3AC1-4594-A718-A663D6D3CF11}" = Windows Live Remote Service Resources
"{A679FBE4-BA2D-4514-8834-030982C8B31A}" = Windows Live Remote Service Resources
"{A986CF32-C1C2-4B53-91AD-78EE027875C7}" = Windows Live Family Safety
"{AAE97E7E-B3A6-42BA-ADA5-04A0E6FD7224}" = Windows Live Family Safety
"{AE91E0F3-C49A-4EF4-8B98-A07BD409EB90}" = Windows Live Remote Service Resources
"{B0BF8602-EA52-4B0A-A2BD-EDABB0977030}" = Windows Live Remote Client Resources
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Display Control Panel
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 266.72
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.0.15
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B680A663-1A15-47A5-A07C-7DF9A97558B7}" = Windows Live Remote Client Resources
"{B750FA38-7AB0-42CB-ACBB-E7DBE9FF603F}" = Windows Live Remote Client Resources
"{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}" = Überwachungstool für die Intel® Turbo-Boost-Technik 2.0
"{BFBE6E95-5724-47EC-85A0-74D436AD938F}" = Windows Live Family Safety
"{C504EC13-E122-4939-BD6E-EE5A3BAA5FEC}" = Windows Live Remote Client Resources
"{C61D639C-3A1B-4654-901F-08927C804321}" = Windows Live Family Safety
"{C9F05151-95A9-4B9B-B534-1760E2D014A5}" = Windows Live Remote Client Resources
"{CE6D49CE-ED18-47E1-8449-037BC7181450}" = Windows Live Family Safety
"{CFF3C688-2198-4BC3-A399-598226949C39}" = Windows Live Remote Client Resources
"{D0C56275-9E7F-4BE5-AB37-15124BF808F2}" = Windows Live Family Safety
"{D1C1556C-7FF3-48A3-A5D6-7126F0FAFB66}" = Windows Live Remote Client Resources
"{D3E4F422-7E0F-49C7-8B00-F42490D7A385}" = Windows Live Remote Service Resources
"{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources
"{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319
"{DBEDAF67-C5A3-4C91-951D-31F3FE63AF3F}" = Windows Live Remote Client Resources
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{E3525BFB-1C0B-4022-98EE-824E3757E83F}" = Windows Live Family Safety
"{E892324D-9386-4105-806C-5550304CE519}" = Windows Live Family Safety
"{ED421F97-E1C3-4E78-9F54-A53888215D58}" = Windows Live Remote Client Resources
"{EE312BFB-B096-4613-8888-4023064B62D2}" = Windows Live Family Safety
"{EFB20CF5-1A6D-41F3-8895-223346CE6291}" = Windows Live Remote Service Resources
"{F0793412-6407-4870-9A8C-6FE198A4EB12}" = Windows Live Remote Client Resources
"{F20B6800-68D7-48DB-A2EB-26BB7BFD1F77}" = Windows Live Family Safety
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F6CB2C5F-B2C1-4DF1-BF44-39D0DC06FE6F}" = Windows Live Remote Service Resources
"{F71F4E15-C711-4010-B1BD-74EE2618B86F}" = Windows Live Family Safety
"{FAA3933C-6F0D-4350-B66B-9D7F7031343E}" = Windows Live Remote Service Resources
"{FAD0EC0B-753B-4A97-AD34-32AC1EC8DB69}" = Windows Live Remote Client Resources
"{FD41A335-9425-44CB-B1D6-E657C52F7DC6}" = Windows Live Family Safety
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"Broadcom 802.11 Network Adapter" = Broadcom 802.11 Network Adapter
"Elantech" = ETDWare PS/2-X64 8.0.7.1_WHQL
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{000F2A10-9CDF-47BF-9CF2-9AC87567B433}" = Windows Live Photo Common
"{00884F14-05BD-4D8E-90E5-1ABF78948CA4}" = Windows Live Mesh
"{0119B342-476F-4F5A-B712-144B5CFA781F}" = Windows Live Movie Maker
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{03241D8D-2217-42F7-9FCB-6A68D141C14D}" = Windows Live 软件包
"{039480EE-6933-4845-88B8-77FD0C3D059D}" = Windows Live Mesh
"{04668DF2-D32F-4555-9C7E-35523DCD6544}" = Control ActiveX de Windows Live Mesh para conexiones remotas
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack
"{062E4D94-8306-46D5-81B6-45E6AD09C799}" = Windows Live Messenger
"{0654EA5D-308A-4196-882B-5C09744A5D81}" = Windows Live Photo Common
"{066219C8-4BE6-46D7-9E01-60FCFA6B32DC}" = Messenger Companion
"{073F306D-9851-4969-B828-7B6444D07D55}" = Windows Live Photo Common
"{07E15DDE-CAD9-434D-B24D-35708E3BEA09}" = Windows Live 필수 패키지
"{082E37F5-3924-4168-A69A-1B6B1FEA587C}" = Messenger Companion
"{09922FFE-D153-44AE-8B60-EA3CB8088F93}" = Windows Live UX Platform Language Pack
"{09B7C7EB-3140-4B5E-842F-9C79A7137139}" = Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger
"{0A4C4B29-5A9D-4910-A13C-B920D5758744}" = بريد Windows Live
"{0AC07A77-0511-4904-9FA1-616DC9BEF50D}" = Gunblade Saga
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0C1931EB-8339-4837-8BEC-75029BF42734}" = Windows Live UX Platform Language Pack
"{0C975FCC-A06E-4CB6-8F54-A9B52CF37781}" = Windows Liven sähköposti
"{0D261C88-454B-46FE-B43B-640E621BDA11}" = Windows Live Mail
"{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation(R)Store
"{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}" = Galeria de Fotografias do Windows Live
"{0F895695-33CC-4203-9C47-25EF2AC9441C}" = Media Go
"{10186F1A-6A14-43DF-A404-F0105D09BB07}" = Windows Live Mail
"{110668B7-54C6-47C9-BAC4-1CE77F156AF5}" = Windows Live Mesh
"{11417707-1F72-4279-95A3-01E0B898BBF5}" = Windows Live Mesh
"{11778DA1-0495-4ED9-972F-F9E0B0367CD5}" = Windows Live Writer
"{1203DC60-D9BD-44F9-B372-2B8F227E6094}" = Windows Live Temel Parçalar
"{122800FE-3AAF-4974-9FBD-54B023FA756A}" = „Windows Live Messenger“
"{128133D3-037A-4C62-B1B7-55666A10587A}" = Windows Live UX Platform Language Pack
"{133D9D67-D475-4407-AC3C-D558087B2453}" = Windows Live Movie Maker
"{139C1D95-9037-3AB3-F5F4-4A79BF6831EC}" = WordCaptureX Pro
"{142D8CA7-2C6F-45A7-83E3-099AAFD99133}" = Samsung Update Plus
"{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}" = Samsung Recovery Solution 5
"{14B441B7-774D-4170-98EA-A13667AE6218}" = Windows Live Writer Resources
"{168E7302-890A-4138-9109-A225ACAF7AD1}" = Windows Live Photo Common
"{17283B95-21A8-4996-97DA-547A48DB266F}" = Easy Display Manager
"{17835B63-8308-427F-8CF5-D76E0D5FE457}" = Windows Live Essentials
"{17F99FCE-8F03-4439-860A-25C5A5434E18}" = Windows Live Essentials
"{198EA334-8A3F-4CB2-9D61-6C10B8168A6F}" = Windows Live Writer
"{19ADD3BF-C42B-47DC-81C6-5E9731B668C4}" = „Windows Live Essentials“
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{19CBDE24-2761-49A5-816B-D2BA65D0CA8D}" = Kontrola Windows Live Mesh ActiveX za daljinske veze
"{1A72337E-D126-4BAF-AC89-E6122DB71866}" = Windows Liven valokuvavalikoima
"{1A82AE99-84D3-486D-BAD6-675982603E14}" = Windows Live Writer
"{1BA1DBDC-5431-46FD-A66F-A17EB1C439EE}" = Windows Live Messenger
"{1D108D70-E7D1-4089-9A0A-99629C4D0CB8}" = Morrowind
"{1D6C2068-807F-4B76-A0C2-62ED05656593}" = Windows Live Writer
"{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}" = Bing Bar
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink Media Suite
"{1FC83EAE-74C8-4C72-8400-2D8E40A017DE}" = Windows Live Writer
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{220C7F8C-929D-4F71-9DC7-F7A6823B38E4}" = Windows Live UX Platform Language Pack
"{241E7104-937A-4366-AD57-8FDDDB003939}" = Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi
"{249EE21B-8EDD-4F36-8A23-E580E9DBE80A}" = Windows Live Mail
"{24DF33E0-F924-4D0D-9B96-11F28F0D602D}" = Windows Live UX Platform Language Pack
"{2511AAD7-82DF-4B97-B0B3-E1B933317010}" = Windows Live Writer Resources
"{25A381E1-0AB9-4E7A-ACCE-BA49D519CF4E}" = Windows Live Mail
"{25CD4B12-8CC5-433E-B723-C9CB41FA8C5A}" = Windows Live Writer
"{260E3D78-94E6-47EC-8E29-46301572BB1E}" = Control ActiveX Windows Live Mesh pentru conexiuni la distanță
"{26E3C07C-7FF7-4362-9E99-9E49E383CF16}" = Windows Live Writer Resources
"{2720009D-9566-45A7-A370-0E6DAC313F3F}" = „Windows Live Mail“
"{289AC7E0-0AEE-4a7b-913C-709D9803D23E}" = Nexon Game Manager
"{28B9D2D8-4304-483F-AD71-51890A063A74}" = Windows Live Photo Common
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{29373E24-AC72-424E-8F2A-FB0F9436F21F}" = Windows Live Photo Common
"{2A07C35B-8384-4DA4-9A95-442B6C89A073}" = Windows Live Essentials
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{2BA5FD10-653F-4CAF-9CCD-F685082A1DC1}" = Windows Live Writer
"{2C4E06CC-1F04-4C25-8B3C-93A9049EC42C}" = Windows Live UX Platform Language Pack
"{2C865FB0-051E-4D22-AC62-428E035AEAF0}" = Windows Live Mesh
"{2CC0789D-D31B-445F-8970-6E058BE39754}" = Windows Live UX Platform Language Pack
"{2D3E034E-F76B-410A-A169-55755D2637BB}" = Windows Live Mesh
"{2D49C296-BCCA-4800-BAF6-A0269EBDCF74}" = Windows Live Messenger
"{2DDC70C1-C77A-4D08-89D2-9AB648504533}" = Easy Content Share
"{2E50E321-4747-4EB5-9ECB-BBC6C3AC0F31}" = Windows Live Writer Resources
"{2F54E453-8C93-4B3B-936A-233C909E6CAC}" = Windows Live Messenger
"{3125D9DE-8D7A-4987-95F3-8A42389833D8}" = Windows Live Writer Resources
"{317D56AC-0DB3-48F5-929A-42032DAC9AD7}" = Windows Live Writer
"{318DBE01-1E6B-4243-84B0-210391FE789A}" = Samsung AnyWeb Print
"{331ECF61-69AF-4F57-AC35-AFED610231C3}" = Multimedia POP
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{368BEC2C-B7A2-4762-9213-2D8465D533CA}" = Windows Live UX Platform Language Pack
"{3705D53F-BB01-4BEE-8585-289E71CAC4B4}" = Компаньон Messenger
"{370F888E-42A7-4911-9E34-7D74632E17EB}" = Windows Live Photo Common
"{376D59B1-42D9-4FA2-B6CC-E346B6BE14F5}" = ActiveX-kontroll för fjärranslutningar för Windows Live Mesh
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{3889988F-762B-4B85-AB17-71C9CC3AE445}" = Messenger Companion
"{39B3184E-0BFB-40FA-ADDC-E7E2D535CDA9}" = Controle ActiveX do Windows Live Mesh para Conexões Remotas
"{39F95B0B-A0B7-4FA7-BB6C-197DA2546468}" = Windows Live Mesh
"{3A09ED0F-8DDF-47BB-B53D-841AB9D1D3A7}" = Complemento Messenger
"{3B72C1E0-26A1-40F6-8516-D50C651DFB3C}" = Windows Live Essentials
"{3B8F240C-B75E-4A1E-BDCC-6C7F033078A3}" = Windows Live UX Platform Language Pack
"{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{3F4143A1-9C21-4011-8679-3BC1014C6886}" = Windows Live Mesh
"{3F50512F-53DF-46B1-8CCB-6C7E638CADD6}" = PhoneShare
"{3FD1CB9F-807F-451B-926C-9D19C84CFC61}" = Messenger Suradnik
"{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}" = Norton Online Backup
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{40BFD84C-64CD-42CC-9909-8734C50429C6}" = Windows Live UX Platform Language Pack
"{410DF0AA-882D-450D-9E1B-F5397ACFFA80}" = Windows Live Essentials
"{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
"{429DF1A0-3610-4E9E-8ACE-3C8AC1BA8FCA}" = Windows Live Photo Gallery
"{43B43577-2514-4CE0-B14A-7E85C17C0453}" = Windows Live Essentials
"{442032CB-900C-49C7-B4B4-2B76525DD403}" = Windows Live Photo Common
"{443B561F-DE1B-4DEF-ADD9-484B684653C7}" = Windows Live Messenger
"{4444F27C-B1A8-464E-9486-4C37BAB39A09}" = Фотогалерия на Windows Live
"{458F399F-62AC-4747-99F5-499BBF073D29}" = Windows Live Writer Resources
"{4664ED39-C80A-48F7-93CD-EBDCAFAB6CC5}" = Windows Live Writer Resources
"{46872828-6453-4138-BE1C-CE35FBF67978}" = Windows Live Mesh
"{48294D95-EE9A-4377-8213-44FC4265FB27}" = Windows Live Messenger
"{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
"{48C0DC5E-820A-44F2-890E-29B68EDD3C78}" = Windows Live Writer
"{4A04DB63-8F81-4EF4-9D09-61A2057EF419}" = Windows Live Essentials
"{4A331D24-A9E8-484F-835E-1BA7B139689C}" = EasyBatteryManager
"{4B28D47A-5FF0-45F8-8745-11DC2A1C9D0F}" = Windows Live Writer
"{4B744C85-DBB1-4038-B989-4721EB22C582}" = Windows Live Messenger
"{4C378B16-46B7-4DA1-A2CE-2EE676F74680}" = Windows Live UX Platform Language Pack
"{4CF6F287-5121-483C-A5A2-07BDE19D8B4E}" = Windows Live Meshin etäyhteyksien ActiveX-komponentti
"{4D141929-141B-4605-95D6-2B8650C1C6DA}" = Windows Live UX Platform Language Pack
"{4D83F339-5A5C-4B21-8FD3-5D407B981E72}" = Windows Live Photo Common
"{4F35DF91-F834-41F7-A287-0E377D55C486}" = Windows Live Photo Common
"{506FC723-8E6C-4417-9CFF-351F99130425}" = Windows Live UX Platform Language Pack
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{517EAAB9-C35E-4949-B8C2-20C241162BBB}" = Windows Live Pošta
"{51FFAC89-B6B0-4E6E-B76F-6D4E2E83086A}" = Windows Live 메일
"{523DF2BB-3A85-4047-9898-29DC8AEB7E69}" = Windows Live UX Platform Language Pack
"{5275D81E-83AD-4DE4-BC2B-6E6BA3A33244}" = Windows Live Writer Resources
"{542DA303-FB91-4731-9F37-6E518368D3B9}" = Windows Live Messenger
"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"{545192D4-E817-4EAA-834D-623EA50CF268}" = Windows Live UX Platform Language Pack
"{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance
"{56D42B00-572C-4AE9-BCFB-CD45A3B5D0E1}" = Messenger Assistent
"{57220148-3B2B-412A-A2E0-82B9DF423696}" = Windows Live Mesh ActiveX-objekt til fjernforbindelser
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{588CE0C0-860B-49A8-AFCF-3C69465B345F}" = Windows Live Mesh
"{58D68DF0-4E8B-4E9E-B425-670F9E37C1A8}" = TES Construction Set
"{5C2F5C1B-9732-4F81-8FBF-6711627DC508}" = Windows Live Fotogalleri
"{5CF5B1A5-CBC3-42F0-8533-5A5090665862}" = Windows Live Mesh
"{5D163056-96B7-440F-A836-89BA5D3CFF2F}" = Windows Live Photo Common
"{5D273F60-0525-48BA-A5FB-D0CAA4A952AE}" = Windows Live Movie Maker
"{5D2E7BD7-4B6F-4086-BA8A-E88484750624}" = Windows Live Writer Resources
"{5DA7D148-D2D2-4C67-8444-2F0F9BD88A06}" = Windows Live Writer
"{5E627606-53B9-42D1-97E1-D03F6229E248}" = Windows Live UX Platform Language Pack
"{60C3C026-DB53-4DAB-8B97-7C1241F9A847}" = Windows Live Movie Maker
"{61506B53-EE02-46CE-8464-3F806947978F}" = Windows Live Mesh
"{61920449-0393-4707-B7DD-E6C0013C8B2C}" = 원격 연결을 위한 Windows Live Mesh ActiveX 컨트롤
"{622DE1BE-9EDE-49D3-B349-29D64760342A}" = 適用遠端連線的 Windows Live Mesh ActiveX 控制項
"{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
"{63CF7D0C-B6E7-4EE9-8253-816B613CC437}" = Windows Live Mail
"{640798A0-A4FB-4C52-AC72-755134767F1E}" = Windows Live Movie Maker
"{64376910-1860-4CEF-8B34-AA5D205FC5F1}" = Poczta usługi Windows Live
"{644063FA-ABA3-42AC-A8AC-3EDC0706018B}" = Windows Live Mesh
"{6491AB99-A11E-41FD-A5E7-32DE8A097B8E}" = Windows Live Essentials
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{677AAD91-1790-4FC5-B285-0E6A9D65F7DC}" = Windows Live Mail
"{6807427D-8D68-4D30-AF5B-0B38F8F948C8}" = Windows Live Writer Resources
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69C9C672-400A-43A0-B2DE-9DB38C371282}" = Windows Live Writer
"{69CAC24D-B1DC-4B97-A1BE-FE21843108FE}" = Windows Live Writer Resources
"{6A4ABCDC-0A49-4132-944E-01FBCCB3465C}" = Windows Live UX Platform Language Pack
"{6A67578E-095B-4661-88F7-0B199CEC3371}" = Windows Live Messenger
"{6A9EF6CF-7630-4E33-AE22-7D70F3AF4B05}" = AION Free-To-Play
"{6ABE832B-A5C7-44C1-B697-3E123B7B4D5B}" = Windows Live Mesh
"{6B3BAE39-4ED1-4EEB-9769-A3AA0AA58CB4}" = Windows Live Movie Maker
"{6B556C37-8919-4991-AC34-93D018B9EA49}" = Windows Live Photo Common
"{6CB36609-E3A6-446C-A3C1-C71E311D2B9C}" = Windows Live Movie Maker
"{6D2F0A26-ECEA-49CE-833C-9A6125F3D5E8}" = Doplnok programu Messenger
"{6DCE9C3E-3DB7-4C3C-8B80-BC55781BB7B6}" = Windows Live Writer Resources
"{6DD3B54B-F0D0-4A69-8344-F52033225A02}" = Messenger Companion
"{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
"{6E29C4F7-C2C2-4B18-A15C-E09B92065F15}" = Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz
"{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}" = Complément Messenger
"{6E8AFC13-F7B8-41D8-88AB-F1D0CFC56305}" = Windows Live Messenger
"{6EF2BE2C-3121-48B7-B7A6-C56046B3A588}" = Windows Live Movie Maker
"{6F37D92B-41AA-44B7-80D2-457ABDE11896}" = Windows Live Photo Common
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7115EEBC-DA7B-434C-B81C-EA5B26EA9A94}" = Windows Live Writer Resources
"{71684DFF-CDED-450C-AF0C-4A1A6438A1A5}" = Windows Live Essentials
"{71A81378-79D5-40CC-9BDC-380642D1A87F}" = Windows Live Writer
"{71C95134-F6A9-45E7-B7B3-07CA6012BF2A}" = Windows Live Mesh
"{7272F232-A7E0-4B2B-A5D2-71B7C5E2379C}" = Windows Live Fotótár
"{7327080F-6673-421F-BBD9-B618F357EEB3}" = Windows Live UX Platform Language Pack
"{734104DE-C2BF-412F-BB97-FCCE1EC94229}" = Windows Live Writer Resources
"{7373E17D-18E0-44A7-AC3A-6A3BFB85D3B3}" = Windows Live Movie Maker
"{73FC3510-6421-40F7-9503-EDAE4D0CF70D}" = Windows Live Photo Common
"{7465A996-0FCA-4D2D-A52C-F833B0829B5B}" = Windows Live Movie Maker
"{7496FD31-E5CB-4AE4-82D3-31099558BF6A}" = Windows Live Mesh
"{74E8A7F6-575D-42C7-9178-E87D1B3BEFE8}" = Windows Live UX Platform Language Pack
"{753F0A72-59C3-41CE-A36A-F2DF2079275C}" = Windows Live Mail
"{77477AEA-5757-47D8-8B33-939F43D82218}" = Windows Live UX Platform Language Pack
"{7780682A-47C9-480D-90BE-247539342595}" = Windows Live UX Platform Language Pack
"{77BC9EAF-14C7-4338-9B1C-D5A3E142C0B8}" = Windows Live Photo Common
"{77DAF553-291A-4471-988C-5677D90DB57E}" = Windows Live Writer Resources
"{77F45ECD-FAFC-45A8-8896-CFFB139DAAA3}" = Fast Start
"{77F69CA1-E53D-4D77-8BA3-FA07606CC851}" = Фотоальбом Windows Live
"{781E0319-15CD-4A4C-A47E-D9FFF697E7A1}" = Messenger Companion
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{78DAE910-CA72-450E-AD22-772CB1A00678}" = Windows Live Mesh
"{78DBE8CE-61F6-4D6C-806C-A0FFF65F5E1D}" = Windows Live Messenger
"{7A9D47BA-6D50-4087-866F-0800D8B89383}" = Podstawowe programy Windows Live
"{7ADFA72D-2A9F-4DEC-80A5-2FAA27E23F0F}" = Windows Live Photo Common
"{7AF32AB1-CB97-11D4-9607-0050BA84F5F7}" = Baldur's Gate(TM) II - Schatten von Amn(TM)
"{7AF8E500-B349-4A77-8265-9854E9A47925}" = Windows Live Movie Maker
"{7B982EBD-D017-4527-BF1A-FC489EC6B100}" = Windows Live 照片库
"{7BA19818-F717-4DFB-BC11-FAF17B2B8AEE}" = Pošta Windows Live
"{7C2A3479-A5A0-412B-B0E6-6D64CBB9B251}" = Windows Live Photo Common
"{7CB529B2-6C74-4878-9C3F-C29C3C3BBDC6}" = Windows Live Writer Resources
"{7D0DE76C-874E-4BDE-A204-F4240160693E}" = Windows Live Photo Common
"{7D1C7B9F-2744-4388-B128-5C75B8BCCC84}" = Windows Live Essentials
"{7E017923-16F8-4E32-94EF-0A150BD196FE}" = Windows Live Writer
"{7E274911-32ED-4489-9B04-4EF100D0E4D3}" = „Messenger“ pagalbinė priemonė
"{7E90B133-FF47-48BB-91B8-36FC5A548FE9}" = Windows Live Writer Resources
"{7F061FA8-5A87-4758-876B-17EE28B358D0}" = Messenger 浏览器插件
"{7F6F62F0-7884-4CFB-B86C-597A4A6D9C4D}" = Movie Color Enhancer
"{7FF11E53-C002-4F40-8D68-6BE751E5DD62}" = Windows Live Writer Resources
"{804DE397-F82C-4867-9085-E0AA539A3294}" = Windows Live Writer
"{80E158EA-7181-40FE-A701-301CE6BE64AB}" = CyberLink MediaShow
"{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
"{8142D25E-028A-4563-86ED-5755783C8029}" = Messenger Companion
"{827D3E4A-0186-48B7-9801-7D1E9DD40C07}" = Windows Live Essentials
"{82803FF3-563F-414F-A403-8D4C167D4120}" = Windows Live Mail
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{83D2FFB0-E378-49FE-8A53-580CA7B5761F}" = Windows Live Messenger
"{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
"{84267681-BF16-40B6-9564-27BC57D7D71C}" = Windows Live Photo Common
"{847C879C-1467-4924-A491-1302B4C58F70}" = Messenger Companion
"{84A411F9-40A5-4CDA-BF46-E09FBB2BC313}" = Windows Live Essentials
"{85373DA7-834E-4850-8AF5-1D99F7526857}" = Windows Live Photo Common
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{861B1145-7762-4794-B40C-3FF0A389DFE6}" = Windows Live Photo Gallery
"{86E6D3A7-3ADC-44C0-B94E-85D2A9DD36B0}" = Windows Live Writer
"{8732818E-CA78-4ACB-B077-22311BF4C0E4}" = Easy Network Manager
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{885F1BCD-C344-4758-85BD-09640CF449A5}" = Windows Live Photo Gallery
"{8909CFA8-97BF-4077-AC0F-6925243FFE08}" = Windows Liven asennustyökalu
"{8985AE5E-622A-4980-8BF8-0A1830643220}" = Windows Live Mesh ActiveX kontrola za daljinske veze
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8CF5D47D-27B7-49D6-A14F-10550B92749D}" = Windows Live UX Platform Language Pack
"{8DC42D05-680B-41B0-8878-6C14D24602DB}" = QuickTime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8FF3891F-01B5-4A71-BFCD-20761890471C}" = Windows Live Messenger
"{9024FE65-46B8-4C8A-9D98-8DCB6BD5F598}" = „Windows Live Mesh ActiveX“ nuotolinių ryšių valdiklis
"{902585EB-8FA3-43A5-AD1C-5C9821A77114}" = Messenger Pratilac
"{903EDF14-4E28-4463-AA5E-4AEE71C0263B}" = Windows Live Movie Maker
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{924B4D82-1B97-48EB-8F1E-55C4353C22DB}" = Windows Live Mail
"{92D50865-FC60-4EA8-BA7A-5581B0D13EFB}" = ChargeableUSB
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{939C80FA-96C9-44A6-B318-8E7D8BD8481B}" = Messenger Companion
"{93E464B3-D075-4989-87FD-A828B5C308B1}" = Windows Live Writer Resources
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{96403552-88D1-429F-9C92-388B814B885E}" = Messenger Companion
"{97F77D62-5110-4FA3-A2D3-410B92D31199}" = Windows Live Fotogaléria
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{99BE7F5D-AB52-4404-9E03-4240FFAA7DE9}" = Windows Live Mesh
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BD262D0-B788-4546-A0A5-F4F56EC3834B}" = Windows Live Photo Common
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D4C7DFA-CBBB-4F06-BDAC-94D831406DF0}" = פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9DA3F03B-2CEE-4344-838E-117861E61FAF}" = Windows Live Mail
"{9DB90178-B5B0-45BD-B0A7-D40A6A1DF1CA}" = Windows Live Movie Maker
"{9E771D5B-C429-4CBC-8730-3EBD9EC99E4C}" = Windows Live Movie Maker
"{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
"{A0B91308-6666-4249-8FF6-1E11AFD75FE1}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A101F637-2E56-42C0-8E08-F1E9086BFAF3}" = Windows Live Movie Maker
"{A1668729-C4D2-49AE-877B-FB608362FFF1}" = Windows Live Essentials
"{A199DB88-E22D-4CE7-90AC-B8BE396D7BF4}" = Windows Live Movie Maker
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A2EDAEEB-C981-46D5-8163-CF8F5F640EEE}" = ตัวควบคุม ActiveX ใน Windows Live Mesh สำหรับการเชื่อมต่อระยะไกล (ไทย)
"{A3389C72-1782-4BB4-BBAA-33345DE52E3F}" = Windows Live Messenger
"{A3A775C9-5A63-4C55-8FDD-427A5B8F5D2B}" = Windows Live Mesh ActiveX vadīkla attālajiem savienojumiem
"{A41A708E-3BE6-4561-855D-44027C1CF0F8}" = Windows Live Photo Common
"{A60B3BF0-954B-42AF-B8D8-2C1D34B613AA}" = Windows Live Photo Gallery
"{A7056D45-C63A-4FE4-A69D-FB54EF9B21BB}" = Windows Live Messenger
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AB067785-9646-456B-91C3-E71228132A4C}" = Messenger 사이트 공유
"{AB0B2113-5B96-4B95-8AD1-44613384911F}" = Windows Live Mesh
"{AB5977C5-11AE-4003-BA7D-261C48F2BC35}" = מסייע Messenger
"{AB61A2E9-37D3-485D-9085-19FBDF8CEF4A}" = Windows Live Messenger
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{ABD534B7-E951-470E-92C2-CD5AF1735726}" = Windows Live Essentials
"{ABE2F2AA-7ADC-4717-9573-BF3F83C696AC}" = Windows Live Mail
"{AC76BA86-7AD7-1031-7B44-A91000000001}" = Adobe Reader 9.1 - Deutsch
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AD001A69-88CC-4766-B2DB-3C1DFAB9AC72}" = Windows Live Mesh
"{AD86049C-3D9C-43E1-BE73-643F57D83D50}" = Easy Migration
"{ADE85655-8D1E-4E4B-BF88-5E312FB2C74F}" = Windows Live Mail
"{ADFE4AED-7F8E-4658-8D6E-742B15B9F120}" = Windows Live Photo Common
"{AF01B90A-D25C-4F60-AECD-6EEDF509DC11}" = Windows Live Mesh
"{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}" = Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych
"{B0AD205F-60D0-4084-AFB8-34D9A706D9A8}" = Windows Live Essentials
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B2BCA478-EC0F-45EE-A9E9-5EABE87EA72D}" = Windows Live Photo Common
"{B2E90616-C50D-4B89-A40D-92377AC669E5}" = Windows Live Messenger
"{B33B61FE-701F-425F-98AB-2B85725CBF68}" = Windows Live Photo Common
"{B3BA4D1C-23EF-4859-9C11-1B2CCB7FADBB}" = ActiveX контрола на Windows Live Mesh за отдалечени връзки
"{B3BE54A4-8DFE-4593-8E66-56AB7133B812}" = Windows Live Writer
"{B44F3823-52DD-45CA-A916-8B320778715D}" = Messenger Companion
"{B4712CB7-27D7-4F61-8805-BCF9BE1CFC4A}" = Windows Live Writer Resources
"{B618C3BF-5142-4630-81DD-F96864F97C7E}" = Windows Live Essentials
"{B6190387-0036-4BEB-8D74-A0AFC5F14706}" = Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení
"{B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137}" = Почта Windows Live
"{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation(R)Network Downloader
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B7B67AA5-12DA-4F01-918D-B1BF66779D8A}" = Windows Live Writer Resources
"{B81722D3-0A95-4BDE-AA1A-A2A5D12FCDB2}" = Windows Live Foto-galerija
"{B9B66F77-9D00-4CA4-BDF1-BBA8236B4DB6}" = Windows Live Writer
"{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}" = User Guide
"{BAEE89D5-6E87-4F89-9603-A1C100479181}" = Windows Live Messenger
"{BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}" = Элемент управления Windows Live Mesh ActiveX для удаленных подключений
"{BD0C3887-64E6-41D8-9A38-BC6F34369352}" = Windows Live Messenger
"{BD4EBDB5-EB14-4120-BB04-BE0A26C7FB3E}" = Windows Live Photo Common
"{BD695C2F-3EA0-4DA4-92D5-154072468721}" = Windows Live Fotoğraf Galerisi
"{BD8DA595-F501-4ABE-85A0-5C23E82472A0}" = Pomocnik Messenger
"{BF022D76-9F72-4203-B8FA-6522DC66DFDA}" = Windows Live Movie Maker
"{BF35168D-F6F9-4202-BA87-86B5E3C9BF7A}" = Windows Live Mesh
"{BFC47A0B-D487-4DF0-889E-D6D392DF31E0}" = Windows Live Messenger
"{C00C2A91-6CB3-483F-80B3-2958E29468F1}" = Συλλογή φωτογραφιών του Windows Live
"{C01FCACE-CC3D-49A2-ADC2-583A49857C58}" = Windows Live Essentials
"{C08D5964-C42F-48EE-A893-2396F9562A7C}" = Windows Live Mesh
"{C1C9D199-B4DD-4895-92DD-9A726A2FE341}" = Windows Live Writer
"{C29FC15D-E84B-4EEC-8505-4DED94414C59}" = Windows Live Writer Resources
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}" = Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia
"{C32CE55C-12BA-4951-8797-0967FDEF556F}" = Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}" = Windows Live Mesh ActiveX Control for Remote Connections
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C7DAD22D-29D4-438F-B986-03B9ED582EA4}" = Messenger Companion
"{C8421D85-CA0E-4E93-A9A9-B826C4FB88EA}" = Windows Live Mail
"{C877E454-FA36-409A-A00E-1240CEC61BBD}" = „Windows Live“ fotogalerija
"{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
"{C8A2793D-EFF2-4069-95BF-A28192E39DEB}" = Windows Live Writer
"{C95A5A77-622F-45CA-9540-84468FCB18B1}" = Windows Live Messenger
"{C9E1343D-E21E-4508-A1BE-04A089EC137D}" = Windows Live Messenger
"{CA227A9D-09BE-4BFB-9764-48FED2DA5454}" = Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}" = Galeria fotografii usługi Windows Live
"{CB66242D-12B1-4494-82D2-6F53A7E024A3}" = Galerie foto Windows Live
"{CB7224D9-6DCA-43F1-8F83-6B1E39A00F92}" = Windows Live Movie Maker
"{CBFD061C-4B27-4A89-ADD8-210316EEFA11}" = Windows Live Messenger
"{CD442136-9115-4236-9C14-278F6A9DCB3F}" = Windows Live Movie Maker
"{CD7CB1E6-267A-408F-877D-B532AD2C882E}" = Windows Live Photo Common
"{CDC39BF2-9697-4959-B893-A2EE05EF6ACB}" = Windows Live Writer
"{CE929F09-3853-4180-BD90-30764BFF7136}" = גלריית התמונות של Windows Live
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF088261-BC81-4FB9-9BA0-7B5B9602D01A}" = Messenger 分享元件
"{CF671BFE-6BA3-44E7-98C1-500D9C51D947}" = Windows Live Photo Gallery
"{CF936193-C584-458C-B793-15FA945621AF}" = Windows Live fotoattēlu galerija
"{CF9DEFAA-12CD-4D04-AA45-F9F667D21E2E}" = Windows Live Movie Maker
"{D06F10C5-3EDD-4B29-A3B5-16BBB9A047F8}" = Windows Live Mesh
"{D07B1FDA-876B-4914-9E9A-309732B6D44F}" = Windows Live Mail
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D27DF849-C8C7-4892-A7F1-E0B381A1BD01}" = Windows Live Writer
"{D299197D-CDEA-41A6-A363-F532DE4114FD}" = Windows Live UX Platform Language Pack
"{D31169F2-CD71-4337-B783-3E53F29F4CAD}" = Windows Live Mail
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D47C66BE-0EB5-4587-93FE-D1E176C4B25C}" = Windows Live Messenger
"{D4F81B27-4054-4AD6-A588-265508BAA17C}" = Messenger Companion
"{D57D43BF-699A-429F-AF8C-AF1867222800}" = Windows Live 사진 갤러리
"{D588365A-AE39-4F27-BDAE-B4E72C8E900C}" = Windows Live Mail
"{D58E381C-DE02-46A9-B9D1-A2CB807D2676}" = Messenger Companion
"{D657CCB5-9F2F-4D3C-B93D-F77EBEF79B66}" = Messenger-kumppani
"{D6CBB3B2-F510-483D-AE0D-1CF3F43CF1EE}" = Windows Live Writer Resources
"{D6F25CF9-4E87-43EB-B324-C12BE9CDD668}" = Windows Live UX Platform Language Pack
"{D987098B-3AD4-4E88-B80E-CF27A32D1955}" = Windows Live Writer Resources
"{DA29F644-2420-4448-8128-1331BE588999}" = Windows Live Writer
"{DAEF48AD-89C8-4A93-B1DD-45B7E4FB6071}" = Windows Live Movie Maker
"{DB1208F4-B2FE-44E9-BFE6-8824DBD7891B}" = Windows Live Movie Maker
"{DBAA2B17-D596-4195-A169-BA2166B0D69B}" = Windows Live Mail
"{DCAB6BA7-6533-44BF-9235-E5BF33B7431C}" = Windows Live Writer
"{DDC1E1BD-7615-4186-89E1-F5F43F9B6491}" = Windows Live Movie Maker
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DE7C13A6-E4EA-4296-B0D5-5D7E8AD69501}" = Windows Live Writer
"{DE8F99FD-2FC7-4C98-AA67-2729FDE1F040}" = Windows Live Writer Resources
"{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DEF91E0F-D266-453D-B6F2-1BA002B40CB6}" = Windows Live Essentials
"{DF71ABBB-B834-41C0-BB58-80B0545D754C}" = Windows Live UX Platform Language Pack
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E18B30AA-6E2D-480C-B918-AF61009F4010}" = عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E5377D46-83C5-445A-A1F1-830336B42A10}" = Windows Live Galerija fotografija
"{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}" = Controlo ActiveX do Windows Live Mesh para Ligações Remotas
"{E55E0C35-AC3C-4683-BA2F-834348577B80}" = Windows Live Writer
"{E59969EA-3B5B-4B24-8B94-43842A7FBFE9}" = Fotogalerija Windows Live
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E5DD4723-FE0B-436E-A815-DC23CF902A0B}" = Windows Live UX Platform Language Pack
"{E62E0550-C098-43A2-B54B-03FB1E634483}" = Windows Live Writer
"{E727A662-AF9F-4DEE-81C5-F4A1686F3DFC}" = Windows Live Writer Resources
"{E83DC314-C926-4214-AD58-147691D6FE9F}" = Основные компоненты Windows Live
"{E8524B28-3BBB-4763-AC83-0E83FE31C350}" = Windows Live Writer
"{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}" = Galería fotográfica de Windows Live
"{E9AD2143-26D5-4201-BED1-19DCC03B407D}" = Windows Live Messenger
"{E9D98402-21AB-4E9F-BF6B-47AF36EF7E97}" = Windows Live Writer Resources
"{EA2DB6E0-72C5-4ef9-A3A0-E6705F4A6A9E}" = Nexon Game Manager
"{EA76E65F-6679-495A-A8A6-42AD6602ED4C}" = EasyFileShare
"{EA777812-4905-4C08-8F6E-13BDCC734609}" = Windows Live UX Platform Language Pack
"{EAB1BDF2-734A-4D44-9169-7615D185C974}" = Windows Live Mesh
"{EC20FB81-9B5E-4B97-92A2-8DC52548EFCE}" = Windows Live Mesh
"{ED16B700-D91F-44B0-867C-7EB5253CA38D}" = Raccolta foto di Windows Live
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{EEF99142-3357-402C-B298-DEC303E12D92}" = Windows Live 影像中心
"{EF367AA4-070B-493C-9575-85BE59D789C9}" = Easy SpeedUp Manager
"{EF7EAB13-46FC-49DD-8E3C-AAF8A286C5BB}" = Windows Live 程式集
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 2.01.210
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F0F9505B-3ACF-4158-9311-D0285136AA00}" = Windows Live Essentials
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F14F9EE9-9B68-42B4-90F7-0924F7619281}" = Spremljevalec Messenger
"{F2979AAA-FDD7-4CB3-93BC-5C24D965D679}" = Windows Live Messenger
"{F35DC85A-E96B-496B-ABE7-F04192824856}" = Windows Live Messenger
"{F3ECEB0A-82A0-4DB9-BB44-393A66BA0871}" = Messenger kísérő
"{F4BEA6C1-AAC3-4810-AAEA-588E26E0F237}" = Windows Live UX Platform Language Pack
"{F52C5BE7-3F57-464E-8A54-908402E43CE8}" = Windows Live Writer Resources
"{F66430D8-08E6-4C96-B9B7-90E66E27D58C}" = Windows Live Mail
"{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}" = Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις
"{F687E657-F636-44DF-8125-9FEEA2C362F5}" = Samsung Support Center
"{F783464C-C7C6-4E9B-AC40-BC90E5414BAF}" = Windows Live Messenger
"{F7A46527-DF1F-4B0F-9637-98547E189442}" = Windows Live Galeria de Fotos
"{F7E80BA7-A09D-4DD1-828B-C4A0274D4720}" = Windows Live Mesh
"{F80E5450-3EF3-4270-B26C-6AC53BEC5E76}" = Windows Live Movie Maker
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{F992409C-9D10-4AE2-BAEB-B5409AD3785E}" = 用于远程连接的 Windows Live Mesh ActiveX 控件(简体中文)
"{FA20D803-14E5-4B00-8F03-B519D46F9D4A}" = Windows Live Messenger
"{FA6CF94F-DACF-4FE7-959D-55C421B91B17}" = Windows Live Mail
"{FB3D07AE-73D0-47A9-AC12-6F50BF8B6202}" = Windows Live Movie Maker
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}" = معرض صور Windows Live
"{FCDE76CB-989D-4E32-9739-6A272D2B0ED7}" = Windows Live Mesh
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"{FEA0181F-3758-46DA-B7EC-F3CDFA7E0CE7}" = Помощник на Messenger
"{FEEF7F78-5876-438B-B554-C4CC426A4302}" = Windows Live Essentials
"{FF105207-8423-4E13-B0B1-50753170B245}" = Windows Live Movie Maker
"{FF3DFA01-1E98-46B4-A065-DA8AD47C9598}" = Windows Live Movie Maker
"{FF737490-5A2D-4269-9D82-97DB2F7C0B09}" = Windows Live Movie Maker
"{FFD0E594-823B-4E2B-B680-720B3C852588}" = BatteryLifeExtender
"{FFFA0584-8E3D-4195-8283-CCA3AD73C746}" = Windows Live Messenger
"Activision_CTP2UninstallKey" = Call To Power 2
"Adobe AIR" = Adobe AIR
"Atlantica" = Atlantica
"BandiMPEG1" = Bandisoft MPEG-1 Decoder
"Combat Arms EU" = Combat Arms EU
"Drakensang Online" = Drakensang Online
"EA Installer.-1797597899" = EA Installer
"FLV Player" = FLV Player 2.0 (build 25)
"FUSSBALL MANAGER 11" = FUSSBALL MANAGER 11
"Game Console - WildGames" = WildTangent ORB Game Console
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink Media Suite
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"InstallShield_{6A9EF6CF-7630-4E33-AE22-7D70F3AF4B05}" = AION Free-To-Play
"InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}" = CyberLink MediaShow
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10
"NCLauncher_GameForge" = NC Launcher (GameForge)
"NIS" = Norton Internet Security
"Samsung Printer Live Update" = Samsung Printer Live Update
"Samsung Universal Print Driver" = Samsung Universal Print Driver
"Samsung Universal Scan Driver" = Samsung Universal Scan Driver
"TeamViewer 7" = TeamViewer 7
"WildTangent wildgames Master Uninstall" = WildTangent Games
"WinLiveSuite" = Windows Live Essentials
"WT085559" = Diner Dash 2 Restaurant Rescue
"WT085567" = Chuzzle Deluxe
"WT085580" = John Deere Drive Green
"WT085581" = Penguins!
"WT085583" = Polar Golfer
"WT085587" = Agatha Christie - Death on the Nile
"WT085597" = Build-a-lot
"WT085618" = Farm Frenzy
"WT085622" = Insaniquarium Deluxe
"WT085663" = Peggle
"WT089285" = Zuma Deluxe
"WT089286" = Bejeweled 2 Deluxe
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"SOE-EverQuest II" = EverQuest II
"UnityWebPlayer" = Unity Web Player
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 6/22/2012 4:36:31 PM | Computer Name = Sven-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: chrome.exe, Version: 17.0.963.56,
 Zeitstempel: 0x4f3b1160  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x77b4ad95  ID des fehlerhaften
 Prozesses: 0xb00  Startzeit der fehlerhaften Anwendung: 0x01cd50b6b0167dca  Pfad der
 fehlerhaften Anwendung: C:\Users\Sven\AppData\Local\Google\Chrome\Application\chrome.exe
Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: f276c6f3-bca9-11e1-aece-90a4de6a3cc6
 
Error - 6/22/2012 4:42:26 PM | Computer Name = Sven-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: rundll32.exe, Version: 6.1.7600.16385,
 Zeitstempel: 0x4a5bc637  Name des fehlerhaften Moduls: iertutil.dll, Version: 9.0.8112.16446,
 Zeitstempel: 0x4fb57b3c  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00002440  ID des fehlerhaften
 Prozesses: 0xe70  Startzeit der fehlerhaften Anwendung: 0x01cd50b7877af7ad  Pfad der
 fehlerhaften Anwendung: C:\windows\SysWOW64\rundll32.exe  Pfad des fehlerhaften Moduls:
 C:\windows\syswow64\iertutil.dll  Berichtskennung: c67a2edc-bcaa-11e1-aece-90a4de6a3cc6
 
Error - 6/22/2012 4:47:28 PM | Computer Name = Sven-PC | Source = Microsoft-Windows-RestartManager | ID = 10006
Description = Die Anwendung oder der Dienst "Windows Search" konnte nicht heruntergefahren
 werden.
 
Error - 6/22/2012 4:52:27 PM | Computer Name = Sven-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: rundll32.exe, Version: 6.1.7600.16385,
 Zeitstempel: 0x4a5bc637  Name des fehlerhaften Moduls: iertutil.dll, Version: 9.0.8112.16446,
 Zeitstempel: 0x4fb57b3c  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00002440  ID des fehlerhaften
 Prozesses: 0x15f0  Startzeit der fehlerhaften Anwendung: 0x01cd50b8ed1dbbeb  Pfad der
 fehlerhaften Anwendung: C:\windows\SysWOW64\rundll32.exe  Pfad des fehlerhaften Moduls:
 C:\windows\syswow64\iertutil.dll  Berichtskennung: 2c40f661-bcac-11e1-aece-90a4de6a3cc6
 
Error - 6/22/2012 4:54:09 PM | Computer Name = Sven-PC | Source = MsiInstaller | ID = 10005
Description = 
 
Error - 6/22/2012 4:54:09 PM | Computer Name = Sven-PC | Source = MsiInstaller | ID = 1024
Description = 
 
Error - 6/22/2012 4:54:09 PM | Computer Name = Sven-PC | Source = MsiInstaller | ID = 10005
Description = 
 
Error - 6/22/2012 4:54:09 PM | Computer Name = Sven-PC | Source = MsiInstaller | ID = 1024
Description = 
 
Error - 6/22/2012 4:54:09 PM | Computer Name = Sven-PC | Source = MsiInstaller | ID = 10005
Description = 
 
Error - 6/22/2012 4:54:10 PM | Computer Name = Sven-PC | Source = MsiInstaller | ID = 1024
Description = 
 
[ System Events ]
Error - 4/24/2012 11:38:15 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
 
Error - 4/24/2012 11:41:26 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Windows-Bilderfassung (WIA)" wurde nicht richtig gestartet.
 
Error - 4/25/2012 11:10:36 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
 
Error - 4/25/2012 11:14:23 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Windows-Bilderfassung (WIA)" wurde nicht richtig gestartet.
 
Error - 4/26/2012 12:08:17 PM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
 
Error - 4/26/2012 12:11:36 PM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Windows-Bilderfassung (WIA)" wurde nicht richtig gestartet.
 
Error - 4/27/2012 10:52:08 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
 
Error - 4/27/2012 10:54:40 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Windows-Bilderfassung (WIA)" wurde nicht richtig gestartet.
 
Error - 4/29/2012 4:20:09 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Windows Update" wurde nicht richtig gestartet.
 
Error - 4/29/2012 4:22:11 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Intel(R) Management and Security Application User Notification
 Service" wurde nicht richtig gestartet.
 
 
< End of report >
         
--- --- ---

Alt 12.09.2012, 14:03   #5
t'john
/// Helfer-Team
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft





Fixen mit OTL

Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).

  • Deaktiviere etwaige Virenscanner wie Avira, Kaspersky etc.
  • Starte die OTL.exe.
    Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
  • Kopiere folgendes Skript in das Textfeld unterhalb von Benuterdefinierte Scans/Fixes:
  • Der Fix fängt mit :OTL an. Vergewissere dich, dass du ihn richtig kopiert hast.

Ersetze die *** Sternchen wieder in den Benutzernamen zurück!
Code:
ATTFilter
:OTL
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 
IE - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 
IE - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.) 
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc) 
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. 
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation) 
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.) 
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. 
O3 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation) 
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [] C:\Users\Sven\AppData\Roaming\Wouqh\nyzym.exe () 
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [{4C998393-5696-6508-B037-E626C5D685F3}] C:\Users\Sven\AppData\Roaming\Overyn\ukzeup.exe () 
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [{B2E663E4-B92C-68B3-A965-E9D64E2F4C84}] C:\Users\Sven\AppData\Roaming\Wouqh\nyzym.exe () 
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [huapcfpuomvvpnj] C:\ProgramData\huapcfpu.exe () 
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [kbdapiserv] C:\Users\Sven\AppData\Local\kbdapiserv\eapPad32.dll () 
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet File not found 
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [Sony Ericsson PC Companion] C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe (Sony Ericsson) 
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [Userinit] C:\Users\Sven\AppData\Roaming\appConf32.exe () 
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found 
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 
O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites) 
O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: freerealms.com ([]* in Trusted sites) 
O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: soe.com ([]* in Trusted sites) 
O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: sony.com ([]* in Trusted sites) 
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. 
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. 
O32 - HKLM CDRom: AutoRun - 1 
O32 - AutoRun File - [2008/03/13 20:39:10 | 000,000,061 | R--- | M] () - E:\autorun.inf -- [ CDFS ] 
O32 - AutoRun File - [2011/12/16 17:48:12 | 000,000,101 | ---- | M] () - F:\Autorun.inf -- [ FAT32 ] 
O33 - MountPoints2\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\Shell - "" = AutoRun 
O33 - MountPoints2\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Einstiegsseite.exe -- [2009/12/10 17:43:32 | 001,569,744 | R--- | M] (HanseNet Telekommunikation GmbH) 
O33 - MountPoints2\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\Shell - "" = AutoRun 
O33 - MountPoints2\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\Shell\AutoRun\command - "" = F:\Startme.exe 
[2012/09/09 23:28:32 | 000,054,272 | ---- | M] () -- C:\Users\Sven\ms.exe 
[2012/09/09 23:28:32 | 000,054,272 | ---- | M] () -- C:\ProgramData\huapcfpu.exe 
[2008/12/09 17:23:13 | 000,051,536 | RHS- | C] () -- C:\Users\Sven\AppData\Roaming\appConf32.exe 
[2011/12/23 14:12:29 | 000,351,184 | ---- | C] (Adobe Systems, Incorporated) -- C:\Users\Sven\AppData\Roaming\AcroIEHelpe068.dll 
[2012/09/09 23:28:47 | 000,000,000 | ---D | C] -- C:\ProgramData\urkvkanuoxokarg 
[2012/09/09 23:28:47 | 000,000,051 | ---- | M] () -- C:\ProgramData\bdccfjlrwixtvuw 

[2011/12/16 23:02:14 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\kock 
[2012/09/08 01:44:49 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\UAs 
[2012/09/08 01:45:43 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\xmldm 
:Files

C:\Users\Sven\AppData\Roaming\*roIEHelp*.*
C:\ProgramData\*.exe
C:\ProgramData\TEMP
C:\Users\*****\AppData\Local\{*}
C:\Users\*****\AppData\Local\Temp\*.exe
C:\Users\*****\AppData\LocalLow\Sun\Java\Deployment\cache
%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
ipconfig /flushdns /c
:Commands
[emptytemp]
         
  • Schließe alle Programme.
  • Klicke auf den Fix Button.
  • Wenn OTL einen Neustart verlangt, bitte zulassen.
  • Kopiere den Inhalt des Logfiles hier in Code-Tags in Deinen Thread.
    Nachträglich kannst Du das Logfile hier einsehen => C:\_OTL\MovedFiles\<datum_nummer.log>

Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!

__________________
Mfg, t'john
Das TB unterstützen

Alt 12.09.2012, 14:58   #6
SvenK
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft



All processes killed
========== OTL ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
HKU\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully.
C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}\ deleted successfully.
C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll moved successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ deleted successfully.
C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ deleted successfully.
File C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ not found.
File C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll not found.
Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
C:\Users\Sven\AppData\Roaming\Wouqh\nyzym.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\{4C998393-5696-6508-B037-E626C5D685F3} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4C998393-5696-6508-B037-E626C5D685F3}\ not found.
C:\Users\Sven\AppData\Roaming\Overyn\ukzeup.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\{B2E663E4-B92C-68B3-A965-E9D64E2F4C84} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B2E663E4-B92C-68B3-A965-E9D64E2F4C84}\ not found.
File C:\Users\Sven\AppData\Roaming\Wouqh\nyzym.exe not found.
Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\huapcfpuomvvpnj deleted successfully.
C:\ProgramData\huapcfpu.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\kbdapiserv deleted successfully.
C:\Users\Sven\AppData\Local\kbdapiserv\eapPad32.dll moved successfully.
Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Messenger (Yahoo!) deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Sony Ericsson PC Companion deleted successfully.
C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Userinit deleted successfully.
C:\Users\Sven\AppData\Roaming\appConf32.exe moved successfully.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorAdmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorUser deleted successfully.
Registry key HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com\ deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
File move failed. E:\autorun.inf scheduled to be moved on reboot.
F:\Autorun.inf moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\ not found.
File move failed. E:\Einstiegsseite.exe scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\ not found.
File F:\Startme.exe not found.
C:\Users\Sven\ms.exe moved successfully.
File C:\ProgramData\huapcfpu.exe not found.
File C:\Users\Sven\AppData\Roaming\appConf32.exe not found.
C:\Users\Sven\AppData\Roaming\AcroIEHelpe068.dll moved successfully.
C:\ProgramData\urkvkanuoxokarg folder moved successfully.
C:\ProgramData\bdccfjlrwixtvuw moved successfully.
C:\Users\Sven\AppData\Roaming\kock folder moved successfully.
C:\Users\Sven\AppData\Roaming\UAs folder moved successfully.
C:\Users\Sven\AppData\Roaming\xmldm folder moved successfully.
========== FILES ==========
C:\Users\Sven\AppData\Roaming\AcroIEHelpe.txt moved successfully.
File\Folder C:\ProgramData\*.exe not found.
C:\ProgramData\Temp\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B} folder moved successfully.
C:\ProgramData\Temp\{CB099890-1D5F-11D5-9EA9-0050BAE317E1} folder moved successfully.
C:\ProgramData\Temp\{80E158EA-7181-40FE-A701-301CE6BE64AB} folder moved successfully.
C:\ProgramData\Temp\{5DB1DF0C-AABC-4362-8A6D-CEFDFB036E41} folder moved successfully.
C:\ProgramData\Temp\{40BF1E83-20EB-11D8-97C5-0009C5020658} folder moved successfully.
C:\ProgramData\Temp\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} folder moved successfully.
C:\ProgramData\Temp\{01FB4998-33C4-4431-85ED-079E3EEFE75D} folder moved successfully.
C:\ProgramData\Temp folder moved successfully.
C:\Users\Sven\AppData\Local\{00936415-E1F9-4E70-9105-10081C14065C} folder moved successfully.
C:\Users\Sven\AppData\Local\{01049D40-CE9F-4549-BA6F-F2042797A57A} folder moved successfully.
C:\Users\Sven\AppData\Local\{019C53D6-66BE-45D1-8B83-D3C19A4F43EE} folder moved successfully.
C:\Users\Sven\AppData\Local\{0239A1C9-32DF-4D23-B6CE-ED185B6C3112} folder moved successfully.
C:\Users\Sven\AppData\Local\{025E3C88-7DBD-4057-99AC-992F37224E23} folder moved successfully.
C:\Users\Sven\AppData\Local\{02612168-8E3C-46E0-AECD-74F86765B8E9} folder moved successfully.
C:\Users\Sven\AppData\Local\{0288E047-1F31-4CE7-92FD-895A7773C335} folder moved successfully.
C:\Users\Sven\AppData\Local\{02B98233-5C80-4D5A-966D-FDAFFBB2F193} folder moved successfully.
C:\Users\Sven\AppData\Local\{02BD70E0-9AC7-430E-AD06-EE39AC07F605} folder moved successfully.
C:\Users\Sven\AppData\Local\{02FAE782-83E9-41F0-9043-DEA7D1433E1F} folder moved successfully.
C:\Users\Sven\AppData\Local\{039B57EC-39EE-45B3-84B8-7CD04F982174} folder moved successfully.
C:\Users\Sven\AppData\Local\{03FF347C-C527-4F99-B111-222EED4D9E42} folder moved successfully.
C:\Users\Sven\AppData\Local\{04370C77-4ABC-4F0C-AE4D-4FBE20A87867} folder moved successfully.
C:\Users\Sven\AppData\Local\{04686241-95B2-4F65-AACE-5C3F110AD874} folder moved successfully.
C:\Users\Sven\AppData\Local\{04E5D34D-DB8C-4717-8DDB-B18918F05CE6} folder moved successfully.
C:\Users\Sven\AppData\Local\{053F08F1-D769-45E5-A3E0-0F8B9FE61F67} folder moved successfully.
C:\Users\Sven\AppData\Local\{05B231B0-738E-443C-ABEC-D13E84DC2C0E} folder moved successfully.
C:\Users\Sven\AppData\Local\{05D29B31-8B99-43FD-9DFD-4F96412A224E} folder moved successfully.
C:\Users\Sven\AppData\Local\{05F8AB72-7045-4652-AFE8-0BDD00416242} folder moved successfully.
C:\Users\Sven\AppData\Local\{06416366-3CDA-4EB6-BB9E-1BC842DCDF78} folder moved successfully.
C:\Users\Sven\AppData\Local\{0679827A-C566-49D2-8F60-A0EEDD4E4301} folder moved successfully.
C:\Users\Sven\AppData\Local\{069106AA-8D86-4CA3-9F43-4FE91E25CBE7} folder moved successfully.
C:\Users\Sven\AppData\Local\{06CE3FE3-88EC-4640-8DB6-5F0AE0A6417C} folder moved successfully.
C:\Users\Sven\AppData\Local\{06FCBE9B-0D56-4021-8E3D-725A6BB4A562} folder moved successfully.
C:\Users\Sven\AppData\Local\{07A2FAC9-67D5-444B-966D-2C34FC792EC9} folder moved successfully.
C:\Users\Sven\AppData\Local\{07F7C2E0-1C60-427D-8948-5E5F8E11C3A3} folder moved successfully.
C:\Users\Sven\AppData\Local\{081E88CB-CA1F-4E7F-B7EB-24B7B7FC3C41} folder moved successfully.
C:\Users\Sven\AppData\Local\{09170B83-4DEF-4AC0-85E4-EB02DE1105A1} folder moved successfully.
C:\Users\Sven\AppData\Local\{0A1EA684-AB0A-4D13-BF8C-896B29CD1513} folder moved successfully.
C:\Users\Sven\AppData\Local\{0A7D5A5B-9B6A-43B6-92F7-FEC82AA6FE09} folder moved successfully.
C:\Users\Sven\AppData\Local\{0AA2E4F4-7BFE-499D-9747-C19063EC675B} folder moved successfully.
C:\Users\Sven\AppData\Local\{0AE2BECC-8D76-4DA0-B5F9-476722D39039} folder moved successfully.
C:\Users\Sven\AppData\Local\{0B1EB304-E7A5-4E68-B24E-4686D832F7B3} folder moved successfully.
C:\Users\Sven\AppData\Local\{0B812061-2D23-4CD5-8611-F9F519C425E8} folder moved successfully.
C:\Users\Sven\AppData\Local\{0BD85775-BDA6-4C06-95BD-CF41764C69DD} folder moved successfully.
C:\Users\Sven\AppData\Local\{0BDE136D-FB13-4AF0-A151-CB41FF312B85} folder moved successfully.
C:\Users\Sven\AppData\Local\{0C300529-3B7C-4283-83E7-99CF51053560} folder moved successfully.
C:\Users\Sven\AppData\Local\{0CCCCCB5-BF84-443C-B565-D8A6C7751662} folder moved successfully.
C:\Users\Sven\AppData\Local\{0CDADEE3-7DED-46EA-99C2-A0F83DBA172E} folder moved successfully.
C:\Users\Sven\AppData\Local\{0D8ECD93-37D7-466F-AE0A-506C564C1775} folder moved successfully.
C:\Users\Sven\AppData\Local\{0DCCBF48-6A67-4118-9AB5-35711FF31EDF} folder moved successfully.
C:\Users\Sven\AppData\Local\{0DF0AD9E-B9AE-4621-8572-4E067990270E} folder moved successfully.
C:\Users\Sven\AppData\Local\{0E0AC019-B576-41C5-8EA9-6BF62D36262E} folder moved successfully.
C:\Users\Sven\AppData\Local\{0E40FA2F-36FF-444B-891F-09B69970998E} folder moved successfully.
C:\Users\Sven\AppData\Local\{10A5C6E0-31D3-4B98-9F62-076E314827C3} folder moved successfully.
C:\Users\Sven\AppData\Local\{1102379D-EF8F-462A-A27B-D196D515C034} folder moved successfully.
C:\Users\Sven\AppData\Local\{115E3044-A4A6-48F8-AAFC-C223B92B23F3} folder moved successfully.
C:\Users\Sven\AppData\Local\{11659C0B-5F4C-4F09-98C9-C9498D2B14FD} folder moved successfully.
C:\Users\Sven\AppData\Local\{11FD66C7-9BF4-424F-B725-34012E3582E3} folder moved successfully.
C:\Users\Sven\AppData\Local\{12845692-9D0D-4527-A566-5EB63D2DD4C0} folder moved successfully.
C:\Users\Sven\AppData\Local\{1388C119-E550-4BCD-8E11-88804DB2A194} folder moved successfully.
C:\Users\Sven\AppData\Local\{138E8B54-C2A7-42CD-BAB7-86BB5615851B} folder moved successfully.
C:\Users\Sven\AppData\Local\{13BEC485-6983-452B-B978-5BFEDFB9B5D3} folder moved successfully.
C:\Users\Sven\AppData\Local\{13F63CFC-200B-46F2-896F-C380C4ACC533} folder moved successfully.
C:\Users\Sven\AppData\Local\{147A8627-84C4-4BC1-A559-55483BFA7ABB} folder moved successfully.
C:\Users\Sven\AppData\Local\{14915615-8751-41E5-8501-8CC438E3F60E} folder moved successfully.
C:\Users\Sven\AppData\Local\{155B5BEA-56E2-44D5-87DA-8427D42E170D} folder moved successfully.
C:\Users\Sven\AppData\Local\{155DFB51-2DF2-49D3-98E0-671325C1D94F} folder moved successfully.
C:\Users\Sven\AppData\Local\{158A4C78-6E5B-4D17-9592-02C7F243D642} folder moved successfully.
C:\Users\Sven\AppData\Local\{15E95555-3039-4AF9-9A79-5C2DB1D0473C} folder moved successfully.
C:\Users\Sven\AppData\Local\{15EA5DB1-ECCC-4A57-B1A3-B13064D9F565} folder moved successfully.
C:\Users\Sven\AppData\Local\{163AE9EC-0C2B-4A1D-B2A9-0933D161F2E6} folder moved successfully.
C:\Users\Sven\AppData\Local\{164D6201-D402-4A61-BBC6-C57A474E3863} folder moved successfully.
C:\Users\Sven\AppData\Local\{165CD50D-0600-477C-A51F-8883E4B4F0D4} folder moved successfully.
C:\Users\Sven\AppData\Local\{166CA21D-4382-4E16-A05B-DC77771C08A4} folder moved successfully.
C:\Users\Sven\AppData\Local\{16D688A5-8726-4AF9-8EB2-E5DA26E54306} folder moved successfully.
C:\Users\Sven\AppData\Local\{179952AD-99A8-48B9-B508-9243A4495A9D} folder moved successfully.
C:\Users\Sven\AppData\Local\{17B1C00C-565C-4DFD-8312-75860761D685} folder moved successfully.
C:\Users\Sven\AppData\Local\{1839B90E-59DC-4859-9EBE-D1C3EA3AFE9C} folder moved successfully.
C:\Users\Sven\AppData\Local\{188271BE-3CC0-4AB1-8184-4F84C2D7AA35} folder moved successfully.
C:\Users\Sven\AppData\Local\{189A7250-FA6B-42A8-ADF6-CBCD5747EDF3} folder moved successfully.
C:\Users\Sven\AppData\Local\{18ECBE82-6E50-40A5-A507-A9ABB0D2D365} folder moved successfully.
C:\Users\Sven\AppData\Local\{18F91AF2-23A8-485E-B3EF-086686684573} folder moved successfully.
C:\Users\Sven\AppData\Local\{19A65A2F-54CF-46E3-8A4D-F715CC8D2881} folder moved successfully.
C:\Users\Sven\AppData\Local\{19D03CE7-DA7A-459C-ACE0-CE42344D1797} folder moved successfully.
C:\Users\Sven\AppData\Local\{19DF1BBE-7569-4559-BCA8-9BBC86DD0233} folder moved successfully.
C:\Users\Sven\AppData\Local\{1A2C33F5-92D4-4C03-8FA1-51A0DFC61C3B} folder moved successfully.
C:\Users\Sven\AppData\Local\{1A6047A3-7B65-4CF1-936A-7FF169723515} folder moved successfully.
C:\Users\Sven\AppData\Local\{1A6CDCAB-2D37-4CA4-AD97-2C2CBCDD7439} folder moved successfully.
C:\Users\Sven\AppData\Local\{1A7A6603-0B9F-4022-8F8E-7CF907D9747E} folder moved successfully.
C:\Users\Sven\AppData\Local\{1A8F68A1-BC01-4915-B8A5-1FA65D261DD1} folder moved successfully.
C:\Users\Sven\AppData\Local\{1A9825AB-2C03-4FDE-B02C-6CE00E3E656D} folder moved successfully.
C:\Users\Sven\AppData\Local\{1AABBB9B-E9AF-4412-9337-030A4ADCCD2D} folder moved successfully.
C:\Users\Sven\AppData\Local\{1B50BFAE-0E41-4CDB-B71B-4B5C37C02518} folder moved successfully.
C:\Users\Sven\AppData\Local\{1B5423B4-EE87-4C45-84F9-32B0B51DDD3B} folder moved successfully.
C:\Users\Sven\AppData\Local\{1B6D4F42-017D-4870-A479-EC72FE7690CA} folder moved successfully.
C:\Users\Sven\AppData\Local\{1B9B7717-F69D-4D9A-8405-CA207F6DB7CC} folder moved successfully.
C:\Users\Sven\AppData\Local\{1C059564-0774-43DD-972C-8FA73DC32FF8} folder moved successfully.
C:\Users\Sven\AppData\Local\{1C5BD25A-6C76-4BE7-8E69-5D18FD6337BA} folder moved successfully.
C:\Users\Sven\AppData\Local\{1C8EEDA0-CB2F-4FAB-BC20-852BD7C7A70A} folder moved successfully.
C:\Users\Sven\AppData\Local\{1CB472D8-1636-4A35-BAFC-EF0889B68258} folder moved successfully.
C:\Users\Sven\AppData\Local\{1CD7C5F6-1C2C-4BB5-AFB6-0CB6E36CC18B} folder moved successfully.
C:\Users\Sven\AppData\Local\{1CE8DEDF-5E6E-4BC2-9E74-6A09C230446E} folder moved successfully.
C:\Users\Sven\AppData\Local\{1E201354-5779-43B4-BF87-DC6B5F310577} folder moved successfully.
C:\Users\Sven\AppData\Local\{1E83918B-71DF-4FAD-8793-6645E0C8258C} folder moved successfully.
C:\Users\Sven\AppData\Local\{1ED94D25-C939-4206-9F5B-54E4981CADBA} folder moved successfully.
C:\Users\Sven\AppData\Local\{1FEFD9C6-91B0-4CBD-AEF5-423B29564C08} folder moved successfully.
C:\Users\Sven\AppData\Local\{20E42385-41D8-4999-B560-2E43F2AD536F} folder moved successfully.
C:\Users\Sven\AppData\Local\{21874DB6-7A85-465C-96BB-38186F228419} folder moved successfully.
C:\Users\Sven\AppData\Local\{21B2AF57-9B95-47FD-B42E-929C15B27EA5} folder moved successfully.
C:\Users\Sven\AppData\Local\{2254F274-3C5D-430D-8824-918067CA9612} folder moved successfully.
C:\Users\Sven\AppData\Local\{22C4920B-71D5-49E1-B6A5-89D073FC1251} folder moved successfully.
C:\Users\Sven\AppData\Local\{230F54DC-6180-4DAE-904A-FFE8416AB25B} folder moved successfully.
C:\Users\Sven\AppData\Local\{2382026B-D81E-4194-8A40-13FDCCDEE854} folder moved successfully.
C:\Users\Sven\AppData\Local\{239EE9E1-D3A0-4B05-A764-760A99C8412D} folder moved successfully.
C:\Users\Sven\AppData\Local\{23E508E6-DD98-41C6-931C-BE5775015150} folder moved successfully.
C:\Users\Sven\AppData\Local\{243DCBCD-FB62-480F-B99B-8236237A7BD3} folder moved successfully.
C:\Users\Sven\AppData\Local\{243F80C5-6442-424E-A8B9-F1834C9B8D30} folder moved successfully.
C:\Users\Sven\AppData\Local\{24EBED9C-3528-4C34-B22E-5913E196E2ED} folder moved successfully.
C:\Users\Sven\AppData\Local\{259B4E32-9BB0-4BC0-8C03-4E3421238A36} folder moved successfully.
C:\Users\Sven\AppData\Local\{25F6841A-5563-4A31-8A73-EB80AB7526A0} folder moved successfully.
C:\Users\Sven\AppData\Local\{263038B3-612E-4582-81AD-F6EEFF9B8843} folder moved successfully.
C:\Users\Sven\AppData\Local\{266F81D5-B023-4473-B66B-6521B0D6BFFA} folder moved successfully.
C:\Users\Sven\AppData\Local\{26E3D46E-5140-4CD8-8E95-65CDF6AA4EE7} folder moved successfully.
C:\Users\Sven\AppData\Local\{26F098C9-6F54-4C87-A0FA-79DBBD515894} folder moved successfully.
C:\Users\Sven\AppData\Local\{27E337DC-F26C-4DED-805A-59E7AD0F4E54} folder moved successfully.
C:\Users\Sven\AppData\Local\{28AE91C7-A6BF-4927-873F-17165D4F421E} folder moved successfully.
C:\Users\Sven\AppData\Local\{28AF1B3D-C055-4A1A-B52A-8FBD0794A767} folder moved successfully.
C:\Users\Sven\AppData\Local\{28FDB050-6586-4CE8-BFB7-1020E9C22CF3} folder moved successfully.
C:\Users\Sven\AppData\Local\{29233047-FC3C-4905-9BC1-D2BDCB47AE6A} folder moved successfully.
C:\Users\Sven\AppData\Local\{297CF956-DB67-49F1-BBEC-016C36AF503C} folder moved successfully.
C:\Users\Sven\AppData\Local\{2995CE17-8B0E-4AD3-B1A4-F0F4A9677A8A} folder moved successfully.
C:\Users\Sven\AppData\Local\{29A62EEC-01DB-4955-B638-69CBD3FB3906} folder moved successfully.
C:\Users\Sven\AppData\Local\{2A0A7EB0-C31B-4DF5-BA11-E8E879AE8C66} folder moved successfully.
C:\Users\Sven\AppData\Local\{2A933F67-9474-4C3B-A1BD-09440C673910} folder moved successfully.
C:\Users\Sven\AppData\Local\{2A9E8D06-C6D7-46BA-BCFD-D77BCF96E948} folder moved successfully.
C:\Users\Sven\AppData\Local\{2AFBA1B3-5F47-4E57-AD0D-B2765D9C7828} folder moved successfully.
C:\Users\Sven\AppData\Local\{2B2AD9D5-4747-4E26-BA87-52A9A58C8135} folder moved successfully.
C:\Users\Sven\AppData\Local\{2B73406A-55E5-4CB8-AC60-3D2E30D2345D} folder moved successfully.
C:\Users\Sven\AppData\Local\{2C313425-1837-4A72-B5A4-B4F646A41542} folder moved successfully.
C:\Users\Sven\AppData\Local\{2C6D4109-CB96-4CC1-B585-2CE75BF635FA} folder moved successfully.
C:\Users\Sven\AppData\Local\{2E511AB0-F410-4D69-8185-D27AFE39149B} folder moved successfully.
C:\Users\Sven\AppData\Local\{2FA54C86-2C32-4248-9D91-9BC301A51ED3} folder moved successfully.
C:\Users\Sven\AppData\Local\{304168B0-94B5-4200-8982-A74246E8AC4F} folder moved successfully.
C:\Users\Sven\AppData\Local\{3079DE30-740E-4DB1-A43E-C780D66D86B2} folder moved successfully.
C:\Users\Sven\AppData\Local\{30B90928-EFBF-4B6E-990E-B069EE610E83} folder moved successfully.
C:\Users\Sven\AppData\Local\{31B946A4-CDAE-45DE-9574-84315B56E023} folder moved successfully.
C:\Users\Sven\AppData\Local\{31C287F5-D110-4AA9-BE55-C67E760F6964} folder moved successfully.
C:\Users\Sven\AppData\Local\{31E04805-C109-4AB3-90CD-C8B20BE76B63} folder moved successfully.
C:\Users\Sven\AppData\Local\{32D0AF8B-0C08-4DF7-B737-0482CA912417} folder moved successfully.
C:\Users\Sven\AppData\Local\{3344FFCE-38E2-40BF-AF06-58BB4F99CA6C} folder moved successfully.
C:\Users\Sven\AppData\Local\{3370D99F-9939-440E-8B88-B9AD77920106} folder moved successfully.
C:\Users\Sven\AppData\Local\{3472C722-E1B3-4DB9-850D-E788C02BA6D5} folder moved successfully.
C:\Users\Sven\AppData\Local\{3488043F-068F-4544-9550-201D692D8049} folder moved successfully.
C:\Users\Sven\AppData\Local\{34A2D8F0-A9C6-4EEF-9677-6EB51DF1E48A} folder moved successfully.
C:\Users\Sven\AppData\Local\{356CE69E-BA67-4699-8621-73B5058D4E07} folder moved successfully.
C:\Users\Sven\AppData\Local\{3589B4FE-7E2E-4EB6-93B1-5D75332F72C4} folder moved successfully.
C:\Users\Sven\AppData\Local\{35E58812-BB5E-47B9-9810-FC4937038475} folder moved successfully.
C:\Users\Sven\AppData\Local\{35EA3B5A-36A8-4D12-A4C9-638CDB70390E} folder moved successfully.
C:\Users\Sven\AppData\Local\{364849DC-11B6-4250-98B8-592555A696D3} folder moved successfully.
C:\Users\Sven\AppData\Local\{36A3D46D-BE9A-49A4-A0C4-2E3B6BC560A5} folder moved successfully.
C:\Users\Sven\AppData\Local\{3718CD7C-CF82-43EC-8A5F-619D71439B9F} folder moved successfully.
C:\Users\Sven\AppData\Local\{374F35D3-6600-4F9B-95BB-8999374223FF} folder moved successfully.
C:\Users\Sven\AppData\Local\{378639E7-044D-478B-9E27-B1EADD3C84BA} folder moved successfully.
C:\Users\Sven\AppData\Local\{37F2A683-4978-464F-B232-BAE066922350} folder moved successfully.
C:\Users\Sven\AppData\Local\{383078C3-8B4B-4878-AE2A-3213BAEDAFF4} folder moved successfully.
C:\Users\Sven\AppData\Local\{38621D50-6C9E-4685-95CF-AFE4A94F93C8} folder moved successfully.
C:\Users\Sven\AppData\Local\{38A6D430-4454-4199-89F9-F75746ABB192} folder moved successfully.
C:\Users\Sven\AppData\Local\{396E095B-2EA7-4763-8781-B6E028C177AC} folder moved successfully.
C:\Users\Sven\AppData\Local\{3AB4AA80-D87D-4522-99E6-81393CEE31C8} folder moved successfully.
C:\Users\Sven\AppData\Local\{3AB4BA9C-797A-4797-84E2-D6668D248720} folder moved successfully.
C:\Users\Sven\AppData\Local\{3B11B7E1-4BBD-4D25-A335-705F32E9C38A} folder moved successfully.
C:\Users\Sven\AppData\Local\{3B7A73F1-A9EB-406E-AED0-B9265A7BA4BB} folder moved successfully.
C:\Users\Sven\AppData\Local\{3C04E4F4-648C-4CD3-BB70-CF48821A32CF} folder moved successfully.
C:\Users\Sven\AppData\Local\{3C27B45E-4FC6-45CC-96DC-C1A8EB7533F8} folder moved successfully.
C:\Users\Sven\AppData\Local\{3C5A985F-1E63-4EA5-97DA-3C2FF31D09F6} folder moved successfully.
C:\Users\Sven\AppData\Local\{3C67232D-2F10-447C-906A-4454B4B55B74} folder moved successfully.
C:\Users\Sven\AppData\Local\{3CCE75FD-D94A-4F5F-8A48-23C69184323C} folder moved successfully.
C:\Users\Sven\AppData\Local\{3DA207CF-434B-496F-BE0B-AF68931E7F8E} folder moved successfully.
C:\Users\Sven\AppData\Local\{3DB0579E-8377-4C69-AC22-05993B44B29D} folder moved successfully.
C:\Users\Sven\AppData\Local\{3DF03277-EAE7-4710-B016-0F7F7DEC9F45} folder moved successfully.
C:\Users\Sven\AppData\Local\{3DF3A3EA-ED9E-401B-A6BA-F11FFAF0E988} folder moved successfully.
C:\Users\Sven\AppData\Local\{3F3921C4-ED9E-47DB-AE97-A9CBC100BB25} folder moved successfully.
C:\Users\Sven\AppData\Local\{3F6C4731-8108-42FC-A477-E6909B179074} folder moved successfully.
C:\Users\Sven\AppData\Local\{3FD55DBD-78AC-4EFE-9DA0-F054FF141A35} folder moved successfully.
C:\Users\Sven\AppData\Local\{40232D44-7C19-40B8-9E0B-AFC5F4B263D6} folder moved successfully.
C:\Users\Sven\AppData\Local\{40E2C034-84FF-4A92-831E-49C31C65CC73} folder moved successfully.
C:\Users\Sven\AppData\Local\{4113EFA5-0853-4F34-ADCD-0AA91F322DF4} folder moved successfully.
C:\Users\Sven\AppData\Local\{4167CED8-C2F2-4F9B-8036-F03BC9227893} folder moved successfully.
C:\Users\Sven\AppData\Local\{417BE153-BBD7-4F79-8BE4-8BD33FBB81C9} folder moved successfully.
C:\Users\Sven\AppData\Local\{41BB19E7-4153-4FED-BF3E-53E0FEA911B9} folder moved successfully.
C:\Users\Sven\AppData\Local\{41F9AC32-BBB4-461A-97E4-8AA2D67E6BDF} folder moved successfully.
C:\Users\Sven\AppData\Local\{42186F74-BCB1-4C86-B8D9-7AC714ED6537} folder moved successfully.
C:\Users\Sven\AppData\Local\{429BE549-A6AF-4034-9591-C6AC88406D5E} folder moved successfully.
C:\Users\Sven\AppData\Local\{42B04F56-51FE-42CB-8B32-F6B2F98960C1} folder moved successfully.
C:\Users\Sven\AppData\Local\{433957F1-5673-4129-A087-9E610F526887} folder moved successfully.
C:\Users\Sven\AppData\Local\{4351F37D-4358-45DE-8B28-ACC0BD434688} folder moved successfully.
C:\Users\Sven\AppData\Local\{43E8095B-67A8-403B-9516-4C6346173849} folder moved successfully.
C:\Users\Sven\AppData\Local\{440E2599-ADEC-4A56-A6F0-A9B23D24AE31} folder moved successfully.
C:\Users\Sven\AppData\Local\{4482CC97-A17E-48B5-AA2B-8D8455194F8D} folder moved successfully.
C:\Users\Sven\AppData\Local\{449A5B04-D20D-4C72-B343-AEA9B9E27046} folder moved successfully.
C:\Users\Sven\AppData\Local\{44AC8039-2855-45FC-B7F5-2C776BFD949B} folder moved successfully.
C:\Users\Sven\AppData\Local\{45459726-E779-407E-A7CF-9D51F07C9ECA} folder moved successfully.
C:\Users\Sven\AppData\Local\{456227C4-1E93-44FC-8907-9B9FEE34E294} folder moved successfully.
C:\Users\Sven\AppData\Local\{45A76C6F-1E4D-4636-BE78-8096200F9E2C} folder moved successfully.
C:\Users\Sven\AppData\Local\{45C34F7F-6B04-47D3-9BDE-1FD1B3D07B04} folder moved successfully.
C:\Users\Sven\AppData\Local\{463E4A3A-3AB7-4901-9381-4FF39498CD24} folder moved successfully.
C:\Users\Sven\AppData\Local\{4707D4F4-083F-40D0-9A92-B6A3D156DF0A} folder moved successfully.
C:\Users\Sven\AppData\Local\{4740CACC-3B38-4367-8129-EDEC1910BCCD} folder moved successfully.
C:\Users\Sven\AppData\Local\{47548E20-918F-449F-AE1B-CEF14452584D} folder moved successfully.
C:\Users\Sven\AppData\Local\{479BC984-EDC6-4990-822B-940431824881} folder moved successfully.
C:\Users\Sven\AppData\Local\{47A331F2-44BB-4426-844D-86EE6DEA5B88} folder moved successfully.
C:\Users\Sven\AppData\Local\{4825DD7C-14BF-4C6A-9AAA-0A2E9FA5B78F} folder moved successfully.
C:\Users\Sven\AppData\Local\{496B4EC3-DBB5-4E0D-B5D9-B3B2E6A7842F} folder moved successfully.
C:\Users\Sven\AppData\Local\{49E63433-4711-44CC-A5DD-664C49B0AA28} folder moved successfully.
C:\Users\Sven\AppData\Local\{4A313B4A-9A21-4897-B1C3-15744DFB913F} folder moved successfully.
C:\Users\Sven\AppData\Local\{4B6D98B6-34CB-48D1-84D8-A4F4A9D70A2A} folder moved successfully.
C:\Users\Sven\AppData\Local\{4B80CB56-2F8C-4C86-877C-12CBD555B1F0} folder moved successfully.
C:\Users\Sven\AppData\Local\{4BB16372-DF3C-45CF-A49F-C5D121BD1B2A} folder moved successfully.
C:\Users\Sven\AppData\Local\{4C064FCC-E223-4C9F-B694-83D009449D9B} folder moved successfully.
C:\Users\Sven\AppData\Local\{4CCD6D22-92B3-4655-9CCD-F53F9AAB7975} folder moved successfully.
C:\Users\Sven\AppData\Local\{4D6B17AF-A6F7-46CE-A7A5-9043C990F28C} folder moved successfully.
C:\Users\Sven\AppData\Local\{4DA9E4A9-06D1-430F-9AC2-8E1906D6516C} folder moved successfully.
C:\Users\Sven\AppData\Local\{4DF6E7BB-AB7C-4DBA-829B-2976B8A6D7D3} folder moved successfully.
C:\Users\Sven\AppData\Local\{4DFB2D05-1B68-4310-A9B2-5B76885075AB} folder moved successfully.
C:\Users\Sven\AppData\Local\{4E526F44-00BF-4AEC-A049-310661C00985} folder moved successfully.
C:\Users\Sven\AppData\Local\{4F71AF1F-5E8D-421F-98C4-EB7F361DF55A} folder moved successfully.
C:\Users\Sven\AppData\Local\{4F92E2C9-98F8-4AD1-BE18-2123C44D65CB} folder moved successfully.
C:\Users\Sven\AppData\Local\{5009A097-3D9B-49C9-85E5-DEE9904F1FEB} folder moved successfully.
C:\Users\Sven\AppData\Local\{50381187-BB2B-44E9-AD5F-4C1C91159278} folder moved successfully.
C:\Users\Sven\AppData\Local\{50DF6CD2-3697-4283-8D7A-29129A51897A} folder moved successfully.
C:\Users\Sven\AppData\Local\{511EF2C1-CFC7-470A-ABEA-D149CA155C34} folder moved successfully.
C:\Users\Sven\AppData\Local\{5241BB1A-604F-4775-BE84-82458523456C} folder moved successfully.
C:\Users\Sven\AppData\Local\{5248BEDE-6A7A-46D5-B0B2-887114F18536} folder moved successfully.
C:\Users\Sven\AppData\Local\{526885FC-F627-4DFE-9EA8-9D00AD1FEF0E} folder moved successfully.
C:\Users\Sven\AppData\Local\{527212B1-0EB8-4291-A673-DA21042796B8} folder moved successfully.
C:\Users\Sven\AppData\Local\{52B1B748-2333-4585-B9EE-BD3DC2384110} folder moved successfully.
C:\Users\Sven\AppData\Local\{52C8F275-AF61-434A-989A-3EFA161B2F99} folder moved successfully.
C:\Users\Sven\AppData\Local\{53A11C4D-CF5D-4C96-B561-8E1E659B17BA} folder moved successfully.
C:\Users\Sven\AppData\Local\{53BD9674-4B86-4EC5-8EE9-940D6CF220F1} folder moved successfully.
C:\Users\Sven\AppData\Local\{54B67781-63A8-4387-BF92-26854C83050F} folder moved successfully.
C:\Users\Sven\AppData\Local\{54D499CE-BFEF-4C46-8EB6-A81E9915A41F} folder moved successfully.
C:\Users\Sven\AppData\Local\{55CE5FE2-6046-4006-9C3E-6F27702F4A97} folder moved successfully.
C:\Users\Sven\AppData\Local\{55D42A66-0529-4A61-BD31-7CD033FB0F22} folder moved successfully.
C:\Users\Sven\AppData\Local\{56183EFC-65D3-4F89-9EB7-983DA02F0271} folder moved successfully.
C:\Users\Sven\AppData\Local\{562F4CAD-9AE2-47BB-A468-A34F7B0AA2C7} folder moved successfully.
C:\Users\Sven\AppData\Local\{56487CC0-672B-475E-A9EA-91B9D1EAF5BC} folder moved successfully.
C:\Users\Sven\AppData\Local\{56A43E45-23C2-4A56-845D-F0DCA0C619BB} folder moved successfully.
C:\Users\Sven\AppData\Local\{56B4F212-8CDC-4F27-81E9-FEAF49A59920} folder moved successfully.
C:\Users\Sven\AppData\Local\{56BC9CA6-F3FB-4EC0-948E-2748D07D9876} folder moved successfully.
C:\Users\Sven\AppData\Local\{56C3563F-3AD9-4296-BAB4-E07EA4340ACE} folder moved successfully.
C:\Users\Sven\AppData\Local\{5776EECB-1EB5-4BB3-82FF-D494CB17FA19} folder moved successfully.
C:\Users\Sven\AppData\Local\{57E4B5B0-5351-4351-A99C-5C6D4F525402} folder moved successfully.
C:\Users\Sven\AppData\Local\{595D2146-8387-49B6-A1C2-735DAEC5EA1E} folder moved successfully.
C:\Users\Sven\AppData\Local\{59E0BA94-A8A3-423E-8A1A-4EFE11192935} folder moved successfully.
C:\Users\Sven\AppData\Local\{5A6B7BFC-07E1-4B1E-BFC6-4B729D2F4774} folder moved successfully.
C:\Users\Sven\AppData\Local\{5A6F02F4-2CB0-47F2-B5F2-A399304D8701} folder moved successfully.
C:\Users\Sven\AppData\Local\{5AA6072D-E956-488A-8FFD-F3179090A862} folder moved successfully.
C:\Users\Sven\AppData\Local\{5AF18D85-68E2-4DAD-9379-A7D8D0A73DD7} folder moved successfully.
C:\Users\Sven\AppData\Local\{5B8768E0-F02A-4E2D-92B7-9A05BEDEE27F} folder moved successfully.
C:\Users\Sven\AppData\Local\{5C9F7758-F49D-456C-9FFB-6DE5A8956A66} folder moved successfully.
C:\Users\Sven\AppData\Local\{5D20E9AD-9EFE-4E45-A18C-F701A1ABA2EA} folder moved successfully.
C:\Users\Sven\AppData\Local\{5D3ECAFD-692B-4F90-9FD1-43CF4BFEFE98} folder moved successfully.
C:\Users\Sven\AppData\Local\{5E4BB609-F808-40E4-BB8A-3FC0DC2DE4CB} folder moved successfully.
C:\Users\Sven\AppData\Local\{5F4FF0DB-2EB8-4EBB-A80F-DE7141EC449D} folder moved successfully.
C:\Users\Sven\AppData\Local\{5F59D1DF-A803-445F-86EE-4A6ABC806BC0} folder moved successfully.
C:\Users\Sven\AppData\Local\{5FF11F92-A831-413E-AFEA-9C2419266558} folder moved successfully.
C:\Users\Sven\AppData\Local\{6017019D-F394-4193-B0C8-59D27D40A7DF} folder moved successfully.
C:\Users\Sven\AppData\Local\{60AE6ED6-BF0F-4BFC-B3AA-B4A8540CE0EA} folder moved successfully.
C:\Users\Sven\AppData\Local\{610DDD72-52DE-408C-AFA5-A42A91EDE5F4} folder moved successfully.
C:\Users\Sven\AppData\Local\{616EE18A-663B-45EF-AACC-6E61495E4A0F} folder moved successfully.
C:\Users\Sven\AppData\Local\{6195DC5E-4CB8-496A-82D7-58BD0F4E83E1} folder moved successfully.
C:\Users\Sven\AppData\Local\{61F4256D-095C-4C2A-88CA-36FEE0529A3A} folder moved successfully.
C:\Users\Sven\AppData\Local\{61F725DA-BDB9-4975-9724-70DB26AB52DC} folder moved successfully.
C:\Users\Sven\AppData\Local\{622ECE0A-9982-4BE3-A628-0F634E33FC48} folder moved successfully.
C:\Users\Sven\AppData\Local\{62C2624E-5A89-45C5-9FDD-6445195D8E1A} folder moved successfully.
C:\Users\Sven\AppData\Local\{63AA2BFC-AB1F-49EA-B363-1D997A4F4E6D} folder moved successfully.
C:\Users\Sven\AppData\Local\{63B2BEEA-8ABE-4865-BBEE-62EBD1935533} folder moved successfully.
C:\Users\Sven\AppData\Local\{64E55A05-19D5-4678-9F73-1201F4FB0111} folder moved successfully.
C:\Users\Sven\AppData\Local\{65449DF9-F500-4EAC-AD3B-93A6FACCD704} folder moved successfully.
C:\Users\Sven\AppData\Local\{655130DE-9B5E-4285-98DE-A8AD93F4CC9C} folder moved successfully.
C:\Users\Sven\AppData\Local\{65589F55-977D-455F-B8CD-3EA29A9E6978} folder moved successfully.
C:\Users\Sven\AppData\Local\{6579A806-0D70-45B6-9A62-641D36D4AEC8} folder moved successfully.
C:\Users\Sven\AppData\Local\{670201BE-3869-46CC-BE0B-6D1EBBD2D95B} folder moved successfully.
C:\Users\Sven\AppData\Local\{6704EFB1-3552-4C6A-BDB6-80C9E6CDFBB0} folder moved successfully.
C:\Users\Sven\AppData\Local\{67D902B0-06D6-460A-95A2-C8DD3D076B58} folder moved successfully.
C:\Users\Sven\AppData\Local\{67DCDB29-3BBE-415A-AA58-223927DB6727} folder moved successfully.
C:\Users\Sven\AppData\Local\{6804AD71-884A-4363-A3E5-3249FA8A723E} folder moved successfully.
C:\Users\Sven\AppData\Local\{68EA3CB5-9251-4D57-971D-4B40713EC042} folder moved successfully.
C:\Users\Sven\AppData\Local\{694A34B6-3D73-4213-98D0-FFD5B78415BC} folder moved successfully.
C:\Users\Sven\AppData\Local\{6A59704C-FB61-498D-8D1D-A88DACD956AF} folder moved successfully.
C:\Users\Sven\AppData\Local\{6A7EE957-A894-4D07-9CD1-30D2519EB62C} folder moved successfully.
C:\Users\Sven\AppData\Local\{6AD55406-B645-4120-AC61-D2F0FE598F87} folder moved successfully.
C:\Users\Sven\AppData\Local\{6B6A0121-C931-4F43-850C-81A5A05CD330} folder moved successfully.
C:\Users\Sven\AppData\Local\{6B7A5B13-552E-4285-83B0-5591360B2342} folder moved successfully.
C:\Users\Sven\AppData\Local\{6B8D4453-B43F-413A-BF13-9CF1369C7888} folder moved successfully.
C:\Users\Sven\AppData\Local\{6BAF1E9C-C466-4BF6-8523-5BA2FF1D4A20} folder moved successfully.
C:\Users\Sven\AppData\Local\{6C9A815D-3B21-465C-8C91-98C94B463B71} folder moved successfully.
C:\Users\Sven\AppData\Local\{6CB438AF-6981-4A00-A1A0-90BE4FA74E91} folder moved successfully.
C:\Users\Sven\AppData\Local\{6E5939D9-A562-47A3-91F8-C98BCAD163C7} folder moved successfully.
C:\Users\Sven\AppData\Local\{6EAAD736-3CA7-4282-A589-DB83D1595FE0} folder moved successfully.
C:\Users\Sven\AppData\Local\{6ECFD8D1-0814-41AE-AF04-DD78EC9DE53A} folder moved successfully.
C:\Users\Sven\AppData\Local\{6F0E6944-6553-4CB9-A2AA-30DB73F5AD88} folder moved successfully.
C:\Users\Sven\AppData\Local\{6F117DCE-BF8E-40A6-A88B-174A075AD19E} folder moved successfully.
C:\Users\Sven\AppData\Local\{6F3E1F5B-0C4C-4BD5-9EB8-BFCCD63EEFDF} folder moved successfully.
C:\Users\Sven\AppData\Local\{6F6AE82B-9B92-4EFB-802E-36569991F96F} folder moved successfully.
C:\Users\Sven\AppData\Local\{6F975F0A-D1AA-4185-AC0E-7CAC10EDACCE} folder moved successfully.
C:\Users\Sven\AppData\Local\{6FC4906B-BB23-4229-B01E-AFECF7A4D0D3} folder moved successfully.
C:\Users\Sven\AppData\Local\{7090047B-C1CB-4E8B-BDAD-C1646BEC528E} folder moved successfully.
C:\Users\Sven\AppData\Local\{70B8D0C6-A6DF-4663-AE67-F193DF8CB10A} folder moved successfully.
C:\Users\Sven\AppData\Local\{712C4566-8182-42A0-86CF-0CEEB97D9DC4} folder moved successfully.
C:\Users\Sven\AppData\Local\{714A92F7-D434-4553-A5E1-9A925E9741AE} folder moved successfully.
C:\Users\Sven\AppData\Local\{715E2AC1-BFA4-471D-82CA-147D72E799C9} folder moved successfully.
C:\Users\Sven\AppData\Local\{718EE4C3-47DB-4EEA-A53F-4FEA100CA51E} folder moved successfully.
C:\Users\Sven\AppData\Local\{71CF264F-5B44-43F8-B0F1-8C77184A7D6C} folder moved successfully.
C:\Users\Sven\AppData\Local\{728EEFCE-E186-4113-9F84-3DBEF5660CA1} folder moved successfully.
C:\Users\Sven\AppData\Local\{72F6C344-4844-4A64-BADD-4A6AD3C8B4C3} folder moved successfully.
C:\Users\Sven\AppData\Local\{73D17892-2EB1-4227-9D62-9D37F9C0E96E} folder moved successfully.
C:\Users\Sven\AppData\Local\{743689B2-0A27-415C-9095-A4D5B550B06C} folder moved successfully.
C:\Users\Sven\AppData\Local\{7474F435-663F-4123-985A-2641ABD1D7E6} folder moved successfully.
C:\Users\Sven\AppData\Local\{7494FBEB-B4B3-4549-AFA7-1719F2DEBC1D} folder moved successfully.
C:\Users\Sven\AppData\Local\{749D3AC4-6184-4730-B830-B1AA3EE7DA7F} folder moved successfully.
C:\Users\Sven\AppData\Local\{750BEFC2-886A-4108-B122-FFD89D1978D1} folder moved successfully.
C:\Users\Sven\AppData\Local\{75263FF0-FE85-4A6E-AB80-D195A9921FE3} folder moved successfully.
C:\Users\Sven\AppData\Local\{754F4BAA-72AF-429F-B6EC-741B9CE841DE} folder moved successfully.
C:\Users\Sven\AppData\Local\{755A6C0E-A2E7-4E07-82BD-A8AE2301D08C} folder moved successfully.
C:\Users\Sven\AppData\Local\{75EAC62F-51FA-4B26-855D-3319D136F7F2} folder moved successfully.
C:\Users\Sven\AppData\Local\{76003192-0FAC-4D7C-86C1-8B459063BA03} folder moved successfully.
C:\Users\Sven\AppData\Local\{76548AA8-163D-47A4-90D5-7EF9C9A944E8} folder moved successfully.
C:\Users\Sven\AppData\Local\{7673F433-9FD7-4BEC-ADE8-E2C3AC322174} folder moved successfully.
C:\Users\Sven\AppData\Local\{769B5498-5EC4-4350-BC1A-C18DAAC35010} folder moved successfully.
C:\Users\Sven\AppData\Local\{76CD54AC-614C-4E9E-A35D-1FE1FE93114B} folder moved successfully.
C:\Users\Sven\AppData\Local\{7758BB46-0DB9-4559-A90D-97537F478AE2} folder moved successfully.
C:\Users\Sven\AppData\Local\{77BEED78-925E-4972-9ECF-0FE793A822C8} folder moved successfully.
C:\Users\Sven\AppData\Local\{77C164AF-FCF3-406E-AE6F-FFA5ED8B853C} folder moved successfully.
C:\Users\Sven\AppData\Local\{798AD983-EE37-4634-9077-45783E81FF47} folder moved successfully.
C:\Users\Sven\AppData\Local\{79A7D027-DCDF-474C-8044-282FBC75CAE5} folder moved successfully.
C:\Users\Sven\AppData\Local\{7A6BE210-B081-45D3-AA81-72D55FDECCD3} folder moved successfully.
C:\Users\Sven\AppData\Local\{7AD588C5-4496-4713-83E4-10137857D605} folder moved successfully.
C:\Users\Sven\AppData\Local\{7AE3BDE0-E7C7-4787-8D14-4055E835EDD7} folder moved successfully.
C:\Users\Sven\AppData\Local\{7B790EE5-E511-44C6-96D4-03E8141ECBEE} folder moved successfully.
C:\Users\Sven\AppData\Local\{7B83A41A-E4E4-4665-A807-28061472BDF8} folder moved successfully.
C:\Users\Sven\AppData\Local\{7C15419D-9E3F-4274-AA8F-EC45291B2553} folder moved successfully.
C:\Users\Sven\AppData\Local\{7C3E21C4-1BBE-4E81-A0D7-E94F846EA97B} folder moved successfully.
C:\Users\Sven\AppData\Local\{7C40315F-E2A3-45FF-AB7A-1AFC3023216E} folder moved successfully.
C:\Users\Sven\AppData\Local\{7C51EEA9-FEFA-4727-B972-CB156C951984} folder moved successfully.
C:\Users\Sven\AppData\Local\{7C80C80A-1FAF-4E6F-9750-03AD8AF048A7} folder moved successfully.
C:\Users\Sven\AppData\Local\{7CFC2135-5DB9-49D2-B142-4E55DCEF7EBB} folder moved successfully.
C:\Users\Sven\AppData\Local\{7D24626D-6D58-41DA-9913-A7CAE323A3F0} folder moved successfully.
C:\Users\Sven\AppData\Local\{7D469858-3B7F-4F3C-93CE-CE88A1DB0A34} folder moved successfully.
C:\Users\Sven\AppData\Local\{7D48775B-6317-4AE5-804A-901D0AE04275} folder moved successfully.
C:\Users\Sven\AppData\Local\{7D58CA8B-4D61-489F-B60E-574DCB619AAA} folder moved successfully.
C:\Users\Sven\AppData\Local\{7D88B79B-CC07-4DD0-855B-DAE8A41E8C38} folder moved successfully.
C:\Users\Sven\AppData\Local\{7E0A822A-1371-4B6D-A8C2-F4D4462C93F0} folder moved successfully.
C:\Users\Sven\AppData\Local\{7E2927CB-2CF8-4206-BDCB-BB1E16036EF0} folder moved successfully.
C:\Users\Sven\AppData\Local\{7ED5AC22-9942-486B-839D-893A12FB1835} folder moved successfully.
C:\Users\Sven\AppData\Local\{7F04B80D-97D8-429C-8E4A-4E0AD53B73F8} folder moved successfully.
C:\Users\Sven\AppData\Local\{7F1FE0ED-429D-42FD-BE60-55648534F8D2} folder moved successfully.
C:\Users\Sven\AppData\Local\{7FB488B3-3DA3-4BF7-99CF-960C78FA65F5} folder moved successfully.
C:\Users\Sven\AppData\Local\{8053D988-17FC-4EA9-9F8D-CD7FFA3D90D6} folder moved successfully.
C:\Users\Sven\AppData\Local\{8084AA7E-DC5B-455D-ABBC-A5A6BC2B2F0E} folder moved successfully.
C:\Users\Sven\AppData\Local\{8113863D-EEDB-4AA7-9E8A-8E9B8CB1AC3D} folder moved successfully.
C:\Users\Sven\AppData\Local\{8118BCB3-86C2-4AE9-B787-828D5AD6B3BB} folder moved successfully.
C:\Users\Sven\AppData\Local\{812A886C-95D4-477C-A794-DD9DE02A342E} folder moved successfully.
C:\Users\Sven\AppData\Local\{814A798A-9527-43EA-9A78-3A816836DCD4} folder moved successfully.
C:\Users\Sven\AppData\Local\{816631AE-4AE6-45A0-91EB-CADD3E992591} folder moved successfully.
C:\Users\Sven\AppData\Local\{824B7839-4905-4277-953B-AAFA105569C9} folder moved successfully.
C:\Users\Sven\AppData\Local\{82D0D067-8B99-456C-BB97-46D143421479} folder moved successfully.
C:\Users\Sven\AppData\Local\{830A0028-C70E-474E-86BC-93B4DE1419B3} folder moved successfully.
C:\Users\Sven\AppData\Local\{831ECDFF-87FB-4A85-962C-C12BF0A9E454} folder moved successfully.
C:\Users\Sven\AppData\Local\{8333B307-AD8D-4B69-A6FC-FF3C543DE38C} folder moved successfully.
C:\Users\Sven\AppData\Local\{8338CE03-EFA7-405C-8417-A00D1747474F} folder moved successfully.
C:\Users\Sven\AppData\Local\{843A126B-025B-4C1C-B776-6F41143E280A} folder moved successfully.
C:\Users\Sven\AppData\Local\{84963B23-9073-4BD5-B484-03FD7E5D91FC} folder moved successfully.
C:\Users\Sven\AppData\Local\{8583CE6A-FB95-4200-8C22-3C26F343C95D} folder moved successfully.
C:\Users\Sven\AppData\Local\{85A416CE-C641-44C4-B7F3-7B95FF1D81E1} folder moved successfully.
C:\Users\Sven\AppData\Local\{85C97D98-2A67-47F5-A9D9-CC39CFB0B905} folder moved successfully.
C:\Users\Sven\AppData\Local\{86F13CA0-8301-475C-932F-F31D65FFD978} folder moved successfully.
C:\Users\Sven\AppData\Local\{87768D6E-8DC4-4AE2-B34D-A72BDD9BF3BD} folder moved successfully.
C:\Users\Sven\AppData\Local\{87CA5D87-AAF2-45D4-9018-8FC30210CFB8} folder moved successfully.
C:\Users\Sven\AppData\Local\{8844DC50-7F8C-412B-B390-E83C58ACC0DB} folder moved successfully.
C:\Users\Sven\AppData\Local\{88455F34-53CE-4268-9D17-D9630DFC879C} folder moved successfully.
C:\Users\Sven\AppData\Local\{88C3859F-2AC4-4F74-9723-0C049A844F69} folder moved successfully.
C:\Users\Sven\AppData\Local\{8959381F-D2A7-40E9-97D8-6D50B6B47D3E} folder moved successfully.
C:\Users\Sven\AppData\Local\{8A089CAA-BD4B-4E6A-846B-5CDAEBA94370} folder moved successfully.
C:\Users\Sven\AppData\Local\{8A541F7A-BC82-413F-B404-D64DA0C5094B} folder moved successfully.
C:\Users\Sven\AppData\Local\{8A5E746B-F597-41F9-BE32-5CF1A3DCB912} folder moved successfully.
C:\Users\Sven\AppData\Local\{8B7CAB14-765D-4FF4-8FBB-BB43EF8CC94F} folder moved successfully.
C:\Users\Sven\AppData\Local\{8CA7DBD8-6E10-4860-87D9-990B2C09CFD3} folder moved successfully.
C:\Users\Sven\AppData\Local\{8CCD22C9-4D9E-420A-9258-BFCAE2CA0B2B} folder moved successfully.
C:\Users\Sven\AppData\Local\{8D968BDB-DA9E-4FB0-82A4-E99FE2F4808D} folder moved successfully.
C:\Users\Sven\AppData\Local\{8EE2F7A6-0F9F-451C-AF19-D2943BBEA76E} folder moved successfully.
C:\Users\Sven\AppData\Local\{8F37572B-1738-44A7-B004-D73AB03AA54F} folder moved successfully.
C:\Users\Sven\AppData\Local\{8F4D6C1C-36E0-4886-83D9-58CA5F964AED} folder moved successfully.
C:\Users\Sven\AppData\Local\{8F7CDE69-2C4E-49EE-A0E1-7D175EF88290} folder moved successfully.
C:\Users\Sven\AppData\Local\{8FD2FEA1-D914-4151-9B0F-F2E96F029781} folder moved successfully.
C:\Users\Sven\AppData\Local\{901D3AF0-B93F-45CC-BDF6-A8F651882EBC} folder moved successfully.
C:\Users\Sven\AppData\Local\{90313CA1-7B44-48DA-8567-0BFC160FD1FD} folder moved successfully.
C:\Users\Sven\AppData\Local\{904C66F3-C556-4540-9669-52899373A378} folder moved successfully.
C:\Users\Sven\AppData\Local\{90808D10-7E93-4D80-9E7B-91E1A0A69192} folder moved successfully.
C:\Users\Sven\AppData\Local\{90907692-013C-4366-A019-5B9EB9C3F842} folder moved successfully.
C:\Users\Sven\AppData\Local\{909428E8-0B38-44A0-8C90-38332A039702} folder moved successfully.
C:\Users\Sven\AppData\Local\{90D5F716-E178-4B55-8445-35A81538778B} folder moved successfully.
C:\Users\Sven\AppData\Local\{90FE37F4-E6EE-49E5-9925-B0F1F529595E} folder moved successfully.
C:\Users\Sven\AppData\Local\{925711BB-2825-4F10-94C8-9EFC9C9102E5} folder moved successfully.
C:\Users\Sven\AppData\Local\{927EE47E-7279-4119-8EE9-9D394FCDF271} folder moved successfully.
C:\Users\Sven\AppData\Local\{93F33F5B-6807-46C2-93BC-ACC2179BF3BE} folder moved successfully.
C:\Users\Sven\AppData\Local\{9417C90F-0060-48B4-9A75-DEF5234F561E} folder moved successfully.
C:\Users\Sven\AppData\Local\{945D24C1-579B-4F4F-B6AF-9CA0A606508E} folder moved successfully.
C:\Users\Sven\AppData\Local\{94D61E81-1910-4F1B-BC64-7E2821CF7550} folder moved successfully.
C:\Users\Sven\AppData\Local\{952C6532-A7F6-42CF-92B0-C8FB05CC9373} folder moved successfully.
C:\Users\Sven\AppData\Local\{95378BE7-5E98-4911-8703-8CAC56FADDB1} folder moved successfully.
C:\Users\Sven\AppData\Local\{956156CC-5655-41E8-93AF-06CA88C65871} folder moved successfully.
C:\Users\Sven\AppData\Local\{957FF602-D72A-4A5C-B97C-E49B9DDA1741} folder moved successfully.
C:\Users\Sven\AppData\Local\{9674D5F8-29EE-45AD-9A5F-82DDC5F8B0CC} folder moved successfully.
C:\Users\Sven\AppData\Local\{9713B064-3C65-4B19-91F9-C850F7C7DBB9} folder moved successfully.
C:\Users\Sven\AppData\Local\{9713C207-E275-428C-9044-5EDC971650DC} folder moved successfully.
C:\Users\Sven\AppData\Local\{974FA431-B435-4968-AECB-BCB5946AEA2C} folder moved successfully.
C:\Users\Sven\AppData\Local\{97693AC3-EABB-47D1-AB8B-AFCA402AC969} folder moved successfully.
C:\Users\Sven\AppData\Local\{980F0035-FA24-4363-BEBF-EB250CA95968} folder moved successfully.
C:\Users\Sven\AppData\Local\{9820158A-6219-41DC-913A-0A0CD158F97C} folder moved successfully.
C:\Users\Sven\AppData\Local\{98585E46-F399-4722-AA07-74D2E262B617} folder moved successfully.
C:\Users\Sven\AppData\Local\{99DFE1BD-2D82-4E91-BC53-7E4E831F7322} folder moved successfully.
C:\Users\Sven\AppData\Local\{9B5832D4-8F88-435D-9307-4190BB9B31AB} folder moved successfully.
C:\Users\Sven\AppData\Local\{9B670007-886A-4FDF-A7B7-6279141920F5} folder moved successfully.
C:\Users\Sven\AppData\Local\{9B98F522-3EBD-4467-8BCD-25830E5A8251} folder moved successfully.
C:\Users\Sven\AppData\Local\{9BCD45FE-61B6-48B0-881C-6606099C28F0} folder moved successfully.
C:\Users\Sven\AppData\Local\{9C7E1AA8-21C1-4E85-A91C-5D4D0C87B8E3} folder moved successfully.
C:\Users\Sven\AppData\Local\{9D5C96D3-2799-491D-A753-28CC1D14285B} folder moved successfully.
C:\Users\Sven\AppData\Local\{9E35B0EB-EB68-4987-8316-6E78193B1583} folder moved successfully.
C:\Users\Sven\AppData\Local\{9E62F18A-938D-493E-AB4A-834163478C6F} folder moved successfully.
C:\Users\Sven\AppData\Local\{9E9CD3AF-8A26-4391-9F50-6A33CE3F4EB2} folder moved successfully.
C:\Users\Sven\AppData\Local\{9EAE1EA1-D16F-45CF-93AD-2C2D7C8B0739} folder moved successfully.
C:\Users\Sven\AppData\Local\{9ECDE9AC-90A2-47B2-A85F-DA51819FF358} folder moved successfully.
C:\Users\Sven\AppData\Local\{9EF2ACA4-8E24-4241-8FF0-3CCCCA8341BA} folder moved successfully.
C:\Users\Sven\AppData\Local\{9F7901AD-AC8C-4FDC-8DBA-99A9729BAF5D} folder moved successfully.
C:\Users\Sven\AppData\Local\{9FC4AEB3-9DD9-4756-BA59-18B0BF91DAB3} folder moved successfully.
C:\Users\Sven\AppData\Local\{A0679729-0C5E-4030-A61A-5BED0C7AFA13} folder moved successfully.
C:\Users\Sven\AppData\Local\{A0914D42-6D21-4B40-A86C-F0BC9D25B017} folder moved successfully.
C:\Users\Sven\AppData\Local\{A0E62C8A-3143-4B15-806F-02929A8EDE41} folder moved successfully.
C:\Users\Sven\AppData\Local\{A0F3CC66-E061-4C2B-9CE0-BBADE4DB2FA1} folder moved successfully.
C:\Users\Sven\AppData\Local\{A1EBF922-B4DF-4526-B1F1-13F518ED80EE} folder moved successfully.
C:\Users\Sven\AppData\Local\{A24FADA0-D08B-4F39-9C0F-11C4EECC41C0} folder moved successfully.
C:\Users\Sven\AppData\Local\{A355809A-7937-40E2-9FAE-C31CC396386F} folder moved successfully.
C:\Users\Sven\AppData\Local\{A40C5F4E-689C-455F-9FE5-390056E37155} folder moved successfully.
C:\Users\Sven\AppData\Local\{A424FBFE-D2D2-4DAD-AD0E-2C31C79A0349} folder moved successfully.
C:\Users\Sven\AppData\Local\{A42C52C1-E32F-47F3-B3C0-393853116771} folder moved successfully.
C:\Users\Sven\AppData\Local\{A448430F-29EE-470A-9DFC-540AC3E36944} folder moved successfully.
C:\Users\Sven\AppData\Local\{A44A7E97-281F-4C39-B7E6-049809EE6C29} folder moved successfully.
C:\Users\Sven\AppData\Local\{A5111138-B12E-4241-B41E-1E8DDE6679D7} folder moved successfully.
C:\Users\Sven\AppData\Local\{A53FD1D9-9F98-4145-8DC2-E86CE5EFA8E5} folder moved successfully.
C:\Users\Sven\AppData\Local\{A559B2B4-B4DA-41CB-BE67-886A230239FC} folder moved successfully.
C:\Users\Sven\AppData\Local\{A58852CF-FC58-41D8-B563-06B33C9C6595} folder moved successfully.
C:\Users\Sven\AppData\Local\{A592F5F3-BC15-41DE-9507-42EAAC0A97D8} folder moved successfully.
C:\Users\Sven\AppData\Local\{A60567B7-9CD4-44A7-958C-8A13223CBBD3} folder moved successfully.
C:\Users\Sven\AppData\Local\{A6133A34-3444-4B9F-8B84-8DE711617474} folder moved successfully.
C:\Users\Sven\AppData\Local\{A698BCFE-26E8-4665-9583-FE29006500BA} folder moved successfully.
C:\Users\Sven\AppData\Local\{A6C72AF9-4943-4AB9-BC11-78B5B62CA537} folder moved successfully.
C:\Users\Sven\AppData\Local\{A78374B4-B73C-46CB-B49B-0A311F046B81} folder moved successfully.
C:\Users\Sven\AppData\Local\{A7BECCCF-A8DE-4539-99D3-CA5B005F3312} folder moved successfully.
C:\Users\Sven\AppData\Local\{A825C31E-A356-4ECB-BFAF-336964B85126} folder moved successfully.
C:\Users\Sven\AppData\Local\{A88CD410-9E36-4341-AFA9-CD91A4E0D139} folder moved successfully.
C:\Users\Sven\AppData\Local\{A8972AD6-0015-451E-BA29-66D7AA3E1667} folder moved successfully.
C:\Users\Sven\AppData\Local\{A8B17019-7A02-4904-A55D-E1997171F375} folder moved successfully.
C:\Users\Sven\AppData\Local\{A8CFE652-417B-4D3A-A702-B81439230CA9} folder moved successfully.
C:\Users\Sven\AppData\Local\{A961EC15-A4C4-4E09-ABDF-249F2C585213} folder moved successfully.
C:\Users\Sven\AppData\Local\{A9FB90E8-05F3-4749-B805-64DC6BDE36EE} folder moved successfully.
C:\Users\Sven\AppData\Local\{AA5D3962-61DD-412A-8449-2E956C53FE5B} folder moved successfully.
C:\Users\Sven\AppData\Local\{AAE20AF6-957C-4ACD-A912-BC809914820D} folder moved successfully.
C:\Users\Sven\AppData\Local\{AAEBA2D9-1203-4EF7-A659-A504D272D540} folder moved successfully.
C:\Users\Sven\AppData\Local\{AB100ED0-3CE0-44DA-B0DB-1AEA327EEE23} folder moved successfully.
C:\Users\Sven\AppData\Local\{AC7ECE2F-BB17-476D-BDAF-85B8A0513516} folder moved successfully.
C:\Users\Sven\AppData\Local\{AD25F425-AE96-4CB8-859F-7CBB028B4FBA} folder moved successfully.
C:\Users\Sven\AppData\Local\{AD6715AE-E5B0-4528-8786-AFD8BC8CBF4D} folder moved successfully.
C:\Users\Sven\AppData\Local\{ADB09058-8E7C-46A2-80E1-1B7A0872059B} folder moved successfully.
C:\Users\Sven\AppData\Local\{ADDAA41C-ED22-475F-8248-132E62D5F232} folder moved successfully.
C:\Users\Sven\AppData\Local\{ADECF444-3345-4B79-AB9F-2879862C9DCA} folder moved successfully.
C:\Users\Sven\AppData\Local\{AE74B41D-5544-4A7E-9CD5-6843F3668F2A} folder moved successfully.
C:\Users\Sven\AppData\Local\{AEA19FA2-EBC9-425D-A1ED-98E869C399C5} folder moved successfully.
C:\Users\Sven\AppData\Local\{AF864FDA-A2DB-491B-B99B-7F2BF2DCAC26} folder moved successfully.
C:\Users\Sven\AppData\Local\{AFE9735B-BBBB-4F6D-8ACA-360786391F71} folder moved successfully.
C:\Users\Sven\AppData\Local\{B06A3BB4-780D-4D1C-B330-E426C7C454DE} folder moved successfully.
C:\Users\Sven\AppData\Local\{B0A39733-3D47-4302-96B3-595156121B81} folder moved successfully.
C:\Users\Sven\AppData\Local\{B0A44009-C390-4A7E-AF4F-519C504E3967} folder moved successfully.
C:\Users\Sven\AppData\Local\{B0EED6BA-49A6-4717-BE91-F85AE41DE4CA} folder moved successfully.
C:\Users\Sven\AppData\Local\{B0F196E4-5909-461D-A421-8F490EA83782} folder moved successfully.
C:\Users\Sven\AppData\Local\{B0FD1749-7B47-4C34-AD46-0CE486C05D48} folder moved successfully.
C:\Users\Sven\AppData\Local\{B141B426-A902-4B7D-8E33-73C615C3E9F8} folder moved successfully.
C:\Users\Sven\AppData\Local\{B249090D-035A-46A5-8CD1-5B4CEDF4A316} folder moved successfully.
C:\Users\Sven\AppData\Local\{B27837CC-A72F-4233-AD19-0472E200E6D3} folder moved successfully.
C:\Users\Sven\AppData\Local\{B2CA18BE-81EB-4492-AEF0-584AEF1318B2} folder moved successfully.
C:\Users\Sven\AppData\Local\{B3020C5C-BD05-497C-96FA-5A970B3E151C} folder moved successfully.
C:\Users\Sven\AppData\Local\{B302A111-E058-4957-B7D5-249887267CCA} folder moved successfully.
C:\Users\Sven\AppData\Local\{B3359A76-A69A-43A6-A74D-FCEEFCD733BE} folder moved successfully.
C:\Users\Sven\AppData\Local\{B39F1D9B-A1BA-451B-913D-22A523E7120B} folder moved successfully.
C:\Users\Sven\AppData\Local\{B3DDDD76-38C7-4D2C-9EEC-1E5BA706073E} folder moved successfully.
C:\Users\Sven\AppData\Local\{B458FF99-47C1-4430-AAB2-3ADC3694232F} folder moved successfully.
C:\Users\Sven\AppData\Local\{B47052F5-0F6A-4B7B-8FFD-4D9AA344B838} folder moved successfully.
C:\Users\Sven\AppData\Local\{B5D9B91D-9207-41DF-96A6-C3A9E516DE26} folder moved successfully.
C:\Users\Sven\AppData\Local\{B6093AF2-DCBE-4587-852C-7BC5C6EFC954} folder moved successfully.
C:\Users\Sven\AppData\Local\{B672FC99-D30B-4744-B9E7-6D2569DD648B} folder moved successfully.
C:\Users\Sven\AppData\Local\{B6E7EA2E-1A72-4AB2-8757-A437EAD4F6CD} folder moved successfully.
C:\Users\Sven\AppData\Local\{B6F13723-617A-4CBA-98B5-AA1631A025BB} folder moved successfully.
C:\Users\Sven\AppData\Local\{B77FFA56-3F02-4FA1-8D94-D81FE34D36DB} folder moved successfully.
C:\Users\Sven\AppData\Local\{B7DAA915-0E21-41EC-9A1F-6EEB60114879} folder moved successfully.
C:\Users\Sven\AppData\Local\{B9012995-4EC0-476F-922A-059507AD3D24} folder moved successfully.
C:\Users\Sven\AppData\Local\{B9264354-A820-467C-AF6D-6EBB2A3CE227} folder moved successfully.
C:\Users\Sven\AppData\Local\{B9BD9B1F-F6A0-4CF6-A1C7-C18423C7E3A6} folder moved successfully.
C:\Users\Sven\AppData\Local\{BA219324-A0A9-416D-8F9E-2BBBD34E07FA} folder moved successfully.
C:\Users\Sven\AppData\Local\{BA3C1824-DCE3-438E-A582-371D38759432} folder moved successfully.
C:\Users\Sven\AppData\Local\{BA6A0656-6B74-4284-80CC-7C95E35D170B} folder moved successfully.
C:\Users\Sven\AppData\Local\{BA73A0D0-FE4D-42B2-B2C3-93BC87110392} folder moved successfully.
C:\Users\Sven\AppData\Local\{BB390CA9-036F-4FC1-AED4-1F5FDF71A609} folder moved successfully.
C:\Users\Sven\AppData\Local\{BBEC2F38-4BCD-4E2E-9CD2-48B5ECDE22CE} folder moved successfully.
C:\Users\Sven\AppData\Local\{BC3FCEC9-16A5-44B2-82E3-6B08F104A6A5} folder moved successfully.
C:\Users\Sven\AppData\Local\{BD740062-D0DD-4A3F-923E-7B6154EEEDCB} folder moved successfully.
C:\Users\Sven\AppData\Local\{BD971997-D9E2-4978-820F-58719A9A560E} folder moved successfully.
C:\Users\Sven\AppData\Local\{BE8BF267-F69F-4884-98B9-F6B4DC6B09DD} folder moved successfully.
C:\Users\Sven\AppData\Local\{BED992DE-E727-474A-9A0A-C737B61DA491} folder moved successfully.
C:\Users\Sven\AppData\Local\{BEDEEA68-0CC9-40CE-A199-E6D3470ECB57} folder moved successfully.
C:\Users\Sven\AppData\Local\{BEE152AE-345F-4AEB-95A5-1518CE4F0123} folder moved successfully.
C:\Users\Sven\AppData\Local\{BF2BBD29-E7B2-40AA-B0A3-DA8980CD1448} folder moved successfully.
C:\Users\Sven\AppData\Local\{BF399238-5D62-4E58-97C8-C73D202C8C85} folder moved successfully.
C:\Users\Sven\AppData\Local\{BF780155-6A95-44E7-9AA0-E0D9E640930A} folder moved successfully.
C:\Users\Sven\AppData\Local\{BFB648A3-3E0B-46FD-9E83-D845032DAF29} folder moved successfully.
C:\Users\Sven\AppData\Local\{BFC1856C-1941-4C34-B49B-6533DD5F53D9} folder moved successfully.
C:\Users\Sven\AppData\Local\{BFEF168F-D766-49C5-8ED2-2AA27B1621D7} folder moved successfully.
C:\Users\Sven\AppData\Local\{C004D3AC-2DD1-4933-88FB-9A9E999AB652} folder moved successfully.
C:\Users\Sven\AppData\Local\{C00CC026-A7D3-4625-99EC-167228A5F4B4} folder moved successfully.
C:\Users\Sven\AppData\Local\{C06AF165-A91A-40F9-956F-1A7711F67C60} folder moved successfully.
C:\Users\Sven\AppData\Local\{C080CE4E-F062-44D6-9AEB-D8E9473DF286} folder moved successfully.
C:\Users\Sven\AppData\Local\{C0A8D588-231C-41B1-AFE9-F905895EEF6E} folder moved successfully.
C:\Users\Sven\AppData\Local\{C0FB31A3-D76B-4D8F-9235-7A1505529CB7} folder moved successfully.
C:\Users\Sven\AppData\Local\{C1431969-4A30-4097-9919-8B56C0D4F378} folder moved successfully.
C:\Users\Sven\AppData\Local\{C183CA18-7196-4B97-8069-C58101D26313} folder moved successfully.
C:\Users\Sven\AppData\Local\{C1CE9ADF-FF0E-4FB9-980D-3AE0DA096933} folder moved successfully.
C:\Users\Sven\AppData\Local\{C23EADB2-757C-4AE7-B476-AF1166E461B3} folder moved successfully.
C:\Users\Sven\AppData\Local\{C2733E0C-493B-4129-9C75-B4C228C93F7D} folder moved successfully.
C:\Users\Sven\AppData\Local\{C2F72CF4-E0AA-4893-9D17-13DCEF105A97} folder moved successfully.
C:\Users\Sven\AppData\Local\{C2FCB89B-40B3-42B0-93A5-197876D127FB} folder moved successfully.
C:\Users\Sven\AppData\Local\{C3120517-EABA-4E3C-9924-14B8E45FE6C3} folder moved successfully.
C:\Users\Sven\AppData\Local\{C350B915-E466-4746-8A4C-F6136066B1A5} folder moved successfully.
C:\Users\Sven\AppData\Local\{C36C12DD-481C-40C3-B4C5-620368105AEA} folder moved successfully.
C:\Users\Sven\AppData\Local\{C37CCDB0-C6D4-4F4E-85FB-107E7FCA56DC} folder moved successfully.
C:\Users\Sven\AppData\Local\{C3C04CBB-FF45-41A6-996A-1B03534E3424} folder moved successfully.
C:\Users\Sven\AppData\Local\{C3CBD260-0DCE-41BC-AB29-28168D8110E1} folder moved successfully.
C:\Users\Sven\AppData\Local\{C3E6A419-BA31-46B0-B88E-151E574B7930} folder moved successfully.
C:\Users\Sven\AppData\Local\{C3F70458-9880-4847-B92D-805A35A70B68} folder moved successfully.
C:\Users\Sven\AppData\Local\{C4098BA4-5E15-4874-92E4-A251628D8E7E} folder moved successfully.
C:\Users\Sven\AppData\Local\{C40EE440-AC22-4A8F-BA7A-F373A8816813} folder moved successfully.
C:\Users\Sven\AppData\Local\{C457C6BA-DF1B-4011-A499-70B1065D237D} folder moved successfully.
C:\Users\Sven\AppData\Local\{C4825CA9-E4D7-42DA-8439-D246729E05EE} folder moved successfully.
C:\Users\Sven\AppData\Local\{C4FB7ECD-7662-45DC-9631-BA3001A20094} folder moved successfully.
C:\Users\Sven\AppData\Local\{C5CCE64E-42B8-4E4A-A344-7DE24D8BD444} folder moved successfully.
C:\Users\Sven\AppData\Local\{C5E5EB12-52EF-433B-A4B3-601CBBA28E91} folder moved successfully.
C:\Users\Sven\AppData\Local\{C71F60C4-DB6B-4E65-B54F-B414644570FE} folder moved successfully.
C:\Users\Sven\AppData\Local\{C75A155A-9B42-4938-8403-3FB1D2DB79A9} folder moved successfully.
C:\Users\Sven\AppData\Local\{C7646A71-4DCD-4D43-9497-698D83A06F7C} folder moved successfully.
C:\Users\Sven\AppData\Local\{C86623CC-23FF-4FEB-9236-D38569F6B8A9} folder moved successfully.
C:\Users\Sven\AppData\Local\{C8D160B5-B709-4D2B-8EFC-F08770490418} folder moved successfully.
C:\Users\Sven\AppData\Local\{C95295F9-D2E3-4D31-934A-36B3832EB4B6} folder moved successfully.
C:\Users\Sven\AppData\Local\{CA936F18-DBC3-4193-A648-2F9D528EAF49} folder moved successfully.
C:\Users\Sven\AppData\Local\{CB4DE8FD-8BA1-4244-A20F-D9513AC8B2D0} folder moved successfully.
C:\Users\Sven\AppData\Local\{CB53873D-5BB0-4AA7-8686-6FC79761F53C} folder moved successfully.
C:\Users\Sven\AppData\Local\{CB73C167-0663-4B44-82DD-06F3DCD032D1} folder moved successfully.
C:\Users\Sven\AppData\Local\{CBA4EB05-763B-4095-BE34-A3E9F290E86A} folder moved successfully.
C:\Users\Sven\AppData\Local\{CBAED954-956B-4A80-8102-5052887C1B8C} folder moved successfully.
C:\Users\Sven\AppData\Local\{CBAF80CE-AD28-4E9C-9AEF-F471DE043041} folder moved successfully.
C:\Users\Sven\AppData\Local\{CBCBF414-206D-4296-ADA1-F8BF9F1F6868} folder moved successfully.
C:\Users\Sven\AppData\Local\{CC04B830-31BD-4468-B34E-9ED6337E9E45} folder moved successfully.
C:\Users\Sven\AppData\Local\{CC21239C-36DF-49BD-A777-EAB77776E468} folder moved successfully.
C:\Users\Sven\AppData\Local\{CC72FE0D-EA27-450C-83A9-F3B4AF50AF31} folder moved successfully.
C:\Users\Sven\AppData\Local\{CC922187-6FFA-4825-A021-D22A8B31E885} folder moved successfully.
C:\Users\Sven\AppData\Local\{CCC8CEC3-3D30-41BE-80C7-C11649384036} folder moved successfully.
C:\Users\Sven\AppData\Local\{CD2D8C90-3EE3-4772-92F0-B394EC078A32} folder moved successfully.
C:\Users\Sven\AppData\Local\{CD368FC6-87BE-4D5D-AF5E-836A698E0F7D} folder moved successfully.
C:\Users\Sven\AppData\Local\{CD538659-F724-43E4-A7E6-5316E81BA439} folder moved successfully.
C:\Users\Sven\AppData\Local\{CDB9C183-5ECF-4F56-83C9-B5089808FA96} folder moved successfully.
C:\Users\Sven\AppData\Local\{CF5FD51E-ACEB-45E8-A78A-E1F0633E119E} folder moved successfully.
C:\Users\Sven\AppData\Local\{CF89059A-6AD6-4F8F-9DF7-F281CA5F3DC6} folder moved successfully.
C:\Users\Sven\AppData\Local\{CFDC7D70-9FCF-4E15-A4E4-47994DA01A98} folder moved successfully.
C:\Users\Sven\AppData\Local\{CFF3FF82-C6B7-4F39-8BCB-34D30E992831} folder moved successfully.
C:\Users\Sven\AppData\Local\{D0184946-59B0-437D-9E2F-27177F1A78A7} folder moved successfully.
C:\Users\Sven\AppData\Local\{D056B32E-5687-421A-A9BD-12AD43827C9D} folder moved successfully.
C:\Users\Sven\AppData\Local\{D07CBE26-B72C-4622-A81D-0C9F114EC490} folder moved successfully.
C:\Users\Sven\AppData\Local\{D09DEAFA-F533-48B2-B46C-328E03FADE9B} folder moved successfully.
C:\Users\Sven\AppData\Local\{D11F2652-0627-41D0-ACE7-20029C149CCF} folder moved successfully.
C:\Users\Sven\AppData\Local\{D1866F08-AD2A-4215-8266-38662D655F56} folder moved successfully.
C:\Users\Sven\AppData\Local\{D35946FA-50A3-4E27-A217-0E16173FEE2F} folder moved successfully.
C:\Users\Sven\AppData\Local\{D3AC73F1-BF75-4952-81C0-C5C3D8E56BA4} folder moved successfully.
C:\Users\Sven\AppData\Local\{D3ADAC83-392D-4A5E-98F8-36D3998BFFA8} folder moved successfully.
C:\Users\Sven\AppData\Local\{D3E37F25-216D-437D-A2EC-AB1CAF63563A} folder moved successfully.
C:\Users\Sven\AppData\Local\{D3F0CBF7-07AE-47F9-8E81-06E778282564} folder moved successfully.
C:\Users\Sven\AppData\Local\{D421BA35-14EC-430F-9CE3-CC938DC933AF} folder moved successfully.
C:\Users\Sven\AppData\Local\{D476E968-8282-4B6C-89EF-12FDFBF5F3C2} folder moved successfully.
C:\Users\Sven\AppData\Local\{D4A3A8B2-60A5-4B9E-91B7-5710C0D6EEF8} folder moved successfully.
C:\Users\Sven\AppData\Local\{D53FEBBA-2169-4366-8932-0527817A4193} folder moved successfully.
C:\Users\Sven\AppData\Local\{D5941E33-184F-420C-84B8-8DD7FC159DB7} folder moved successfully.
C:\Users\Sven\AppData\Local\{D6022B28-AC2F-458F-A09E-FE0BC29D00A8} folder moved successfully.
C:\Users\Sven\AppData\Local\{D63F1F44-C2AC-4A23-98E3-019F6D797A42} folder moved successfully.
C:\Users\Sven\AppData\Local\{D6D1FB7E-95AE-4BF9-9785-A29F49B5CCE1} folder moved successfully.
C:\Users\Sven\AppData\Local\{D799962B-A916-4F23-B5E1-090D06C79972} folder moved successfully.
C:\Users\Sven\AppData\Local\{D7FDA2D1-DAB4-41A9-8269-2AC1F49EBFE8} folder moved successfully.
C:\Users\Sven\AppData\Local\{D804B7EB-9251-4FD8-9118-2E473964A5BC} folder moved successfully.
C:\Users\Sven\AppData\Local\{D805F26B-40CC-4DE8-9E0C-A51EA6E68060} folder moved successfully.
C:\Users\Sven\AppData\Local\{D80AE9FD-B839-40F5-8312-555077F60D7B} folder moved successfully.
C:\Users\Sven\AppData\Local\{D84EC2FA-6355-479D-9036-35CF31455968} folder moved successfully.
C:\Users\Sven\AppData\Local\{D8A69729-DC89-4868-8601-A9E6603E80C4} folder moved successfully.
C:\Users\Sven\AppData\Local\{DA31BE96-9A9F-4585-91F5-753D27D25719} folder moved successfully.
C:\Users\Sven\AppData\Local\{DA3860EF-3CEB-4B5A-8B3D-43DB2F0ED6F0} folder moved successfully.
C:\Users\Sven\AppData\Local\{DA97AAC2-BD39-47E8-9E1C-9A188BC28D61} folder moved successfully.
C:\Users\Sven\AppData\Local\{DBE32EE8-5A66-433A-94A4-4E439FC1BD8A} folder moved successfully.
C:\Users\Sven\AppData\Local\{DBF127D1-DE80-4AC9-8036-5893E47EE261} folder moved successfully.
C:\Users\Sven\AppData\Local\{DC043074-75DE-42D6-A536-82D032DA743C} folder moved successfully.
C:\Users\Sven\AppData\Local\{DCC695C7-6B02-4C58-8B79-E4012069F580} folder moved successfully.
C:\Users\Sven\AppData\Local\{DD729A1C-6C1F-4E70-8901-9C9950F8C6A5} folder moved successfully.
C:\Users\Sven\AppData\Local\{DE687A9A-C116-478F-9010-153C2A13609F} folder moved successfully.
C:\Users\Sven\AppData\Local\{DEA0943A-0A8F-40C4-87DB-169B01E634C9} folder moved successfully.
C:\Users\Sven\AppData\Local\{DEB6B25A-99B5-4C2F-96CA-EEF309AB4AE9} folder moved successfully.
C:\Users\Sven\AppData\Local\{DECDB5C2-EAC1-4A43-AD76-B5D83AFE790D} folder moved successfully.
C:\Users\Sven\AppData\Local\{E0351158-4F71-49AE-8699-EA7A80FA496C} folder moved successfully.
C:\Users\Sven\AppData\Local\{E0719E12-CB01-4182-8B5C-F89A894BC6D9} folder moved successfully.
C:\Users\Sven\AppData\Local\{E102E871-E0CE-4E6F-B6A5-4FB4F10557CB} folder moved successfully.
C:\Users\Sven\AppData\Local\{E1047D68-00BC-4228-8EB2-22DAE801D943} folder moved successfully.
C:\Users\Sven\AppData\Local\{E12EA5E0-F099-4645-A0AD-FF64D4EB2001} folder moved successfully.
C:\Users\Sven\AppData\Local\{E16FCA42-4622-4BDE-9CE3-884EFC25AB35} folder moved successfully.
C:\Users\Sven\AppData\Local\{E1C83E41-00A7-4AA3-BE79-838F7996C13E} folder moved successfully.
C:\Users\Sven\AppData\Local\{E24A4B48-5207-4737-BCEE-EBEAE916926A} folder moved successfully.
C:\Users\Sven\AppData\Local\{E2B48F59-8E7F-4F06-9EF3-E2D8E0AC7A6E} folder moved successfully.
C:\Users\Sven\AppData\Local\{E2E15F53-650B-47C0-A871-E4C600D41607} folder moved successfully.
C:\Users\Sven\AppData\Local\{E3DFFCF0-464C-4D49-ABAE-120E1DF772D4} folder moved successfully.
C:\Users\Sven\AppData\Local\{E4623159-32BB-4B00-8388-DD019DE21A63} folder moved successfully.
C:\Users\Sven\AppData\Local\{E4F3041F-A559-4A7B-ACA8-2072D0AD769F} folder moved successfully.
C:\Users\Sven\AppData\Local\{E4FFFD66-6816-402A-A00A-B50E098FC02D} folder moved successfully.
C:\Users\Sven\AppData\Local\{E5250DC3-FDAB-4455-A46C-C215DD71E7E7} folder moved successfully.
C:\Users\Sven\AppData\Local\{E5477671-5F86-4CC5-B846-5BFDA7A756FE} folder moved successfully.
C:\Users\Sven\AppData\Local\{E61F70A7-E9D9-45A1-A4D7-2551AEC560CC} folder moved successfully.
C:\Users\Sven\AppData\Local\{E6A4E35E-13E7-413E-95FC-F2D73913CE85} folder moved successfully.
C:\Users\Sven\AppData\Local\{E6CFD378-C452-4385-9A0E-74846D86D1D4} folder moved successfully.
C:\Users\Sven\AppData\Local\{E7BF9EC0-62A0-466C-9B02-59ED1AA9B0B9} folder moved successfully.
C:\Users\Sven\AppData\Local\{E8843264-DD2C-4BC2-8734-CA205D8E13CD} folder moved successfully.
C:\Users\Sven\AppData\Local\{E8904233-9BC6-49AD-84E7-4255F61B6EBB} folder moved successfully.
C:\Users\Sven\AppData\Local\{E9576017-9020-445A-8BB3-F9AC917EA871} folder moved successfully.
C:\Users\Sven\AppData\Local\{E9B0E67C-8553-4F8B-BD92-E2B0CA9B7824} folder moved successfully.
C:\Users\Sven\AppData\Local\{E9E025B0-6750-4854-8767-E02A2B274F22} folder moved successfully.
C:\Users\Sven\AppData\Local\{EA57EBE7-5A3D-41A1-9F73-20A3B250B3B8} folder moved successfully.
C:\Users\Sven\AppData\Local\{EA8BCF8B-8747-4FA4-8E15-8E5857C1784A} folder moved successfully.
C:\Users\Sven\AppData\Local\{EB894D79-750E-4F96-B02B-485173F599D2} folder moved successfully.
C:\Users\Sven\AppData\Local\{EBBEC34A-B359-436A-858B-ABB60242FADB} folder moved successfully.
C:\Users\Sven\AppData\Local\{EC2CB2D5-B49D-473F-9A95-D897B7C45939} folder moved successfully.
C:\Users\Sven\AppData\Local\{EC7FFC8C-685C-4736-A63B-B2250350AC4E} folder moved successfully.
C:\Users\Sven\AppData\Local\{ECB7D967-87FE-4A1B-9DDB-BE91D537521F} folder moved successfully.
C:\Users\Sven\AppData\Local\{ECBC9173-70BA-454F-8540-F353B685AC78} folder moved successfully.
C:\Users\Sven\AppData\Local\{ED95EBC6-CCE5-4D40-B7A8-013D431CF4D7} folder moved successfully.
C:\Users\Sven\AppData\Local\{EDDDE7CD-654A-4C34-BC0D-F612B6ACDD29} folder moved successfully.
C:\Users\Sven\AppData\Local\{EE659323-14D3-4F81-806A-21E52CE61662} folder moved successfully.
C:\Users\Sven\AppData\Local\{EEC37987-685B-48A7-83EA-8454278BEC1B} folder moved successfully.
C:\Users\Sven\AppData\Local\{EED70098-F0E8-4408-8D66-C2FD5C70C106} folder moved successfully.
C:\Users\Sven\AppData\Local\{F055AE6D-559B-44D3-A0DA-8C0B4774A642} folder moved successfully.
C:\Users\Sven\AppData\Local\{F064D0C6-8B83-4818-A263-2C446D3E3372} folder moved successfully.
C:\Users\Sven\AppData\Local\{F07AB3E0-4D43-4B8F-AEF2-EE0B86B288C7} folder moved successfully.
C:\Users\Sven\AppData\Local\{F082FC30-5716-45EA-B2AA-7873DA5052EA} folder moved successfully.
C:\Users\Sven\AppData\Local\{F11BF86A-5CB5-45F7-B4F6-AD5C50BCB9B1} folder moved successfully.
C:\Users\Sven\AppData\Local\{F127BA34-CE7A-4284-A52F-BECADC03E494} folder moved successfully.
C:\Users\Sven\AppData\Local\{F1581F0F-7C18-42B8-9798-CFF3AD852E5F} folder moved successfully.
C:\Users\Sven\AppData\Local\{F19EC60A-0DAB-4B64-86AB-9B1DB9DE16EC} folder moved successfully.
C:\Users\Sven\AppData\Local\{F2653EE5-1778-4AB9-955F-95A722C3E8AE} folder moved successfully.
C:\Users\Sven\AppData\Local\{F2B88BB9-FFD6-4C16-9F5B-1F170E84FAE2} folder moved successfully.
C:\Users\Sven\AppData\Local\{F3D9409E-8C64-4A68-81F4-055AFFD87315} folder moved successfully.
C:\Users\Sven\AppData\Local\{F470E81C-782C-40D8-B9E3-92D056FB76FC} folder moved successfully.
C:\Users\Sven\AppData\Local\{F5237665-2AE5-4D83-B6A7-B4DE2D547201} folder moved successfully.
C:\Users\Sven\AppData\Local\{F5552100-883A-4FD1-8783-D54214614EAD} folder moved successfully.
C:\Users\Sven\AppData\Local\{F60D61DB-9D36-4CFB-A2D2-A75ADC02A694} folder moved successfully.
C:\Users\Sven\AppData\Local\{F6537DA0-27F1-4334-9263-2E26F7F6D9AA} folder moved successfully.
C:\Users\Sven\AppData\Local\{F6574383-CA7A-497D-B6F7-39C517494884} folder moved successfully.
C:\Users\Sven\AppData\Local\{F676125B-8E36-478A-90F2-A8D5674CE58A} folder moved successfully.
C:\Users\Sven\AppData\Local\{F72F79EC-FE5D-458E-BE5A-B3C68C917EB6} folder moved successfully.
C:\Users\Sven\AppData\Local\{F740184A-325C-4A2F-A129-6CCDDEE5DA68} folder moved successfully.
C:\Users\Sven\AppData\Local\{F7454BED-1580-4FFE-B248-F70A59C505C2} folder moved successfully.
C:\Users\Sven\AppData\Local\{F85CA4B2-D12D-4058-A540-3F6C7159BFB0} folder moved successfully.
C:\Users\Sven\AppData\Local\{F8760205-D61A-460B-8D9F-2371CECC3915} folder moved successfully.
C:\Users\Sven\AppData\Local\{F8956F7D-8961-4952-A715-D7BF598D5EF7} folder moved successfully.
C:\Users\Sven\AppData\Local\{F8A70DE8-03E7-43C8-9286-F77171E7B60B} folder moved successfully.
C:\Users\Sven\AppData\Local\{FA32841A-9546-4D76-80D9-E8970699E5A4} folder moved successfully.
C:\Users\Sven\AppData\Local\{FACCE02E-57EC-4845-9E12-EEA635144657} folder moved successfully.
C:\Users\Sven\AppData\Local\{FB3D0793-C91D-404F-B426-AE3642ECE9CB} folder moved successfully.
C:\Users\Sven\AppData\Local\{FB93C9C8-CCBA-41E5-A57D-B7DD9554465C} folder moved successfully.
C:\Users\Sven\AppData\Local\{FBA21B49-767C-4771-81F3-989957411704} folder moved successfully.
C:\Users\Sven\AppData\Local\{FBADBA3F-1493-404A-B1F5-8F8EB15CE260} folder moved successfully.
C:\Users\Sven\AppData\Local\{FBB0581E-CD79-40CC-8A89-339D23F0DD8E} folder moved successfully.
C:\Users\Sven\AppData\Local\{FC0705DB-14BF-4E14-957F-4FACFCB605E1} folder moved successfully.
C:\Users\Sven\AppData\Local\{FC8E70B2-002F-43B0-AE3F-182E317EC175} folder moved successfully.
C:\Users\Sven\AppData\Local\{FD88D89B-D7A4-42B0-A79B-1F34737D76AF} folder moved successfully.
C:\Users\Sven\AppData\Local\{FDC8DFFA-8A32-4A0E-BB38-8EDFFE2EAC55} folder moved successfully.
C:\Users\Sven\AppData\Local\{FDEE7821-43D2-44EC-B8C9-DEDB2AB119DA} folder moved successfully.
C:\Users\Sven\AppData\Local\{FE662F28-6B15-4926-96A2-85F10F22863C} folder moved successfully.
C:\Users\Sven\AppData\Local\{FE765DA8-C6FC-423E-BB4B-9E1365061E8F} folder moved successfully.
C:\Users\Sven\AppData\Local\{FEB2A213-3EE7-4AC1-AED0-12065B6626D8} folder moved successfully.
C:\Users\Sven\AppData\Local\Temp\131068.exe moved successfully.
C:\Users\Sven\AppData\Local\Temp\278524.exe moved successfully.
C:\Users\Sven\AppData\Local\Temp\385020.exe moved successfully.
C:\Users\Sven\AppData\Local\Temp\NGMSetup.exe moved successfully.
C:\Users\Sven\AppData\Local\Temp\SkypeSetup.exe moved successfully.
C:\Users\Sven\AppData\Local\Temp\tmp4f5fcf1c.exe moved successfully.
C:\Users\Sven\AppData\Local\Temp\tmpe19c6cb8.exe moved successfully.
File\Folder C:\Users\Sven\AppData\LocalLow\Sun\Java\Deployment\cache not found.
File/Folder C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk not found.
< ipconfig /flushdns /c >
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache konnte nicht geleert werden: Beim Ausfhren der Funktion ist ein Fehler aufgetreten.
C:\Users\Sven\Desktop\cmd.bat deleted successfully.
C:\Users\Sven\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: Sven
->Temp folder emptied: 638141800 bytes
->Temporary Internet Files folder emptied: 1283827197 bytes
->Google Chrome cache emptied: 365369200 bytes
->Flash cache emptied: 8223058 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 318309753 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36031353 bytes
RecycleBin emptied: 4328544245 bytes

Total Files Cleaned = 6,655.00 mb


OTL by OldTimer - Version 3.2.61.3 log created on 09122012_144001

Files\Folders moved on Reboot...
File move failed. E:\autorun.inf scheduled to be moved on reboot.
File move failed. E:\Einstiegsseite.exe scheduled to be moved on reboot.
C:\Users\Sven\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

da fällt mir ein... kann der rechner jetzt auch wieder ins internet?
der alte über den ich jetzt hier schreibe ist schon sehr langsam ;-)

Alt 15.09.2012, 11:24   #7
SvenK
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft



hmm mal ne blöde Frage... bin ich mit der Prozedur schon durch?
Muss ich noch irgendwas machen?

VG

Sven

Alt 16.09.2012, 18:56   #8
t'john
/// Helfer-Team
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft



Ich sage bescheid, wenn wir durch sind

Sehr gut!

Wie laeuft der Rechner?

1. Schritt
Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Malwarebytes Anti-Malware
- Anwendbar auf Windows 2000, XP, Vista und 7.
- Installiere das Programm in den vorgegebenen Pfad.
- Aktualisiere die Datenbank!
- Aktiviere "Komplett Scan durchführen" => Scan.
- Wähle alle verfügbaren Laufwerke (ausser CD/DVD) aus und starte den Scan.
- Funde bitte löschen lassen oder in Quarantäne.
- Wenn der Scan beendet ist, klicke auf "Zeige Resultate".
danach:

2. Schritt

Downloade Dir bitte AdwCleaner auf deinen Desktop.

  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Search.
  • Nach Ende des Suchlaufs öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.
__________________
Mfg, t'john
Das TB unterstützen

Alt 16.09.2012, 22:15   #9
SvenK
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft



# AdwCleaner v2.002 - Datei am 09/16/2012 um 22:14:40 erstellt
# Aktualisiert am 16/09/2012 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Sven - SVEN-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Sven\Desktop\adwcleaner.exe
# Option [Suche]


**** [Dienste] ****


***** [Dateien / Ordner] *****


***** [Registrierungsdatenbank] *****

Schlüssel Gefunden : HKLM\Software\Conduit

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Google Chrome v17.0.963.56

Datei : C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[R1].txt - [752 octets] - [16/09/2012 22:14:40]

########## EOF - C:\AdwCleaner[R1].txt - [811 octets] ##########

Alt 18.09.2012, 03:11   #10
t'john
/// Helfer-Team
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft



Bitte das Malwarebytes Logfile posten!
(Reiter Logberichte)
__________________
Mfg, t'john
Das TB unterstützen

Alt 18.09.2012, 20:12   #11
SvenK
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft



Malwarebytes Anti-Malware (Test) 1.65.0.1400
www.malwarebytes.org

Datenbank Version: v2012.09.16.11

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Sven :: SVEN-PC [Administrator]

Schutz: Aktiviert

16.09.2012 21:01:53
mbam-log-2012-09-16 (21-01-53).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 480306
Laufzeit: 1 Stunde(n), 49 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 4
HKCR\CLSID\{EFF39A40-C163-4d5d-B073-52FBB55C646A} (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EFF39A40-C163-4D5D-B073-52FBB55C646A} (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{EFF39A40-C163-4D5D-B073-52FBB55C646A} (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EFF39A40-C163-4D5D-B073-52FBB55C646A} (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 30
C:\Users\Sven\AppData\Roaming\Cuin\koado.exe (Spyware.Zbot) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Dees\agud.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Ecwi\uhink.exe (Trojan.Agent.TKH) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Eqanan\roazd.exe (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Gefe\kaobm.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Geus\esyf.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Giyhly\byqy.exe (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Hiep\cawi.exe (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Hyqyta\utfa.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Kaox\loaco.exe (Trojan.Winlock.G) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Minis\ymhoz.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Raaw\afmu.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Siciyv\hyepu.exe (Trojan.Winlock) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Taygva\ufys.exe (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Uvexid\kiuko.exe (Trojan.Agent.AZBGen) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Vagi\moce.exe (Trojan.MSIL) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Wily\suyq.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Yhxuh\eqku.exe (Trojan.MSIL) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Yqfa\icuwi.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Sven\AppData\Roaming\Zeaqb\lamy.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\09122012_144001\C_ProgramData\huapcfpu.exe (Trojan.Ransom) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\ms.exe (Trojan.Ransom) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Local\Temp\131068.exe (Trojan.Dropper) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Local\Temp\278524.exe (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Local\Temp\385020.exe (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Local\Temp\tmp4f5fcf1c.exe (Trojan.Inject) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Local\Temp\tmpe19c6cb8.exe (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Roaming\AcroIEHelpe068.dll (Trojan.Passwords) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Roaming\appconf32.exe (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Roaming\Wouqh\nyzym.exe (Spyware.Zbot.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Alt 19.09.2012, 18:52   #12
t'john
/// Helfer-Team
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft



Malware mit Combofix beseitigen

Lade Combofix von einem der folgenden Download-Spiegel herunter:

BleepingComputer.com - ForoSpyware.com

und speichere das Programm auf den Desktop, nicht woanders hin, das ist wichtig!
Beachte die ausführliche Original-Anleitung.

Zurzeit ist Combofix auf folgenden Windows-Versionen lauffähig:
  • Windows XP (nur 32-bit)
  • Windows Vista (32-bit/64-bit)
  • Windows 7 (32-bit/64-bit)


Vorbereitung und wichtige Hinweise

  • Bitte während des Scans mit Combofix Antiviren- sowie Antispy-Programme, die Firewall und evtl. vorhandenes Skript-Blocking (Norton) deaktivieren.
  • Liste der zu deaktivierenden Programme.
    Bei Unklarheiten bitte fragen.


  • ComboFix wird Deine Einstellungen in Bezug auf den Bildschirmschoner zurücksetzen.
  • Diese Einstellungen kannst Du nach Beendigung unserer Bereinigung wieder ändern.
  • Mache nichts anderes, wenn es Dir nicht gelungen ist, Combofix laufen zu lassen.
  • Teile uns das mit und warte auf unsere Anweisungen.


  • Starte die Combofix.exe mit Rechtsklick => Als Administrator ausführen und folge den Anweisungen.
  • Während des Laufs von Combofix nichts anderes am Computer machen!
  • Akzeptiere die Bedingungen (Disclaimer) mit "Ja".


  • Sollte Combofix eine aktuellere Version anbieten, Downlaod erlauben.
  • Klicke "Ja", um mit dem Suchlauf nach Malware fortzufahren.
  • Es erscheint eine blaue Eingabeaufforderung, Combofix wird für den Suchlauf vorbereitet.
  • Bitte nicht in dieses Combofix-Fenster klicken.
  • Das könnte Dein System einfrieren oder hängen bleiben lassen.
  • Es wird ein Backup Deiner Registry erstellt.
  • Nun werden die einzelnen Stufen des Programms abgearbeitet, das kann eine Weile dauern.


  • Wenn ComboFix fertig ist, wird es ein Log erstellen (bitte warten, das dauert einen Moment).
  • Unbedingt warten, bis sich das Combofix-Fenster geschlossen hat und das Logfile im Editor erscheint.
  • Bitte poste die Log-Dateien C:\ComboFix.txt und C:\Qoobox\Add-Remove Programs.txt in Code-Tags hier in den Thread.


  • Hinweis: Combofix macht aus verschiedenen Gründen den Internet Explorer zum Standard-Browser und erstellt ein IE-Icon auf dem Desktop.
  • Das IE-Desktop-Icon kannst Du nach der Bereinigung wieder löschen und Deinen bevorzugten Browser wieder als Standard-Browser einstellen.



Combofix nicht auf eigene Faust einsetzen. Wenn keine entsprechende Infektion vorliegt, kann das den Rechner lahmlegen und/oder nachhaltig schädigen!
__________________
Mfg, t'john
Das TB unterstützen

Alt 24.09.2012, 18:05   #13
SvenK
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft



Combofix Logfile:
Code:
ATTFilter
ComboFix 12-09-24.02 - Sven 24.09.2012  17:52:45.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8103.6375 [GMT 2:00]
ausgeführt von:: c:\users\Sven\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Disabled/Outdated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Sven\003.jpg
c:\users\Sven\004.jpg
c:\users\Sven\005.jpg
c:\users\Sven\03.jpg
c:\users\Sven\AppData\Roaming\Aqehx
c:\users\Sven\AppData\Roaming\Aqehx\qyqiq.ive
c:\users\Sven\AppData\Roaming\Aqteer
c:\users\Sven\AppData\Roaming\Aqteer\luyx.evl
c:\users\Sven\AppData\Roaming\Atalo
c:\users\Sven\AppData\Roaming\Atalo\qevah.orc
c:\users\Sven\AppData\Roaming\Baqeh
c:\users\Sven\AppData\Roaming\Baqeh\iwuzm.afy
c:\users\Sven\AppData\Roaming\Byoh
c:\users\Sven\AppData\Roaming\Byoh\qiqua.dys
c:\users\Sven\AppData\Roaming\Ciewe
c:\users\Sven\AppData\Roaming\Ciewe\ekysd.exe
c:\users\Sven\AppData\Roaming\Daok
c:\users\Sven\AppData\Roaming\Daok\arucr.utc
c:\users\Sven\AppData\Roaming\Dili
c:\users\Sven\AppData\Roaming\Dili\yrmee.ing
c:\users\Sven\AppData\Roaming\Dyna
c:\users\Sven\AppData\Roaming\Dyna\ysqu.uku
c:\users\Sven\AppData\Roaming\Eknee
c:\users\Sven\AppData\Roaming\Eknee\hyne.usg
c:\users\Sven\AppData\Roaming\Ekoneg
c:\users\Sven\AppData\Roaming\Ekoneg\aqhoi.hye
c:\users\Sven\AppData\Roaming\Ekqo
c:\users\Sven\AppData\Roaming\Ekqo\ehoqf.ypg
c:\users\Sven\AppData\Roaming\Fuwowi
c:\users\Sven\AppData\Roaming\Fuwowi\hyemi.zun
c:\users\Sven\AppData\Roaming\Giwev
c:\users\Sven\AppData\Roaming\Giwev\toufm.ozy
c:\users\Sven\AppData\Roaming\Guxyw
c:\users\Sven\AppData\Roaming\Guxyw\ohcea.riv
c:\users\Sven\AppData\Roaming\Gyixo
c:\users\Sven\AppData\Roaming\Gyixo\kaewi.ota
c:\users\Sven\AppData\Roaming\Init
c:\users\Sven\AppData\Roaming\Init\puov.exe
c:\users\Sven\AppData\Roaming\Inoz
c:\users\Sven\AppData\Roaming\Inoz\atin.woi
c:\users\Sven\AppData\Roaming\Ivvu
c:\users\Sven\AppData\Roaming\Ivvu\wievi.ape
c:\users\Sven\AppData\Roaming\Ixlib
c:\users\Sven\AppData\Roaming\Ixlib\pyome.uba
c:\users\Sven\AppData\Roaming\Kacet
c:\users\Sven\AppData\Roaming\Kacet\erohm.exe
c:\users\Sven\AppData\Roaming\Losa
c:\users\Sven\AppData\Roaming\Losa\nain.bou
c:\users\Sven\AppData\Roaming\Loyrke
c:\users\Sven\AppData\Roaming\Loyrke\ibake.apm
c:\users\Sven\AppData\Roaming\Meykg
c:\users\Sven\AppData\Roaming\Meykg\xeaga.arc
c:\users\Sven\AppData\Roaming\Okvuo
c:\users\Sven\AppData\Roaming\Okvuo\ogobo.exe
c:\users\Sven\AppData\Roaming\Quoc
c:\users\Sven\AppData\Roaming\Quoc\icraz.exe
c:\users\Sven\AppData\Roaming\srvblck2.tmp
c:\users\Sven\AppData\Roaming\Zuraut
c:\users\Sven\AppData\Roaming\Zuraut\obkyb.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-08-24 bis 2012-09-24  ))))))))))))))))))))))))))))))
.
.
2012-09-24 16:00 . 2012-09-24 16:00	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2012-09-24 16:00 . 2012-09-24 16:00	--------	d-----w-	c:\users\Default\AppData\Local\temp
2012-09-24 15:57 . 2012-09-24 15:57	69000	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{72D653DD-328F-4080-85D0-BBBC229D4E39}\offreg.dll
2012-09-21 19:56 . 2012-08-30 07:27	9308616	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{72D653DD-328F-4080-85D0-BBBC229D4E39}\mpengine.dll
2012-09-16 19:07 . 2012-08-22 18:12	950128	----a-w-	c:\windows\system32\drivers\ndis.sys
2012-09-16 19:07 . 2012-07-04 20:26	41472	----a-w-	c:\windows\system32\drivers\RNDISMP.sys
2012-09-16 19:07 . 2012-08-02 17:58	574464	----a-w-	c:\windows\system32\d3d10level9.dll
2012-09-16 19:07 . 2012-08-02 16:57	490496	----a-w-	c:\windows\SysWow64\d3d10level9.dll
2012-09-16 19:07 . 2012-08-22 18:12	1913200	----a-w-	c:\windows\system32\drivers\tcpip.sys
2012-09-16 19:07 . 2012-08-22 18:12	376688	----a-w-	c:\windows\system32\drivers\netio.sys
2012-09-16 19:07 . 2012-08-22 18:12	288624	----a-w-	c:\windows\system32\drivers\FWPKCLNT.SYS
2012-09-16 19:00 . 2012-09-16 19:00	--------	d-----w-	c:\users\Sven\AppData\Roaming\Malwarebytes
2012-09-16 19:00 . 2012-09-16 19:00	--------	d-----w-	c:\programdata\Malwarebytes
2012-09-16 19:00 . 2012-09-16 19:00	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2012-09-16 19:00 . 2012-09-07 15:04	25928	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-09-12 12:40 . 2012-09-12 12:40	--------	d-----w-	C:\_OTL
2012-09-01 05:38 . 1998-06-17 17:07	57344	----a-w-	c:\windows\SysWow64\Mfc42loc.dll
2012-09-01 05:38 . 2012-09-01 05:38	--------	d-----w-	c:\program files (x86)\Bethesda Softworks
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-17 18:49 . 2012-08-17 18:49	4608	----a-w-	c:\windows\SysWow64\w95inf32.dll
2012-08-17 18:49 . 2012-08-17 18:49	2272	----a-w-	c:\windows\SysWow64\w95inf16.dll
2012-07-18 18:15 . 2012-08-15 14:50	3148800	----a-w-	c:\windows\system32\win32k.sys
2012-07-06 20:07 . 2012-08-15 21:25	552960	----a-w-	c:\windows\system32\drivers\bthport.sys
2012-07-04 22:16 . 2012-08-15 14:50	73216	----a-w-	c:\windows\system32\netapi32.dll
2012-07-04 22:13 . 2012-08-15 14:50	59392	----a-w-	c:\windows\system32\browcli.dll
2012-07-04 22:13 . 2012-08-15 14:50	136704	----a-w-	c:\windows\system32\browser.dll
2012-07-04 21:14 . 2012-08-15 14:50	41984	----a-w-	c:\windows\SysWow64\browcli.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KPeerNexonEU"="c:\nexon\NEXON_EU_Downloader\nxEULauncher.exe" [2011-09-16 438272]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2008-09-06 413696]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-10-22 1133856]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages	REG_MULTI_SZ   	kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 CLKMSVC10_38F51D56;CyberLink Product - 2011/04/08 18:32;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2010-08-25 246256]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-03-01 183560]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x]
R3 Samsung UPD Service;Samsung UPD Service;c:\windows\System32\SUPDSvc.exe [2010-08-09 166704]
R3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-06-29 155344]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-10-08 150016]
R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2011-01-17 25960]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1207020.003\SYMDS64.SYS [2011-01-27 450680]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1207020.003\SYMEFA64.SYS [2011-03-15 912504]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20110909.001\BHDrvx64.sys [2011-09-09 1152632]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20110922.030\IDSvia64.sys [2011-09-15 488568]
S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys [2009-05-28 13824]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS [2011-01-27 171128]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1207020.003\SYMNETS.SYS [2011-04-21 386168]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2011-01-25 60416]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-09-07 399432]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-07 676936]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe [2011-04-17 130008]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-01-17 2009704]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-03-19 2666880]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-10-08 19192]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
S3 BTWAMPFL;BTWAMPFL;c:\windows\system32\DRIVERS\btwampfl.sys [2010-09-21 348712]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-03-02 39464]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [2010-11-09 31088]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-09-17 136824]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-08-31 118664]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-07 25928]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-09-21 56344]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-12-03 80384]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-12-03 181248]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-11-25 409192]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - CLKMDRV10_38F51D56
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-17 11613288]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://samsung.msn.com
mStart Page = hxxp://samsung.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.1.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\diMaster.dll\" /prefetch:1"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va008]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2012-09-24  18:04:01
ComboFix-quarantined-files.txt  2012-09-24 16:04
.
Vor Suchlauf: 13 Verzeichnis(se), 119.654.998.016 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 120.950.919.168 Bytes frei
.
- - End Of File - - 4D51DB9395B4BD1CB12CEB6F99DB80FC
         
--- --- ---


?? ??? ?? Windows Live Mesh ActiveX ???
??? ActiveX ?? Windows Live Mesh ???? ??????? ???????
???? ??? Windows Live
???? ???? ActiveX ????? ?? Windows Live Mesh ????????? ???????
???? Windows Live
????? Messenger
????? Windows Live
?????? ??????? ?? Windows Live
??????? ?????????? Windows Live Mesh ActiveX ??? ????????? ???????????
??????? Windows Live Mesh ActiveX ??(????)
??????? Windows Live Mesh ActiveX ???
???????? ?? Messenger
???????? ?????????? Windows Live
????????? ActiveX ?? Windows Live Mesh ????????????????????????? (???)
????????? Messenger
?????????? Windows Live
??????????? ?? Windows Live
ActiveX-kontroll för fjärranslutningar för Windows Live Mesh
ActiveX ???????? ?? Windows Live Mesh ?? ?????????? ??????
Adobe AIR
Adobe Reader 9.1 - Deutsch
Agatha Christie - Death on the Nile
AION Free-To-Play
„Messenger“ pagalbine priemone
Apple Software Update
Atlantica
„Windows Live Essentials“
„Windows Live Mail“
„Windows Live Mesh ActiveX“ nuotoliniu ryšiu valdiklis
„Windows Live Messenger“
„Windows Live“ fotogalerija
Baldur's Gate(TM) II - Schatten von Amn(TM)
Bandisoft MPEG-1 Decoder
BatteryLifeExtender
Bejeweled 2 Deluxe
Bing Bar
Build-a-lot
Call To Power 2
ChargeableUSB
Chuzzle Deluxe
Combat Arms EU
Complemento Messenger
Complément Messenger
Contrôle ActiveX Windows Live Mesh pour connexions à distance
Control ActiveX de Windows Live Mesh para conexiones remotas
Control ActiveX Windows Live Mesh pentru conexiuni la distan?a
Controle ActiveX do Windows Live Mesh para Conexões Remotas
Controlo ActiveX do Windows Live Mesh para Ligações Remotas
CyberLink Media Suite
CyberLink MediaShow
CyberLink Power2Go
CyberLink PowerDirector
CyberLink PowerDVD 10
CyberLink YouCam
D3DX10
Diner Dash 2 Restaurant Rescue
Doplnok programu Messenger
Drakensang Online
EA Installer
Easy Content Share
Easy Display Manager
Easy Migration
Easy Network Manager
Easy SpeedUp Manager
EasyBatteryManager
EasyFileShare
EverQuest II
Farm Frenzy
Fast Start
FLV Player 2.0 (build 25)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsluge polaczen zdalnych
Fotogalerija Windows Live
FUSSBALL MANAGER 11
Galeria de Fotografias do Windows Live
Galeria fotografii uslugi Windows Live
Galerie de photos Windows Live
Galerie foto Windows Live
Galería fotográfica de Windows Live
Google Chrome
Gunblade Saga
Insaniquarium Deluxe
Intel(R) Control Center
Intel(R) Management Engine Components
Intel(R) Processor Graphics
Intel(R) Rapid Storage Technology
John Deere Drive Green
Junk Mail filter update
Kontrola Windows Live Mesh ActiveX za daljinske veze
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave
League of Legends
Malwarebytes Anti-Malware Version 1.65.0.1400
Media Go
Mesh Runtime
Messenger-kumppani
Messenger ??? ??
Messenger ????
Messenger ?????
Messenger Assistent
Messenger Companion
Messenger kíséro
Messenger Pratilac
Messenger Suradnik
Microsoft Office 2010
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable - KB2467175
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Morrowind
Movie Color Enhancer
MSVCRT
MSVCRT_amd64
Multimedia POP
NC Launcher (GameForge)
Nexon Game Manager
Norton Internet Security
Norton Online Backup
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená pripojení
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia
Pando Media Booster
Peggle
Penguins!
PhoneShare
PlayStation(R)Network Downloader
PlayStation(R)Store
Poczta uslugi Windows Live
Podstawowe programy Windows Live
Polar Golfer
Pomocnik Messenger
Pošta Windows Live
QuickTime
Raccolta foto di Windows Live
Realtek Ethernet Controller Driver
Realtek High Definition Audio Driver
Renesas Electronics USB 3.0 Host Controller Driver
S?????? f?t???af??? t?? Windows Live
Samsung AnyWeb Print
Samsung Printer Live Update
Samsung Recovery Solution 5
Samsung Support Center
Samsung Universal Print Driver
Samsung Universal Scan Driver
Samsung Update Plus
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870)
Skype Click to Call
Skype™ 5.10
Sony Ericsson PC Companion 2.01.210
Spremljevalec Messenger
St???e?? e?????? ActiveX t?? Windows Live Mesh ??a ap?µa???sµ??e? s??d?se??
TeamViewer 7
TES Construction Set
Unity Web Player
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
User Guide
Uzak Baglantilar Için Windows Live Mesh ActiveX Denetimi
WildTangent Games
WildTangent ORB Game Console
Windows Live
Windows Live ??
Windows Live ?? ???
Windows Live ???
Windows Live ????
Windows Live Communications Platform
Windows Live Essentials
Windows Live Fotótár
Windows Live Foto-galerija
Windows Live fotoattelu galerija
Windows Live Fotogalerie
Windows Live Fotogalleri
Windows Live Fotogaléria
Windows Live Fotograf Galerisi
Windows Live Galeria de Fotos
Windows Live Galerija fotografija
Windows Live Installer
Windows Live Mail
Windows Live Mesh
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger
Windows Live Mesh ActiveX-objekt til fjernforbindelser
Windows Live Mesh ActiveX-vezérlo távoli kapcsolatokhoz
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Mesh ActiveX kontrola za daljinske veze
Windows Live Mesh ActiveX vadikla attalajiem savienojumiem
Windows Live Meshin etäyhteyksien ActiveX-komponentti
Windows Live Messenger
Windows Live Messenger Companion Core
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Pošta
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Temel Parçalar
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Windows Liven asennustyökalu
Windows Liven sähköposti
Windows Liven valokuvavalikoima
WordCaptureX Pro
Yahoo! Messenger
Yahoo! Software Update
Yahoo! Toolbar
Zuma Deluxe

Alt 25.09.2012, 11:24   #14
t'john
/// Helfer-Team
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft



Sehr gut!


  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Delete.
  • Bestätige jeweils mit Ok.
  • Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[S1].txt.




danach:


Malware-Scan mit Emsisoft Anti-Malware

Lade die Gratisversion von => Emsisoft Anti-Malware herunter und installiere das Programm.
Lade über Jetzt Updaten die aktuellen Signaturen herunter.
Wähle den Freeware-Modus aus.

Wähle Detail Scan und starte über den Button Scan die Überprüfung des Computers.
Am Ende des Scans nichts loeschen lassen!. Mit Klick auf Bericht speichern das Logfile auf dem Desktop speichern und hier in den Thread posten.

Anleitung: http://www.trojaner-board.de/103809-...i-malware.html
__________________
Mfg, t'john
Das TB unterstützen

Alt 01.10.2012, 06:59   #15
SvenK
 
BKA-Trojaner, und keine Ahnung wie es läuft - Standard

BKA-Trojaner, und keine Ahnung wie es läuft



# AdwCleaner v2.002 - Datei am 10/01/2012 um 06:53:29 erstellt
# Aktualisiert am 16/09/2012 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Sven - SVEN-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Sven\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****


***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKLM\Software\Conduit

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16421

Wiederhergestellt : [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Wiederhergestellt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Wiederhergestellt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Wiederhergestellt : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Wiederhergestellt : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Wiederhergestellt : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Wiederhergestellt : [HKU\S-1-5-21-1241931330-1321431864-582149410-1000\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

-\\ Google Chrome v17.0.963.56

Datei : C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[R1].txt - [879 octets] - [16/09/2012 22:14:40]
AdwCleaner[S1].txt - [1513 octets] - [01/10/2012 06:53:29]

########## EOF - C:\AdwCleaner[S1].txt - [1573 octets] ##########

Antwort

Themen zu BKA-Trojaner, und keine Ahnung wie es läuft
abgesicherte, abgesicherten, backdoor.bot, bka trojaner, forum, funktioniert, mitglieder, natürlich, neustart, rechner, spyware.zbot, spyware.zbot.gen, trojan.agent, trojan.agent.azbgen, trojan.agent.tkh, trojan.downloader, trojan.dropper, trojan.inject, trojan.msil, trojan.passwords, trojan.ransom, trojan.vupx.pti1, trojan.winlock, trojan.winlock.g, trojaner



Ähnliche Themen: BKA-Trojaner, und keine Ahnung wie es läuft


  1. 4 Trojaner auf Laptop und keine Ahnung was zu tun?
    Plagegeister aller Art und deren Bekämpfung - 08.01.2014 (1)
  2. GVU Trojaner bei einem von drei Benutzern und keine Ahnung
    Plagegeister aller Art und deren Bekämpfung - 12.08.2013 (3)
  3. GVU-Trojaner und keine Ahnung...
    Plagegeister aller Art und deren Bekämpfung - 05.04.2013 (35)
  4. GVU-Trojaner und keine Ahnung
    Plagegeister aller Art und deren Bekämpfung - 02.02.2013 (15)
  5. BKA-Trojaner und keine Ahnung wie ich ihn beseitigen soll
    Plagegeister aller Art und deren Bekämpfung - 02.08.2011 (9)
  6. trojaner der alles heranzoomt habe keine ahnung:'(
    Plagegeister aller Art und deren Bekämpfung - 12.10.2010 (19)
  7. trojaner-Deusche bank und voll keine ahnung
    Plagegeister aller Art und deren Bekämpfung - 28.09.2010 (1)
  8. Trojaner eingefangen, keine ahnung was ich tun soll
    Plagegeister aller Art und deren Bekämpfung - 17.01.2010 (24)
  9. Virus, Malware, Trojaner und keine Ahnung von Computern.
    Plagegeister aller Art und deren Bekämpfung - 06.01.2010 (41)
  10. Ein Trojaner auf dem PC und keine Ahnung davon
    Log-Analyse und Auswertung - 19.08.2009 (7)
  11. Trojaner an Bord! Keine Ahnung was ich tun soll
    Plagegeister aller Art und deren Bekämpfung - 12.02.2009 (8)
  12. Habe Trojaner problem aber keine Ahnung :-o
    Log-Analyse und Auswertung - 27.07.2006 (2)
  13. Hilfe trojaner ich hab keine ahnung davon
    Log-Analyse und Auswertung - 27.05.2006 (5)
  14. Trojaner auf dem Rechner+keine Ahnung=Riesenproblem!
    Log-Analyse und Auswertung - 08.02.2006 (6)
  15. Trojaner... und keine ahnung was tun....!?
    Plagegeister aller Art und deren Bekämpfung - 17.01.2006 (6)
  16. Oh scheiße- ich hab keine Ahnung-wie ich die Trojaner los werde
    Log-Analyse und Auswertung - 17.01.2005 (11)
  17. wurm oder trojaner-keine ahnung?
    Antiviren-, Firewall- und andere Schutzprogramme - 26.04.2004 (1)

Zum Thema BKA-Trojaner, und keine Ahnung wie es läuft - Hallo liebe Forenmitglieder und Helfer, ich habe mir gestern abend dann auch diesen BKA Trojaner gefangen. Leider muss ich gestehen, das ich reiner Anwender bin, und nicht viel Ahnung habe. - BKA-Trojaner, und keine Ahnung wie es läuft...
Archiv
Du betrachtest: BKA-Trojaner, und keine Ahnung wie es läuft auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.